Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 28, 2026, 10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
254241	4.3	警告	アクセラテクノロジ	-	Accela BizSearch の標準検索画面におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	-	2011-05-26 10:03	2010-04-25	Show	GitHub Exploit DB Packet Storm

254242	5	警告	The Perl Foundation レッドハット	-	Perl の lc、lcfirst、uc および ucfirst 関数における汚染 (Taint) 保護メカニズムを回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-1487	2011-05-26 09:55	2011-03-1	Show	GitHub Exploit DB Packet Storm

254243	7.5	危険	IBM サイバートラスト株式会社サン・マイクロシステムズ Sendmail Consortium ターボリナックスヒューレット・パッカードレッドハット	-	sendmail における X.509 証明書の処理に関する任意の SSL-based SMTP サーバになりすまされる脆弱性	CWE-310 暗号の問題	CVE-2009-4565	2011-05-26 09:52	2010-01-4	Show	GitHub Exploit DB Packet Storm

254244	5	警告	シックス・アパート株式会社	-	Movable Type におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-5845	2011-05-25 14:03	2011-05-25	Show	GitHub Exploit DB Packet Storm

254245	9.3	危険	マイクロソフト	-	Microsoft PowerPoint におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2011-1270	2011-05-25 12:24	2011-05-10	Show	GitHub Exploit DB Packet Storm

254246	9.3	危険	マイクロソフト	-	複数の Microsoft 製品における任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2011-1269	2011-05-25 12:22	2011-05-10	Show	GitHub Exploit DB Packet Storm

254247	9.3	危険	マイクロソフト	-	Microsoft Windows の WINS における任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2011-1248	2011-05-25 12:15	2011-05-10	Show	GitHub Exploit DB Packet Storm

254248	7.5	危険	サムスン	-	Samsung Integrated Management System DMS に SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4284	2011-05-25 12:12	2011-05-9	Show	GitHub Exploit DB Packet Storm

254249	5	警告	VMware	-	複数の VMware 製品の self-extracting インストーラにおけるソフトウェアの配布を偽造される脆弱性	CWE-310 暗号の問題	CVE-2011-1789	2011-05-25 12:09	2011-05-5	Show	GitHub Exploit DB Packet Storm

254250	-	-	Proofpoint, Inc.	-	Proofpoint Protection Server に複数の脆弱性	-	-	2011-05-25 12:07	2011-05-6	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
246731	6.5	MEDIUM Network	nagios	nagios_xi	An issue was discovered in Nagios XI 5.4.13. A registered user is able to use directory traversal to read local files, as demonstrated by URIs beginning with index.php?xiwindow=./ and config/?xiwindo…	CWE-22 Path Traversal	CVE-2018-10553	2024-11-21 12:41	2018-04-30	Show	GitHub Exploit DB Packet Storm

246732	8.8	HIGH Network	php canonical debian netapp	php ubuntu_linux debian_linux storage_automation_store	An issue was discovered in PHP before 5.6.36, 7.0.x before 7.0.30, 7.1.x before 7.1.17, and 7.2.x before 7.2.5. exif_read_data in ext/exif/exif.c has an out-of-bounds read for crafted JPEG data becau…	CWE-125 Out-of-bounds Read	CVE-2018-10549	2024-11-21 12:41	2018-04-30	Show	GitHub Exploit DB Packet Storm

246733	7.5	HIGH Network	php canonical debian netapp	php ubuntu_linux debian_linux storage_automation_store	An issue was discovered in PHP before 5.6.36, 7.0.x before 7.0.30, 7.1.x before 7.1.17, and 7.2.x before 7.2.5. ext/ldap/ldap.c allows remote LDAP servers to cause a denial of service (NULL pointer d…	CWE-476 NULL Pointer Dereference	CVE-2018-10548	2024-11-21 12:41	2018-04-30	Show	GitHub Exploit DB Packet Storm

246734	6.1	MEDIUM Network	php canonical debian netapp	php ubuntu_linux debian_linux storage_automation_store	An issue was discovered in ext/phar/phar_object.c in PHP before 5.6.36, 7.0.x before 7.0.30, 7.1.x before 7.1.17, and 7.2.x before 7.2.5. There is Reflected XSS on the PHAR 403 and 404 error pages vi…	CWE-79 Cross-site Scripting	CVE-2018-10547	2024-11-21 12:41	2018-04-30	Show	GitHub Exploit DB Packet Storm

246735	7.5	HIGH Network	php canonical debian netapp	php ubuntu_linux debian_linux storage_automation_store	An issue was discovered in PHP before 5.6.36, 7.0.x before 7.0.30, 7.1.x before 7.1.17, and 7.2.x before 7.2.5. An infinite loop exists in ext/iconv/iconv.c because the iconv stream filter does not r…	CWE-835 Loop with Unreachable Exit Condition ('Infinite Loop')	CVE-2018-10546	2024-11-21 12:41	2018-04-30	Show	GitHub Exploit DB Packet Storm

246736	4.7	MEDIUM Local	php canonical debian netapp	php ubuntu_linux debian_linux storage_automation_store	An issue was discovered in PHP before 5.6.35, 7.0.x before 7.0.29, 7.1.x before 7.1.16, and 7.2.x before 7.2.4. Dumpable FPM child processes allow bypassing opcache access controls because fpm_unix.c…	CWE-200 Information Exposure	CVE-2018-10545	2024-11-21 12:41	2018-04-30	Show	GitHub Exploit DB Packet Storm

246737	5.5	MEDIUM Local	wavpack debian	wavpack debian_linux	An issue was discovered in WavPack 5.1.0 and earlier for W64 input. Out-of-bounds writes can occur because ParseWave64HeaderConfig in wave64.c does not validate the sizes of unknown chunks before att…	CWE-787 Out-of-bounds Write	CVE-2018-10540	2024-11-21 12:41	2018-04-30	Show	GitHub Exploit DB Packet Storm

246738	5.5	MEDIUM Local	wavpack debian	wavpack debian_linux	An issue was discovered in WavPack 5.1.0 and earlier for DSDiff input. Out-of-bounds writes can occur because ParseDsdiffHeaderConfig in dsdiff.c does not validate the sizes of unknown chunks before …	CWE-787 Out-of-bounds Write	CVE-2018-10539	2024-11-21 12:41	2018-04-30	Show	GitHub Exploit DB Packet Storm

246739	5.5	MEDIUM Local	wavpack debian	wavpack debian_linux	An issue was discovered in WavPack 5.1.0 and earlier for WAV input. Out-of-bounds writes can occur because ParseRiffHeaderConfig in riff.c does not validate the sizes of unknown chunks before attempt…	CWE-787 Out-of-bounds Write	CVE-2018-10538	2024-11-21 12:41	2018-04-30	Show	GitHub Exploit DB Packet Storm

246740	7.8	HIGH Local	wavpack debian	wavpack debian_linux	An issue was discovered in WavPack 5.1.0 and earlier. The W64 parser component contains a vulnerability that allows writing to memory because ParseWave64HeaderConfig in wave64.c does not reject multi…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2018-10537	2024-11-21 12:41	2018-04-30	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed