Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 21, 2026, 10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
254381	6.8	警告	The PHP Group	-	PHP の set_magic_quotes_runtime 関数における SQL インジェクション攻撃を誘導される脆弱性	CWE-89 SQLインジェクション	CVE-2010-4700	2011-02-18 14:42	2010-07-1	Show	GitHub Exploit DB Packet Storm

254382	7.5	危険	The PHP Group	-	PHP の iconv_mime_decode_headers 関数におけるスパムの検出を回避される脆弱性	CWE-189 数値処理の問題	CVE-2010-4699	2011-02-18 14:40	2010-09-28	Show	GitHub Exploit DB Packet Storm

254383	5	警告	The PHP Group	-	PHP の GD 拡張モジュールにおけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-4698	2011-02-18 14:38	2010-12-7	Show	GitHub Exploit DB Packet Storm

254384	6.8	警告	The PHP Group	-	PHP の Zend Engine におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2010-4697	2011-02-18 14:35	2010-09-18	Show	GitHub Exploit DB Packet Storm

254385	1	注意	サン・マイクロシステムズ	-	Oracle Sun Java System Portal Server のプロキシにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-4431	2011-02-18 14:30	2011-01-18	Show	GitHub Exploit DB Packet Storm

254386	3.6	注意	オラクル	-	Oracle Solaris 9 の XScreenSaver における脆弱性	CWE-noinfo 情報不足	CVE-2010-3586	2011-02-18 14:28	2011-01-18	Show	GitHub Exploit DB Packet Storm

254387	3.6	注意	オラクル	-	Oracle Solaris 10 の Fault Manager Daemon における脆弱性	CWE-noinfo 情報不足	CVE-2010-4460	2011-02-18 14:11	2011-01-18	Show	GitHub Exploit DB Packet Storm

254388	4.1	警告	オラクル	-	Oracle Solaris 11 Express の ZFS における脆弱性	CWE-noinfo 情報不足	CVE-2010-4458	2011-02-18 14:08	2011-01-18	Show	GitHub Exploit DB Packet Storm

254389	4.1	警告	オラクル	-	Oracle Solaris の libc における脆弱性	CWE-noinfo 情報不足	CVE-2010-4415	2011-02-18 14:06	2011-01-18	Show	GitHub Exploit DB Packet Storm

254390	4.3	警告	サン・マイクロシステムズ	-	Oracle Sun Java System Communications Express の Web メールにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-4456	2011-02-18 14:03	2011-01-18	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 21, 2026, 4:10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
254211	9.8	CRITICAL Network	novosoft	handy_password	A buffer overflow in Handy Password 4.9.3 allows remote attackers to execute arbitrary code via a long "Title name" field in "mail box" data that is mishandled in an "Open from mail box" action.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2017-17946	2024-11-21 12:19	2018-01-11	Show	GitHub Exploit DB Packet Storm

254212	6.1	MEDIUM Network	avantfax	avantfax	AvantFAX 3.3.3 has XSS via an arbitrary parameter name to the default URI, as demonstrated by a parameter whose name contains a SCRIPT element and whose value is 1.	CWE-79 Cross-site Scripting	CVE-2017-18024	2024-11-21 12:19	2018-01-11	Show	GitHub Exploit DB Packet Storm

254213	6.1	MEDIUM Network	officetracker	officetracker	Office Tracker 11.2.5 has XSS via the logincount parameter to the /otweb/OTPClientLogin URI.	CWE-79 Cross-site Scripting	CVE-2017-18023	2024-11-21 12:19	2018-01-11	Show	GitHub Exploit DB Packet Storm

254214	8.8	HIGH Network	redmine debian	redmine debian_linux	Redmine before 3.2.9, 3.3.x before 3.3.6, and 3.4.x before 3.4.4 does not block the --config and --debugger flags to the Mercurial hg program, which allows remote attackers to execute arbitrary comma…	NVD-CWE-noinfo	CVE-2017-18026	2024-11-21 12:19	2018-01-10	Show	GitHub Exploit DB Packet Storm

254215	9.8	CRITICAL Network	innotube	itguard_manager	cgi-bin/drknow.cgi in Innotube ITGuard-Manager 0.0.0.1 allows remote attackers to execute arbitrary OS commands via shell metacharacters in the username field, as demonstrated by a username beginning…	CWE-78 OS Command	CVE-2017-18025	2024-11-21 12:19	2018-01-9	Show	GitHub Exploit DB Packet Storm

254216	6.5	MEDIUM Network	imagemagick canonical	imagemagick ubuntu_linux	In ImageMagick 7.0.7-12 Q16, there are memory leaks in MontageImageCommand in MagickWand/montage.c.	CWE-772 Missing Release of Resource after Effective Lifetime	CVE-2017-18022	2024-11-21 12:19	2018-01-6	Show	GitHub Exploit DB Packet Storm

254217	9.8	CRITICAL Network	qtpass	qtpass	It was discovered that QtPass before 1.2.1, when using the built-in password generator, generates possibly predictable and enumerable passwords. This only applies to the QtPass GUI.	CWE-338 Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)	CVE-2017-18021	2024-11-21 12:19	2018-01-6	Show	GitHub Exploit DB Packet Storm

254218	8.4	HIGH Local	samsung	samsung_mobile	On Samsung mobile devices with L(5.x), M(6.x), and N(7.x) software and Exynos chipsets, attackers can execute arbitrary code in the bootloader because S Boot omits a size check during a copy of ramfs…	CWE-20 Improper Input Validation	CVE-2017-18020	2024-11-21 12:19	2018-01-4	Show	GitHub Exploit DB Packet Storm

254219	7.1	HIGH Local	k7computing	total_security	In K7 Total Security before 15.1.0.305, user-controlled input to the K7Sentry device is not sufficiently sanitized: the user-controlled input can be used to compare an arbitrary memory address with a…	CWE-20 Improper Input Validation	CVE-2017-18019	2024-11-21 12:19	2018-01-4	Show	GitHub Exploit DB Packet Storm

254220	4.7	MEDIUM Local	gnu	coreutils	In GNU Coreutils through 8.29, chown-core.c in chown and chgrp does not prevent replacement of a plain file with a symlink during use of the POSIX "-R -L" options, which allows local users to modify …	CWE-362 Race Condition	CVE-2017-18018	2024-11-21 12:19	2018-01-4	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed