Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 14, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
254741 4.3 警告 MetInfo - MetInfo の search/search.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-4976 2011-12-9 14:40 2011-11-1 Show GitHub Exploit DB Packet Storm
254742 7.5 危険 Miniwork - Joomla! 用 Canteen コンポーネントの menu.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-4977 2011-12-9 14:39 2011-11-1 Show GitHub Exploit DB Packet Storm
254743 4.3 警告 Nicholas Berry - CANDID の image/view.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-4978 2011-12-9 14:39 2011-11-1 Show GitHub Exploit DB Packet Storm
254744 7.5 危険 Nicholas Berry - CANDID の image/view.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-4979 2011-12-9 14:38 2011-11-1 Show GitHub Exploit DB Packet Storm
254745 7.5 危険 iScripts - iScripts ReserveLogic の packagedetails.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-4980 2011-12-9 14:38 2011-11-1 Show GitHub Exploit DB Packet Storm
254746 7.5 危険 YourFreeWorld.com - YourFreeWorld Banner Management における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-4981 2011-12-9 14:37 2011-11-1 Show GitHub Exploit DB Packet Storm
254747 7.5 危険 My Kazaam - My Kazaam Address & Contact Organizer における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-4982 2011-12-9 14:36 2011-11-1 Show GitHub Exploit DB Packet Storm
254748 7.5 危険 iScripts - iScripts CyberMatch における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-4983 2011-12-9 14:36 2011-11-1 Show GitHub Exploit DB Packet Storm
254749 7.5 危険 My Kazaam - My Kazaam Notes Management System における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-4984 2011-12-9 14:35 2011-11-1 Show GitHub Exploit DB Packet Storm
254750 4.3 警告 My Kazaam - My Kazaam Notes Management System におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-4985 2011-12-9 14:35 2011-11-1 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 14, 2026, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
246331 7.5 HIGH
Network 		lucky9 lucky9io The fallback function of a simple lottery smart contract implementation for Lucky9io, an Ethereum gambling game, generates a random value with the publicly readable variable entry_number. This variab… CWE-338
 Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) 		CVE-2018-17071 2024-11-21 12:53 2018-09-19 Show GitHub Exploit DB Packet Storm
246332 7.5 HIGH
Network 		monstra monstra admin/index.php in Monstra CMS 3.0.4 allows arbitrary directory listing via id=filesmanager&path=uploads/.......//./.......//./ requests. CWE-22
Path Traversal 		CVE-2018-16820 2024-11-21 12:53 2018-09-19 Show GitHub Exploit DB Packet Storm
246333 4.9 MEDIUM
Network 		monstra monstra admin/index.php in Monstra CMS 3.0.4 allows arbitrary file deletion via id=filesmanager&path=uploads/.......//./.......//./&delete_file= requests. CWE-22
Path Traversal 		CVE-2018-16819 2024-11-21 12:53 2018-09-19 Show GitHub Exploit DB Packet Storm
246334 8.6 HIGH
Network 		microsoft active_directory_federation_services Microsoft ADFS 4.0 Windows Server 2016 and previous (Active Directory Federation Services) has an SSRF vulnerability via the txtBoxEmail parameter in /adfs/ls. CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2018-16794 2024-11-21 12:53 2018-09-19 Show GitHub Exploit DB Packet Storm
246335 5.3 MEDIUM
Network 		circontrol circarlife_scada An issue was discovered in CIRCONTROL CirCarLife before 4.3. There is system software information disclosure due to lack of authentication for /html/device-id. CWE-200
Information Exposure 		CVE-2018-16671 2024-11-21 12:53 2018-09-19 Show GitHub Exploit DB Packet Storm
246336 5.3 MEDIUM
Network 		circontrol circarlife_scada An issue was discovered in CIRCONTROL CirCarLife before 4.3. There is PLC status disclosure due to lack of authentication for /html/devstat.html. CWE-287
Improper Authentication 		CVE-2018-16670 2024-11-21 12:53 2018-09-19 Show GitHub Exploit DB Packet Storm
246337 9.8 CRITICAL
Network 		circontrol open_charge_point_protocol An issue was discovered in CIRCONTROL Open Charge Point Protocol (OCPP) before 1.5.0, as used in CirCarLife, PowerStudio, and other products. Due to storage of credentials in XML files, an unprivileg… CWE-522
 Insufficiently Protected Credentials 		CVE-2018-16669 2024-11-21 12:53 2018-09-19 Show GitHub Exploit DB Packet Storm
246338 5.3 MEDIUM
Network 		circontrol circarlife_scada An issue was discovered in CIRCONTROL CirCarLife before 4.3. There is internal installation path disclosure due to the lack of authentication for /html/repository. CWE-287
Improper Authentication 		CVE-2018-16668 2024-11-21 12:53 2018-09-19 Show GitHub Exploit DB Packet Storm
246339 9.8 CRITICAL
Network 		western_digital my_cloud_wdbctl0020hwt_firmware
my_cloud_pr4100
my_cloud_pr2100_firmware
my_cloud_mirror_gen_2_firmware
my_cloud_mirror_firmware
my_cloud_ex4100
my_cloud_ex4_firmware
my_cloud_ex… 		It was discovered that the Western Digital My Cloud device before 2.30.196 is affected by an authentication bypass vulnerability. An unauthenticated attacker can exploit this vulnerability to authent… CWE-287
Improper Authentication 		CVE-2018-17153 2024-11-21 12:53 2018-09-19 Show GitHub Exploit DB Packet Storm
246340 6.1 MEDIUM
Network 		oracle webcenter_interaction The login function of Oracle WebCenter Interaction Portal 10.3.3 is vulnerable to reflected cross-site scripting (XSS). The content of the in_hi_redirect parameter, when prefixed with the https:// sc… CWE-79
Cross-site Scripting 		CVE-2018-16955 2024-11-21 12:53 2018-09-18 Show GitHub Exploit DB Packet Storm