Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 24, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
253981 10 危険 IBM - IBM Rational ClearQuest における .ocx ファイルに関する処理に不備がある脆弱性 CWE-noinfo
情報不足 		CVE-2010-4601 2012-03-27 18:42 2009-11-2 Show GitHub Exploit DB Packet Storm
253982 4.3 警告 Mozilla Foundation - Bugzilla の chart.cgi における CRLF インジェクションの脆弱性 CWE-94
コード・インジェクション 		CVE-2010-4572 2012-03-27 18:42 2011-01-28 Show GitHub Exploit DB Packet Storm
253983 4.3 警告 Mozilla Foundation - Bugzilla の duplicate-detection 機能におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-4570 2012-03-27 18:42 2011-01-28 Show GitHub Exploit DB Packet Storm
253984 4.3 警告 Mozilla Foundation - Bugzilla におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-4569 2012-03-27 18:42 2011-01-28 Show GitHub Exploit DB Packet Storm
253985 7.5 危険 Mozilla Foundation - Bugzilla における任意のアカウントにアクセスされる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-4568 2012-03-27 18:42 2011-01-28 Show GitHub Exploit DB Packet Storm
253986 4.3 警告 Mozilla Foundation - Bugzilla におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-4567 2012-03-27 18:42 2011-01-28 Show GitHub Exploit DB Packet Storm
253987 4.3 警告 SquirrelMail Project - SquirrelMail におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-4555 2012-03-27 18:42 2011-07-11 Show GitHub Exploit DB Packet Storm
253988 4.3 警告 SquirrelMail Project - SquirrelMail の functions/page_header.php におけるクリックジャック攻撃を誘発する脆弱性 CWE-20
不適切な入力確認 		CVE-2010-4554 2012-03-27 18:42 2011-07-12 Show GitHub Exploit DB Packet Storm
253989 9.3 危険 Opera Software ASA - Opera における詳細不明の脆弱性 CWE-DesignError
CVE-2010-4587 2012-03-27 18:42 2010-12-16 Show GitHub Exploit DB Packet Storm
253990 10 危険 Opera Software ASA - Opera のデフォルト設定における脆弱性 CWE-16
環境設定 		CVE-2010-4586 2012-03-27 18:42 2010-12-16 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 24, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
245901 9.8 CRITICAL
Network 		thinkphp thinkphp ThinkPHP 3.2.4 has SQL Injection via the count parameter because the Library/Think/Db/Driver/Mysql.class.php parseKey function mishandles the key variable. NOTE: a backquote character is not required… CWE-89
SQL Injection 		CVE-2018-18529 2024-11-21 12:56 2018-10-20 Show GitHub Exploit DB Packet Storm
245902 9.8 CRITICAL
Network 		owndms ownticket OwnTicket 2018-05-23 allows SQL Injection via the showTicketId or editTicketStatusId parameter. CWE-89
SQL Injection 		CVE-2018-18527 2024-11-21 12:56 2018-10-20 Show GitHub Exploit DB Packet Storm
245903 5.5 MEDIUM
Local 		elfutils_project
debian
redhat
opensuse
canonical 		elfutils
debian_linux
enterprise_linux_desktop
enterprise_linux_workstation
enterprise_linux_server
leap
ubuntu_linux 		Divide-by-zero vulnerabilities in the function arlib_add_symbols() in arlib.c in elfutils 0.174 allow remote attackers to cause a denial of service (application crash) with a crafted ELF file, as dem… CWE-369
 Divide By Zero 		CVE-2018-18521 2024-11-21 12:56 2018-10-20 Show GitHub Exploit DB Packet Storm
245904 6.5 MEDIUM
Network 		elfutils_project
debian
canonical
opensuse
redhat 		elfutils
debian_linux
ubuntu_linux
leap
enterprise_linux_desktop
enterprise_linux_workstation
enterprise_linux_server 		An Invalid Memory Address Dereference exists in the function elf_end in libelf in elfutils through v0.174. Although eu-size is intended to support ar files inside ar files, handle_ar in size.c closes… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2018-18520 2024-11-21 12:56 2018-10-20 Show GitHub Exploit DB Packet Storm
245905 9.8 CRITICAL
Network 		gxlcms gxlcms In \lib\admin\action\dataaction.class.php in Gxlcms v2.0, SQL Injection exists via the ids[] parameter. CWE-89
SQL Injection 		CVE-2018-18488 2024-11-21 12:56 2018-10-19 Show GitHub Exploit DB Packet Storm
245906 7.5 HIGH
Network 		gxlcms gxlcms In \lib\admin\action\dataaction.class.php in Gxlcms v2.0, the database backup filename generation uses mt_rand() unsafely, resulting in predictable database backup file locations. CWE-200
Information Exposure 		CVE-2018-18487 2024-11-21 12:56 2018-10-19 Show GitHub Exploit DB Packet Storm
245907 9.8 CRITICAL
Network 		phpshe phpshe An issue was discovered in PHPSHE 1.7. SQL injection exists via the admin.php?mod=user&act=del user_id[] parameter. CWE-89
SQL Injection 		CVE-2018-18486 2024-11-21 12:56 2018-10-19 Show GitHub Exploit DB Packet Storm
245908 7.5 HIGH
Network 		phpshe phpshe An issue was discovered in PHPSHE 1.7. admin.php?mod=db&act=del allows remote attackers to delete arbitrary files via directory traversal sequences in the dbname parameter. This can be leveraged to r… CWE-22
Path Traversal 		CVE-2018-18485 2024-11-21 12:56 2018-10-19 Show GitHub Exploit DB Packet Storm
245909 5.5 MEDIUM
Local 		gnu binutils An issue was discovered in cp-demangle.c in GNU libiberty, as distributed in GNU Binutils 2.31. Stack Exhaustion occurs in the C++ demangling functions provided by libiberty, and there is a stack con… CWE-674
 Uncontrolled Recursion 		CVE-2018-18484 2024-11-21 12:56 2018-10-19 Show GitHub Exploit DB Packet Storm
245910 7.8 HIGH
Local 		gnu binutils The get_count function in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.31, allows remote attackers to cause a denial of service (malloc called with the result of an integer-overflow… CWE-190
 Integer Overflow or Wraparound 		CVE-2018-18483 2024-11-21 12:56 2018-10-19 Show GitHub Exploit DB Packet Storm