Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 8, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
253761	6.4	警告	Widelands	-	Widelands におけるパストラバーサル攻撃を誘発される脆弱性	CWE-22 パス・トラバーサル	CVE-2011-4675	2011-12-12 18:21	2011-12-5	Show	GitHub Exploit DB Packet Storm

253762	5	警告	One Click Orgs	-	One Click Orgs のパスワードリセット機能におけるユーザアカウントを列挙される脆弱性	CWE-255 証明書・パスワード管理	CVE-2011-4678	2011-12-12 18:19	2011-12-6	Show	GitHub Exploit DB Packet Storm

253763	4	警告	One Click Orgs	-	One Click Orgs におけるサービス運用妨害 (ログイン障害) の脆弱性	CWE-255 証明書・パスワード管理	CVE-2011-4555	2011-12-12 18:18	2011-12-6	Show	GitHub Exploit DB Packet Storm

253764	5.5	警告	One Click Orgs	-	One Click Orgs における巧妙に細工された SMTP トラフィックを誘発する脆弱性	CWE-20 不適切な入力確認	CVE-2011-4554	2011-12-12 18:15	2011-12-6	Show	GitHub Exploit DB Packet Storm

253765	6.9	警告	Celery	-	Celery における権限を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-4356	2011-12-12 18:14	2011-12-5	Show	GitHub Exploit DB Packet Storm

253766	7.5	危険	ヒューレット・パッカード	-	HP Protect Tools Device Access Manager における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2011-4162	2011-12-12 18:13	2011-12-1	Show	GitHub Exploit DB Packet Storm

253767	10	危険	ヒューレット・パッカード	-	HP CM8060 Color MFP その他の製品のデフォルト設定における任意のコードを実行される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-4161	2011-12-12 18:10	2011-11-30	Show	GitHub Exploit DB Packet Storm

253768	6.9	警告	マイクロソフト	-	Microsoft Windows 7 における Internet Explorer サンドボックスの制限を回避される脆弱性	CWE-noinfo 情報不足	CVE-2011-4695	2011-12-12 16:39	2011-12-7	Show	GitHub Exploit DB Packet Storm

253769	9.3	危険	アップルアドビシステムズマイクロソフト	-	Windows および Mac OS X 上で稼働する Adobe Flash Player における任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2011-4694	2011-12-12 16:38	2011-12-7	Show	GitHub Exploit DB Packet Storm

253770	9.3	危険	アップルアドビシステムズマイクロソフト	-	Windows および Mac OS X 上で稼働する Adobe Flash Player における任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2011-4693	2011-12-12 16:37	2011-12-7	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 9, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
246361	8.8	HIGH Network	emerson	deltav	DeltaV Versions 11.3.1, 12.3.1, 13.3.0, 13.3.1, and R5 is vulnerable due to improper path validation which may allow an attacker to replace executable files.	CWE-22 Path Traversal	CVE-2018-14795	2024-11-21 12:49	2018-08-21	Show	GitHub Exploit DB Packet Storm

246362	8.8	HIGH Adjacent	emerson	deltav	DeltaV Versions 11.3.1, 12.3.1, 13.3.0, 13.3.1, and R5 is vulnerable to a buffer overflow exploit through an open communication port to allow arbitrary code execution.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2018-14793	2024-11-21 12:49	2018-08-21	Show	GitHub Exploit DB Packet Storm

246363	6.5	MEDIUM Network	xmlsoft debian canonical	libxml2 debian_linux ubuntu_linux	libxml2 2.9.8, if --with-lzma is used, allows remote attackers to cause a denial of service (infinite loop) via a crafted XML file that triggers LZMA_MEMLIMIT_ERROR, as demonstrated by xmllint, a dif…	CWE-835 Loop with Unreachable Exit Condition ('Infinite Loop')	CVE-2018-14567	2024-11-21 12:49	2018-08-17	Show	GitHub Exploit DB Packet Storm

246364	8.1	HIGH Network	btrfsmaintenance_project	btrfsmaintenance	An issue was discovered in evaluate_auto_mountpoint in btrfsmaintenance-functions in btrfsmaintenance through 0.4.1. Code execution as root can occur via a specially crafted filesystem label if btrfs…	NVD-CWE-noinfo	CVE-2018-14722	2024-11-21 12:49	2018-08-16	Show	GitHub Exploit DB Packet Storm

246365	4.6	MEDIUM Physics	yubico	smart_card_minidriver piv_manager piv_tool	An out-of-bounds read issue was discovered in the Yubico-Piv 1.5.0 smartcard driver. The file lib/ykpiv.c contains the following code in the function `_ykpiv_fetch_object()`: {% highlight c %} if(sw …	CWE-125 Out-of-bounds Read	CVE-2018-14780	2024-11-21 12:49	2018-08-16	Show	GitHub Exploit DB Packet Storm

246366	6.8	MEDIUM Physics	yubico	smart_card_minidriver piv_manager piv_tool	A buffer overflow issue was discovered in the Yubico-Piv 1.5.0 smartcard driver. The file lib/ykpiv.c contains the following code in the function `ykpiv_transfer_data()`: {% highlight c %} if(*out_le…	CWE-119 CWE-787 Incorrect Access of Indexable Resource ('Range Error') Out-of-bounds Write	CVE-2018-14779	2024-11-21 12:49	2018-08-16	Show	GitHub Exploit DB Packet Storm

246367	7.5	HIGH Network	man-cgi_project	man-cgi	man-cgi before 1.16 allows Local File Inclusion via absolute path traversal, as demonstrated by a cgi-bin/man-cgi?/etc/passwd URI.	CWE-22 Path Traversal	CVE-2018-14429	2024-11-21 12:49	2018-08-15	Show	GitHub Exploit DB Packet Storm

246368	7.8	HIGH Local	gnome	gnome_display_manager	The daemon in GDM through 3.29.1 does not properly unexport display objects from its D-Bus interface when they are destroyed, which allows a local attacker to trigger a use-after-free via a specially…	CWE-416 Use After Free	CVE-2018-14424	2024-11-21 12:49	2018-08-15	Show	GitHub Exploit DB Packet Storm

246369	5.3	MEDIUM Adjacent	medtronicdiabetes	508_minimed_insulin_pump_firmware 522_paradigm_real-time_firmware 722_paradigm_real-time_firmware 523_paradigm_revel_firmware 723_paradigm_revel_firmware 523k_paradigm_revel_firmware	Medtronic MMT 508 MiniMed insulin pump, 522 / MMT - 722 Paradigm REAL-TIME, 523 / MMT - 723 Paradigm Revel, 523K / MMT - 723K Paradigm Revel, and 551 / MMT - 751 MiniMed 530G The models identified ab…	CWE-287 Improper Authentication	CVE-2018-14781	2024-11-21 12:49	2018-08-14	Show	GitHub Exploit DB Packet Storm

246370	7.8	HIGH Local	jetbrains	dotpeek resharper_ultimate	JetBrains dotPeek before 2018.2 and ReSharper Ultimate before 2018.1.4 allow attackers to execute code by decompiling a compiled .NET object (such as a DLL or EXE file) with a specific file, because …	CWE-502 Deserialization of Untrusted Data	CVE-2018-14878	2024-11-21 12:49	2018-08-14	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed