Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 1, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
254151	2.1	注意	レッドハット fedorahosted.org	-	SSSD の pam_parse_in_data_v2 関数におけるサービス運用妨害 (無限ループ、クラッシュおよびログイン防止) の脆弱性	CWE-399 リソース管理の問題	CVE-2010-4341	2011-08-1 10:57	2011-01-25	Show	GitHub Exploit DB Packet Storm

254152	10	危険	rsync.samba.org アップルレッドハット	-	rsync における隠しファイルを読込/書込される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2007-6200	2011-08-1 10:54	2007-12-1	Show	GitHub Exploit DB Packet Storm

254153	7.5	危険	アップル	-	Apple Mac OS X の ICU におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2011-0206	2011-08-1 10:44	2011-06-24	Show	GitHub Exploit DB Packet Storm

254154	6.8	警告	アップル	-	Apple Mac OS X の ImageIO におけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2011-0204	2011-08-1 10:43	2011-06-24	Show	GitHub Exploit DB Packet Storm

254155	6.8	警告	アップル	-	Apple Mac OS X の CoreGraphics における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2011-0202	2011-08-1 10:41	2011-06-24	Show	GitHub Exploit DB Packet Storm

254156	7.5	危険	アップル	-	Apple Mac OS X の CoreFoundation フレームワークにおける一つずれ (off-by-one) エラーの脆弱性	CWE-189 数値処理の問題	CVE-2011-0201	2011-08-1 10:40	2011-06-24	Show	GitHub Exploit DB Packet Storm

254157	6.8	警告	アップル	-	Apple Mac OS X の ColorSync における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2011-0200	2011-08-1 10:38	2011-06-24	Show	GitHub Exploit DB Packet Storm

254158	6.8	警告	オラクル	-	Oracle Secure Backup における脆弱性	CWE-noinfo 情報不足	CVE-2011-2252	2011-07-29 11:04	2011-07-19	Show	GitHub Exploit DB Packet Storm

254159	4.3	警告	オラクル	-	Oracle Secure Backup における脆弱性	CWE-noinfo 情報不足	CVE-2011-2251	2011-07-29 11:04	2011-07-19	Show	GitHub Exploit DB Packet Storm

254160	7.1	危険	オラクル	-	Oracle Database Server の Core RDBMS コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2011-2253	2011-07-29 11:03	2011-07-19	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 1, 2026, 4:12 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
246591	7.5	HIGH Network	dedecms	dedecms	DedeCMS through 5.7SP2 allows arbitrary file write in dede/file_manage_control.php via a dede/file_manage_view.php?fmdo=newfile request with name and str parameters, as demonstrated by writing to a n…	CWE-20 Improper Input Validation	CVE-2018-12046	2024-11-21 12:44	2018-06-8	Show	GitHub Exploit DB Packet Storm

246592	9.8	CRITICAL Network	dedecms	dedecms	DedeCMS through V5.7SP2 allows arbitrary file upload in dede/file_manage_control.php via a dede/file_manage_view.php?fmdo=upload request with an upfile1 parameter, as demonstrated by uploading a .php…	CWE-434 Unrestricted Upload of File with Dangerous Type	CVE-2018-12045	2024-11-21 12:44	2018-06-8	Show	GitHub Exploit DB Packet Storm

246593	7.5	HIGH Network	mediatek	awus036nh_firmware	An issue was discovered on the MediaTek AWUS036NH wireless USB adapter through 5.1.25.0. Attackers can remotely deny service by sending specially constructed 802.11 frames.	CWE-20 Improper Input Validation	CVE-2018-12041	2024-11-21 12:44	2018-06-8	Show	GitHub Exploit DB Packet Storm

246594	6.1	MEDIUM Network	getsymphony	symphony	content/content.blueprintspages.php in Symphony 2.7.6 has XSS via the pages content page.	CWE-79 Cross-site Scripting	CVE-2018-12043	2024-11-21 12:44	2018-06-8	Show	GitHub Exploit DB Packet Storm

246595	7.5	HIGH Network	roxyfileman	roxy_fileman	Roxy Fileman through v1.4.5 has Directory traversal via the php/download.php f parameter.	CWE-22 Path Traversal	CVE-2018-12042	2024-11-21 12:44	2018-06-8	Show	GitHub Exploit DB Packet Storm

246596	9.8	CRITICAL Network	joyplus-cms_project	joyplus-cms	joyplus-cms 1.6.0 allows Remote Code Execution because of an Arbitrary SQL command execution issue in manager/index.php involving use of a "/!select/" substring in place of a select substring.	CWE-89 SQL Injection	CVE-2018-12039	2024-11-21 12:44	2018-06-8	Show	GitHub Exploit DB Packet Storm

246597	7.8	HIGH Local	owasp	dependency-check	OWASP Dependency-Check before 3.2.0 allows attackers to write to arbitrary files via a crafted archive that holds directory traversal filenames.	CWE-22 CWE-123 Path Traversal Write-what-where Condition	CVE-2018-12036	2024-11-21 12:44	2018-06-8	Show	GitHub Exploit DB Packet Storm

246598	9.8	CRITICAL Network	eaton	intelligent_power_manager	Local file inclusion in Eaton Intelligent Power Manager v1.6 allows an attacker to include a file via server/node_upgrade_srv.js directory traversal with the firmware parameter in a downloadFirmware …	CWE-22 Path Traversal	CVE-2018-12031	2024-11-21 12:44	2018-06-8	Show	GitHub Exploit DB Packet Storm

246599	7.5	HIGH Network	gnome	epiphany	libephymain.so in GNOME Web (aka Epiphany) through 3.28.2.1 allows remote attackers to cause a denial of service (application crash) via certain window.open and document.write calls.	NVD-CWE-noinfo	CVE-2018-12016	2024-11-21 12:44	2018-06-7	Show	GitHub Exploit DB Packet Storm

246600	7.5	HIGH Network	canonical debian perl archive\ apple netapp	ubuntu_linux debian_linux perl \ mac_os_x snap_creator_framework data_ontap_edge snapdrive oncommand_workflow_automation	In Perl through 5.26.2, the Archive::Tar module allows remote attackers to bypass a directory-traversal protection mechanism, and overwrite arbitrary files, via an archive file containing a symlink a…	CWE-59 Link Following	CVE-2018-12015	2024-11-21 12:44	2018-06-7	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed