Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 31, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
254071	9.3	危険	アップル	-	Apple Safari にて使用される WebKit における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2011-0238	2011-08-9 10:01	2011-07-21	Show	GitHub Exploit DB Packet Storm

254072	9.3	危険	アップル	-	Apple Safari にて使用される WebKit における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2011-0237	2011-08-8 09:24	2011-07-21	Show	GitHub Exploit DB Packet Storm

254073	9.3	危険	アップル	-	Apple Safari にて使用される WebKit における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2011-0235	2011-08-8 09:23	2011-07-21	Show	GitHub Exploit DB Packet Storm

254074	9.3	危険	アップル	-	Apple Safari にて使用される WebKit における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2011-0234	2011-08-8 09:23	2011-07-21	Show	GitHub Exploit DB Packet Storm

254075	9.3	危険	アップル	-	Apple Safari にて使用される WebKit における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2011-0233	2011-08-8 09:22	2011-07-21	Show	GitHub Exploit DB Packet Storm

254076	9.3	危険	アップル	-	Apple Safari にて使用される WebKit における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2011-0232	2011-08-8 09:22	2011-07-21	Show	GitHub Exploit DB Packet Storm

254077	9.3	危険	アップル	-	Apple Safari にて使用される WebKit における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2011-0225	2011-08-8 09:20	2011-07-21	Show	GitHub Exploit DB Packet Storm

254078	9.3	危険	アップル	-	Apple Safari にて使用される WebKit における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2011-0223	2011-08-8 09:19	2011-07-21	Show	GitHub Exploit DB Packet Storm

254079	9.3	危険	アップル	-	Apple Safari にて使用される WebKit における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2011-0222	2011-08-8 09:19	2011-07-21	Show	GitHub Exploit DB Packet Storm

254080	9.3	危険	アップル	-	Apple Safari にて使用される WebKit における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2011-0221	2011-08-8 09:18	2011-07-21	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 1, 2026, 4:12 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
246571	5.4	MEDIUM Network	dimofinf	dimofinf_cms	Cross-site scripting (XSS) vulnerability in news.php in Dimofinf CMS Version 3.0.0 allows remote attackers to inject arbitrary web script or HTML via the id parameter.	CWE-79 Cross-site Scripting	CVE-2018-12094	2024-11-21 12:44	2018-06-11	Show	GitHub Exploit DB Packet Storm

246572	7.5	HIGH Network	tinyexr_project	tinyexr	tinyexr 0.9.5 has a memory leak in ParseEXRHeaderFromMemory in tinyexr.h.	CWE-772 Missing Release of Resource after Effective Lifetime	CVE-2018-12093	2024-11-21 12:44	2018-06-11	Show	GitHub Exploit DB Packet Storm

246573	9.8	CRITICAL Network	tinyexr_project	tinyexr	tinyexr 0.9.5 has a heap-based buffer over-read in tinyexr::DecodePixelData in tinyexr.h, related to OpenEXR code.	CWE-125 Out-of-bounds Read	CVE-2018-12092	2024-11-21 12:44	2018-06-11	Show	GitHub Exploit DB Packet Storm

246574	6.1	MEDIUM Network	lamsfoundation	lams	There is unauthenticated reflected cross-site scripting (XSS) in LAMS before 3.1 that allows a remote attacker to introduce arbitrary JavaScript via manipulation of an unsanitized GET parameter durin…	CWE-79 Cross-site Scripting	CVE-2018-12090	2024-11-21 12:44	2018-06-11	Show	GitHub Exploit DB Packet Storm

246575	7.5	HIGH Network	octopus	octopus_server	In Octopus Deploy version 2018.5.1 to 2018.5.7, a user with Task View is able to view a password for a Service Fabric Cluster, when the Service Fabric Cluster target is configured in Azure Active Dir…	CWE-200 Information Exposure	CVE-2018-12089	2024-11-21 12:44	2018-06-11	Show	GitHub Exploit DB Packet Storm

246576	7.5	HIGH Network	futurxe	futurxe	The transferFrom function of a smart contract implementation for FuturXE (FXE), an Ethereum ERC20 token, allows attackers to accomplish an unauthorized transfer of digital assets because of a logic e…	CWE-20 CWE-191 Improper Input Validation Integer Underflow (Wrap or Wraparound)	CVE-2018-12025	2024-11-21 12:44	2018-06-11	Show	GitHub Exploit DB Packet Storm

246577	7.5	HIGH Network	s3ql_project	s3ql	S3QL before 2.27 mishandles checksumming, and consequently allows replay attacks in which an attacker who controls the backend can present old versions of the filesystem metadata database as up-to-da…	CWE-20 Improper Input Validation	CVE-2018-12088	2024-11-21 12:44	2018-06-11	Show	GitHub Exploit DB Packet Storm

246578	8.8	HIGH Network	liblouis canonical opensuse	liblouis ubuntu_linux leap	Liblouis 3.6.0 has a stack-based Buffer Overflow in the function parseChars in compileTranslationTable.c, a different vulnerability than CVE-2018-11440.	CWE-787 Out-of-bounds Write	CVE-2018-12085	2024-11-21 12:44	2018-06-9	Show	GitHub Exploit DB Packet Storm

246579	7.5	HIGH Network	redhat canonical debian gnupg	enterprise_linux_desktop enterprise_linux_workstation enterprise_linux_server enterprise_linux_server_eus enterprise_linux_server_tus enterprise_linux_server_aus ubuntu_linux deb…	mainproc.c in GnuPG before 2.2.8 mishandles the original filename during decryption and verification actions, which allows remote attackers to spoof the output that GnuPG sends on file descriptor 2 t…	CWE-706 Use of Incorrectly-Resolved Name or Reference	CVE-2018-12020	2024-11-21 12:44	2018-06-9	Show	GitHub Exploit DB Packet Storm

246580	5.5	MEDIUM Local	bird_project	bird	BIRD Internet Routing Daemon before 1.6.4 allows local users to cause a denial of service (stack consumption and daemon crash) via BGP mask expressions in birdc.	CWE-400 Uncontrolled Resource Consumption	CVE-2018-12066	2024-11-21 12:44	2018-06-8	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed