Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 4, 2026, 4 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
255041	7.2	危険	マイクロソフト	-	Microsoft Windows の win32k.sys における権限昇格の脆弱性	CWE-399 リソース管理の問題	CVE-2011-0670	2011-05-6 11:11	2011-04-12	Show	GitHub Exploit DB Packet Storm

255042	7.2	危険	マイクロソフト	-	Microsoft Windows の win32k.sys における権限昇格の脆弱性	CWE-399 リソース管理の問題	CVE-2011-0667	2011-05-6 11:10	2011-04-12	Show	GitHub Exploit DB Packet Storm

255043	7.2	危険	マイクロソフト	-	Microsoft Windows の win32k.sys における権限昇格の脆弱性	CWE-399 リソース管理の問題	CVE-2011-0666	2011-05-6 11:09	2011-04-12	Show	GitHub Exploit DB Packet Storm

255044	7.2	危険	マイクロソフト	-	Microsoft Windows の win32k.sys における権限昇格の脆弱性	CWE-399 リソース管理の問題	CVE-2011-0665	2011-05-6 11:07	2011-04-12	Show	GitHub Exploit DB Packet Storm

255045	7.2	危険	マイクロソフト	-	Microsoft Windows の win32k.sys における権限昇格の脆弱性	CWE-399 リソース管理の問題	CVE-2011-0662	2011-05-6 11:06	2011-04-12	Show	GitHub Exploit DB Packet Storm

255046	9.3	危険	マイクロソフト	-	Microsoft Windows のワードパッドにおける任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2011-0028	2011-05-6 11:03	2011-04-12	Show	GitHub Exploit DB Packet Storm

255047	7.6	危険	マイクロソフト	-	Microsoft Windows の FAX 送付状エディター内にある fxscover.exe における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-3974	2011-05-6 11:01	2011-04-12	Show	GitHub Exploit DB Packet Storm

255048	9.3	危険	マイクロソフト	-	複数の Microsoft 製品における任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2011-0977	2011-05-6 11:00	2011-02-10	Show	GitHub Exploit DB Packet Storm

255049	9.3	危険	マイクロソフト	-	複数の Microsoft Office 製品における権限昇格の脆弱性	CWE-Other その他	CVE-2011-0107	2011-05-6 10:59	2011-04-12	Show	GitHub Exploit DB Packet Storm

255050	9.3	危険	マイクロソフト	-	複数の Microsoft 製品における任意のコードを実行される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-0976	2011-05-6 10:58	2011-02-10	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 4, 2026, 4:17 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
246521	5.4	MEDIUM Network	cyberark	endpoint_privilege_manager	In CyberArk Endpoint Privilege Manager (formerly Viewfinity) 10.2.1.603, there is persistent XSS via an account name on the create token screen, the VfManager.asmx SelectAccounts->DisplayName screen,…	CWE-79 Cross-site Scripting	CVE-2018-12903	2024-11-21 12:46	2018-06-27	Show	GitHub Exploit DB Packet Storm

246522	6.1	MEDIUM Network	easymagazine_project	easymagazine	In Easy Magazine through 2012-10-26, there is XSS in the search bar of the web site.	CWE-79 Cross-site Scripting	CVE-2018-12902	2024-11-21 12:46	2018-06-27	Show	GitHub Exploit DB Packet Storm

246523	8.8	HIGH Network	libtiff canonical	libtiff ubuntu_linux	Heap-based buffer overflow in the cpSeparateBufToContigBuf function in tiffcp.c in LibTIFF 3.9.3, 3.9.4, 3.9.5, 3.9.6, 3.9.7, 4.0.0beta7, 4.0.0alpha4, 4.0.0alpha5, 4.0.0alpha6, 4.0.0, 4.0.1, 4.0.2, 4…	CWE-787 Out-of-bounds Write	CVE-2018-12900	2024-11-21 12:46	2018-06-27	Show	GitHub Exploit DB Packet Storm

246524	8.8	HIGH Network	wordpress debian	wordpress debian_linux	WordPress through 4.9.6 allows Author users to execute arbitrary code by leveraging directory traversal in the wp-admin/post.php thumb parameter, which is passed to the PHP unlink function and can de…	CWE-22 Path Traversal	CVE-2018-12895	2024-11-21 12:46	2018-06-27	Show	GitHub Exploit DB Packet Storm

246525	9.8	CRITICAL Network	ccn-lite	ccn-lite	An issue was discovered in CCN-lite 2.0.1. There is a heap-based buffer overflow in mkAddToRelayCacheRequest and in ccnl_populate_cache for an array lacking '\0' termination when reading a binary CCN…	CWE-787 Out-of-bounds Write	CVE-2018-12889	2024-11-21 12:46	2018-06-26	Show	GitHub Exploit DB Packet Storm

246526	6.5	MEDIUM Network	octopus	octopus_deploy	In Octopus Deploy 3.0 onwards (before 2018.6.7), an authenticated user with incorrect permissions may be able to create Accounts under the Infrastructure menu.	CWE-269 Improper Privilege Management	CVE-2018-12884	2024-11-21 12:46	2018-06-26	Show	GitHub Exploit DB Packet Storm

246527	9.8	CRITICAL Network	php canonical netapp	php ubuntu_linux storage_automation_store	exif_read_from_impl in ext/exif/exif.c in PHP 7.2.x through 7.2.7 allows attackers to trigger a use-after-free (in exif_read_from_file) because it closes a stream that it is not responsible for closi…	CWE-416 Use After Free	CVE-2018-12882	2024-11-21 12:46	2018-06-26	Show	GitHub Exploit DB Packet Storm

246528	5.4	MEDIUM Network	opensuse	open_build_service	A Externally Controlled Reference to a Resource in Another Sphere vulnerability in obs-service-download_files of openSUSE Open Build Service allows authenticated users to generate HTTP request agains…	-	CVE-2018-12475	2024-11-21 12:45	2020-09-1	Show	GitHub Exploit DB Packet Storm

246529	8.8	HIGH Network	mozilla	firefox thunderbird firefox_esr	An integer overflow vulnerability in the Skia library when allocating memory for edge builders on some systems with at least 16 GB of RAM. This results in the use of uninitialized memory, resulting i…	CWE-190 Integer Overflow or Wraparound	CVE-2018-12371	2024-11-21 12:45	2020-07-9	Show	GitHub Exploit DB Packet Storm

246530	7.5	HIGH Network	suse	obs-service-tar_scm	Relative Path Traversal vulnerability in obs-service-tar_scm of SUSE Linux Enterprise Server 15; openSUSE Factory allows remote attackers with control over a repository to overwrite files on the mach…	CWE-22 Path Traversal	CVE-2018-12476	2024-11-21 12:45	2020-01-27	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed