Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 15, 2026, 12:08 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
254901 7.5 危険 iScripts - iScripts ReserveLogic の packagedetails.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-4980 2011-12-9 14:38 2011-11-1 Show GitHub Exploit DB Packet Storm
254902 7.5 危険 YourFreeWorld.com - YourFreeWorld Banner Management における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-4981 2011-12-9 14:37 2011-11-1 Show GitHub Exploit DB Packet Storm
254903 7.5 危険 My Kazaam - My Kazaam Address & Contact Organizer における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-4982 2011-12-9 14:36 2011-11-1 Show GitHub Exploit DB Packet Storm
254904 7.5 危険 iScripts - iScripts CyberMatch における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-4983 2011-12-9 14:36 2011-11-1 Show GitHub Exploit DB Packet Storm
254905 7.5 危険 My Kazaam - My Kazaam Notes Management System における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-4984 2011-12-9 14:35 2011-11-1 Show GitHub Exploit DB Packet Storm
254906 4.3 警告 My Kazaam - My Kazaam Notes Management System におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-4985 2011-12-9 14:35 2011-11-1 Show GitHub Exploit DB Packet Storm
254907 7.5 危険 Cafuego - Simple Document Management System における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-4986 2011-12-9 14:34 2011-11-1 Show GitHub Exploit DB Packet Storm
254908 7.5 危険 KMSoft - KMSoft Guestbook の default.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-4987 2011-12-9 14:34 2011-11-1 Show GitHub Exploit DB Packet Storm
254909 7.5 危険 FamilyCMS - Family Connections Who is Chatting における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2010-4988 2011-12-9 14:33 2011-11-1 Show GitHub Exploit DB Packet Storm
254910 7.5 危険 Farsi CMS - Ziggurat Farsi CMS の main.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-4989 2011-12-9 14:28 2011-11-1 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 15, 2026, 4:10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
246451 6.5 MEDIUM
Network 		tp-link tl-wr886n_firmware An issue was discovered on TP-Link TL-WR886N 6.0 2.3.4 and TL-WR886N 7.0 1.1.0 devices. Authenticated attackers can crash router services (e.g., inetd, HTTP, DNS, and UPnP) via long JSON data for wla… NVD-CWE-noinfo
CVE-2018-17004 2024-11-21 12:53 2018-09-14 Show GitHub Exploit DB Packet Storm
246452 6.5 MEDIUM
Network 		libtiff
debian
canonical 		libtiff
debian_linux
ubuntu_linux 		A NULL pointer dereference in the function _TIFFmemcmp at tif_unix.c (called from TIFFWriteDirectoryTagTransferfunction) in LibTIFF 4.0.9 allows an attacker to cause a denial-of-service through a cra… CWE-476
 NULL Pointer Dereference 		CVE-2018-17000 2024-11-21 12:53 2018-09-14 Show GitHub Exploit DB Packet Storm
246453 5.5 MEDIUM
Local 		nasm netwide_assembler Netwide Assembler (NASM) 2.14rc15 has an invalid memory write (segmentation fault) in expand_smacro in preproc.c, which allows attackers to cause a denial of service via a crafted input file. CWE-787
 Out-of-bounds Write 		CVE-2018-16999 2024-11-21 12:53 2018-09-14 Show GitHub Exploit DB Packet Storm
246454 8.8 HIGH
Network 		hiscout grc_suite HiScout GRC Suite before 3.1.5 allows Unrestricted Upload of Files with Dangerous Types. CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2018-16796 2024-11-21 12:53 2018-09-14 Show GitHub Exploit DB Packet Storm
246455 7.8 HIGH
Local 		mgetty_project mgetty An issue was discovered in mgetty before 1.2.1. In fax_notify_mail() in faxrec.c, the mail_to parameter is not sanitized. It could allow a buffer overflow if long untrusted input can reach it. CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2018-16745 2024-11-21 12:53 2018-09-14 Show GitHub Exploit DB Packet Storm
246456 7.8 HIGH
Local 		mgetty_project mgetty An issue was discovered in mgetty before 1.2.1. In fax_notify_mail() in faxrec.c, the mail_to parameter is not sanitized. It could allow for command injection if untrusted input can reach it, because… CWE-78
NVD-CWE-noinfo
OS Command  		CVE-2018-16744 2024-11-21 12:53 2018-09-14 Show GitHub Exploit DB Packet Storm
246457 7.8 HIGH
Local 		mgetty_project mgetty An issue was discovered in mgetty before 1.2.1. In contrib/next-login/login.c, the command-line parameter username is passed unsanitized to strcpy(), which can cause a stack-based buffer overflow. CWE-787
 Out-of-bounds Write 		CVE-2018-16743 2024-11-21 12:53 2018-09-14 Show GitHub Exploit DB Packet Storm
246458 7.8 HIGH
Local 		mgetty_project mgetty An issue was discovered in mgetty before 1.2.1. In contrib/scrts.c, a stack-based buffer overflow can be triggered via a command-line parameter. CWE-787
 Out-of-bounds Write 		CVE-2018-16742 2024-11-21 12:53 2018-09-14 Show GitHub Exploit DB Packet Storm
246459 7.8 HIGH
Local 		mgetty_project
debian 		mgetty
debian_linux 		An issue was discovered in mgetty before 1.2.1. In fax/faxq-helper.c, the function do_activate() does not properly sanitize shell metacharacters to prevent command injection. It is possible to use th… CWE-78
OS Command  		CVE-2018-16741 2024-11-21 12:53 2018-09-14 Show GitHub Exploit DB Packet Storm
246460 7.2 HIGH
Network 		squashtest squash_tm Squash TM through 1.18.0 presents the cleartext passwords of external services in the administration panel, as demonstrated by a ta-server-password field in the HTML source code. CWE-522
 Insufficiently Protected Credentials 		CVE-2018-16987 2024-11-21 12:53 2018-09-14 Show GitHub Exploit DB Packet Storm