Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 8, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
254561	7.6	危険	アップル	-	Apple iTunes で使用される CoreFoundation におけるサービス運用妨害 (DoS) の脆弱性	CWE-119 バッファエラー	CVE-2011-0259	2011-10-24 11:07	2011-10-12	Show	GitHub Exploit DB Packet Storm

254562	9.3	危険	マイクロソフト	-	Microsoft Internet Explorer 8 における任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2011-1999	2011-10-21 15:40	2011-10-11	Show	GitHub Exploit DB Packet Storm

254563	9.3	危険	マイクロソフト	-	Microsoft Internet Explorer 9 における任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2011-1998	2011-10-21 15:39	2011-10-11	Show	GitHub Exploit DB Packet Storm

254564	9.3	危険	マイクロソフト	-	Microsoft Internet Explorer 6 における任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2011-1997	2011-10-21 15:39	2011-10-11	Show	GitHub Exploit DB Packet Storm

254565	9.3	危険	マイクロソフト	-	Microsoft Internet Explorer 6 から 8 における任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2011-1996	2011-10-21 15:38	2011-10-11	Show	GitHub Exploit DB Packet Storm

254566	9.3	危険	マイクロソフト	-	Microsoft Internet Explorer 6 から 9 における任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2011-1995	2011-10-21 15:35	2011-10-11	Show	GitHub Exploit DB Packet Storm

254567	9.3	危険	マイクロソフト	-	Microsoft Internet Explorer 6 から 9 における任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2011-1993	2011-10-21 15:34	2011-10-11	Show	GitHub Exploit DB Packet Storm

254568	7.2	危険	マイクロソフト	-	Microsoft Windows XP および Windows Server 2003 の afd.sys における権限昇格の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-2005	2011-10-21 15:34	2011-10-11	Show	GitHub Exploit DB Packet Storm

254569	5	警告	マイクロソフト	-	Microsoft Windows XP および Windows Server 2003 における権限昇格の脆弱性	CWE-20 不適切な入力確認	CVE-2011-2012	2011-10-21 15:31	2011-10-11	Show	GitHub Exploit DB Packet Storm

254570	9.3	危険	マイクロソフト	-	Microsoft Forefront UAG の MicrosoftClient.jar における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2011-1969	2011-10-21 15:31	2011-10-11	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 9, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
246341	8.8	HIGH Network	vivotek	camera	VIVOTEK FD8177 devices before XXXXXX-VVTK-xx06a allow remote attackers to execute arbitrary code (issue 1 of 2) via the ONVIF interface, (/onvif/device_service).	NVD-CWE-noinfo	CVE-2018-14770	2024-11-21 12:49	2018-09-6	Show	GitHub Exploit DB Packet Storm

246342	8.8	HIGH Network	vivotek	camera	VIVOTEK FD8177 devices before XXXXXX-VVTK-xx06a allow CSRF.	CWE-352 Origin Validation Error	CVE-2018-14769	2024-11-21 12:49	2018-09-6	Show	GitHub Exploit DB Packet Storm

246343	9.8	CRITICAL Network	haxx canonical debian redhat	libcurl ubuntu_linux debian_linux enterprise_linux	curl before version 7.61.1 is vulnerable to a buffer overrun in the NTLM authentication code. The internal function Curl_ntlm_core_mk_nt_hash multiplies the length of the password by two (SUM) to fig…	CWE-190 Integer Overflow or Wraparound	CVE-2018-14618	2024-11-21 12:49	2018-09-6	Show	GitHub Exploit DB Packet Storm

246344	5.9	MEDIUM Network	redhat	wildfly	The IIOP OpenJDK Subsystem in WildFly before version 14.0.0 does not honour configuration when SSL transport is required. Servers before this version that are configured with the following setting al…	CWE-319 Cleartext Transmission of Sensitive Information	CVE-2018-14627	2024-11-21 12:49	2018-09-4	Show	GitHub Exploit DB Packet Storm

246345	7.5	HIGH Network	libtirpc_project	libtirpc	An infinite loop vulnerability was found in libtirpc before version 1.0.2-rc2. With the port to using poll rather than select, exhaustion of file descriptors would cause the server to enter an infini…	CWE-835 Loop with Unreachable Exit Condition ('Infinite Loop')	CVE-2018-14621	2024-11-21 12:49	2018-08-30	Show	GitHub Exploit DB Packet Storm

246346	7.5	HIGH Network	redhat debian canonical libtirpc_project	enterprise_linux debian_linux ubuntu_linux enterprise_linux_server_aus enterprise_linux_server_eus enterprise_linux_workstation enterprise_linux_desktop libtirpc	A null-pointer dereference vulnerability was found in libtirpc before version 0.3.3-rc3. The return value of makefd_xprt() was not checked in all instances, which could lead to a crash when the serve…	CWE-252 Unchecked Return Value	CVE-2018-14622	2024-11-21 12:49	2018-08-30	Show	GitHub Exploit DB Packet Storm

246347	7.8	HIGH Local	linux	linux_kernel	A flaw was found in the crypto subsystem of the Linux kernel before version kernel-4.15-rc4. The "null skcipher" was being dropped when each af_alg_ctx was freed instead of when the aead_tfm was free…	CWE-20 Improper Input Validation	CVE-2018-14619	2024-11-21 12:49	2018-08-30	Show	GitHub Exploit DB Packet Storm

246348	8.8	HIGH Network	vivotek	camera	Various VIVOTEK FD8, FD9, FE9, IB8, IB9, IP9, IZ9, MS9, SD9*, and other devices before XXXXXX-VVTK-xx06a allow remote attackers to execute arbitrary code.	NVD-CWE-noinfo	CVE-2018-14768	2024-11-21 12:49	2018-08-30	Show	GitHub Exploit DB Packet Storm

246349	9.8	CRITICAL Network	hitachienergy	esoms	ABB eSOMS version 6.0.2 may allow unauthorized access to the system when LDAP is set to allow anonymous authentication, and specific key values within the eSOMS web.config file are present. Both cond…	CWE-287 Improper Authentication	CVE-2018-14805	2024-11-21 12:49	2018-08-30	Show	GitHub Exploit DB Packet Storm

246350	7.8	HIGH Local	pyconuk	conference-scheduler-cli	In conference-scheduler-cli, a pickle.load call on imported data allows remote attackers to execute arbitrary code via a crafted .pickle file, as demonstrated by Python code that contains an os.syste…	CWE-78 CWE-502 OS Command Deserialization of Untrusted Data	CVE-2018-14572	2024-11-21 12:49	2018-08-29	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed