Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 27, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
254211 9.3 危険 リアルネットワークス - RealNetworks Helix Server および Helix Mobile Server におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2010-4596 2012-03-27 18:42 2011-03-31 Show GitHub Exploit DB Packet Storm
254212 4.3 警告 ImpressCMS - ImpressCMS の modules/content/admin/content.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-4616 2012-03-27 18:42 2010-12-29 Show GitHub Exploit DB Packet Storm
254213 7.5 危険 iskenderaltuntas - Oto Galeri Sistemi における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-4615 2012-03-27 18:42 2010-12-29 Show GitHub Exploit DB Packet Storm
254214 7.5 危険 MH Products - Ero Auktion の item.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-4614 2012-03-27 18:42 2010-12-29 Show GitHub Exploit DB Packet Storm
254215 7.5 危険 Hycus CMS project - Hycus CMS におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2010-4613 2012-03-27 18:42 2010-12-29 Show GitHub Exploit DB Packet Storm
254216 6.8 警告 Hycus CMS project - Hycus CMS の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-4612 2012-03-27 18:42 2010-12-29 Show GitHub Exploit DB Packet Storm
254217 5 警告 html-edit - Html-edit CMS における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2010-4611 2012-03-27 18:42 2010-12-29 Show GitHub Exploit DB Packet Storm
254218 4.3 警告 html-edit - Html-edit CMS の index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-4610 2012-03-27 18:42 2010-12-29 Show GitHub Exploit DB Packet Storm
254219 7.5 危険 html-edit - Html-edit CMS の index.php におけるクロスサイトスクリプティングの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-4609 2012-03-27 18:42 2010-12-29 Show GitHub Exploit DB Packet Storm
254220 5 警告 habariproject - Habari における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2010-4608 2012-03-27 18:42 2010-12-4 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 27, 2026, 4:35 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
245951 5.4 MEDIUM
Network 		ibm rational_software_architect_design_manager
rational_collaborative_lifecycle_management
rational_quality_manager
rational_team_concert
rational_doors_next_generation
rational_engineerin… 		IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus alteri… CWE-79
Cross-site Scripting 		CVE-2018-1758 2024-11-21 13:00 2019-06-27 Show GitHub Exploit DB Packet Storm
245952 8.8 HIGH
Network 		ibm api_connect IBM API Connect 5.0.0.0 through 5.0.8.6 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the websit… CWE-352
 Origin Validation Error 		CVE-2018-1858 2024-11-21 13:00 2019-06-26 Show GitHub Exploit DB Packet Storm
245953 7.5 HIGH
Network 		urbackup urbackup In UrBackup 2.2.6, an attacker can send a malformed request to the client over the network, and trigger a fileservplugin/CClientThread.cpp CClientThread::ProcessPacket metadata_id!=0 assertion, leadi… CWE-20
 Improper Input Validation  		CVE-2018-20013 2024-11-21 13:00 2019-06-18 Show GitHub Exploit DB Packet Storm
245954 7.1 HIGH
Network 		ibm infosphere_information_server
infosphere_governance_catalog
infosphere_information_server_on_cloud
infosphere_information_server_business_glossary
infosphere_information_server_metadata_w… 		IBM InfoSphere Information Server 11.3, 11.5, and 11.7 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to ex… CWE-611
XXE 		CVE-2018-1845 2024-11-21 13:00 2019-06-18 Show GitHub Exploit DB Packet Storm
245955 8.1 HIGH
Network 		samsung galaxy_apps Samsung Galaxy Apps before 4.4.01.7 allows modification of the hostname used for load balancing on installations of applications through a man-in-the-middle attack. An attacker may trick Galaxy Apps … CWE-295
Improper Certificate Validation  		CVE-2018-20135 2024-11-21 13:00 2019-06-8 Show GitHub Exploit DB Packet Storm
245956 9.9 CRITICAL
Network 		cloudera data_science_workbench An SQL injection vulnerability was found in Cloudera Data Science Workbench (CDSW) 1.4.0 through 1.4.2. This would allow any authenticated user to run arbitrary queries against CDSW's internal databa… CWE-89
SQL Injection 		CVE-2018-20091 2024-11-21 13:00 2019-06-8 Show GitHub Exploit DB Packet Storm
245957 7.5 HIGH
Network 		urbackup urbackup In UrBackup 2.2.6, an attacker can send a malformed request to the client over the network, and trigger a fileservplugin/CClientThread.cpp CClientThread::GetFileHashAndMetadata NULL pointer dereferen… CWE-476
 NULL Pointer Dereference 		CVE-2018-20014 2024-11-21 13:00 2019-06-8 Show GitHub Exploit DB Packet Storm
245958 9.8 CRITICAL
Network 		synacor zimbra_collaboration_suite ZxChat (aka ZeXtras Chat), as used for zimbra-chat and zimbra-talk in Synacor Zimbra Collaboration Suite 8.7 and 8.8 and in other products, allows XXE attacks, as demonstrated by a crafted XML reques… CWE-611
XXE 		CVE-2018-20160 2024-11-21 13:00 2019-05-30 Show GitHub Exploit DB Packet Storm
245959 6.8 MEDIUM
Physics 		iball ib-wrb302n_firmware iBall Baton iB-WRB302N20122017 devices have improper access control over the UART interface, allowing physical attackers to discover Wi-Fi credentials (plain text) and the web-console password (base6… CWE-312
CWE-732
 Cleartext Storage of Sensitive Information
 Incorrect Permission Assignment for Critical Resource 		CVE-2018-20008 2024-11-21 13:00 2019-05-29 Show GitHub Exploit DB Packet Storm
245960 2.7 LOW
Network 		ibm api_connect IBM API Connect 5.0.0.0, and 5.0.8.6 could could return sensitive information that could provide critical information as to the underlying software stack in CMC UI headers. IBM X-Force ID: 154284. CWE-200
Information Exposure 		CVE-2018-1991 2024-11-21 13:00 2019-05-23 Show GitHub Exploit DB Packet Storm