Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":June 12, 2026, 6 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 255731 | 6.4 | 警告 | きゅー | - | Megalith における認証回避の脆弱性 |
CWE-287
不適切な認証 |
CVE-2011-2671 | 2011-09-9 12:01 | 2011-09-9 | Show | GitHub Exploit DB Packet Storm |
| 255732 | 9.3 | 危険 | リアルネットワークス | - | RealNetworks RealPlayer および RealPlayer Enterprise における任意のコードを実行される脆弱性 |
CWE-399
リソース管理の問題 |
CVE-2011-2952 | 2011-09-9 10:08 | 2011-08-16 | Show | GitHub Exploit DB Packet Storm |
| 255733 | 9.3 | 危険 | リアルネットワークス | - | RealNetworks RealPlayer におけるバッファオーバーフローの脆弱性 |
CWE-119
バッファエラー |
CVE-2011-2951 | 2011-09-9 10:08 | 2011-08-16 | Show | GitHub Exploit DB Packet Storm |
| 255734 | 9.3 | 危険 | リアルネットワークス | - | RealNetworks RealPlayer の qcpfformat.dll におけるヒープベースのバッファオーバーフローの脆弱性 |
CWE-119
バッファエラー |
CVE-2011-2950 | 2011-09-9 10:07 | 2011-08-16 | Show | GitHub Exploit DB Packet Storm |
| 255735 | 9.3 | 危険 | リアルネットワークス | - | RealNetworks RealPlayer および RealPlayer Enterprise におけるヒープベースのバッファオーバーフローの脆弱性 |
CWE-119
バッファエラー |
CVE-2011-2949 | 2011-09-9 10:06 | 2011-08-16 | Show | GitHub Exploit DB Packet Storm |
| 255736 | 9.3 | 危険 | リアルネットワークス | - | RealNetworks RealPlayer および RealPlayer Enterprise における任意のコードを実行される脆弱性 |
CWE-119
バッファエラー |
CVE-2011-2948 | 2011-09-9 10:05 | 2011-08-16 | Show | GitHub Exploit DB Packet Storm |
| 255737 | 3.7 | 注意 | オラクル | - | Oracle VM VirtualBox における Guest Additions for Windows の処理に関する脆弱性 |
CWE-noinfo
情報不足 |
CVE-2011-2300 | 2011-09-9 09:57 | 2011-07-19 | Show | GitHub Exploit DB Packet Storm |
| 255738 | 6.2 | 警告 | オラクル | - | Oracle VM VirtualBox の脆弱性 |
CWE-noinfo
情報不足 |
CVE-2011-2305 | 2011-09-9 09:54 | 2011-07-19 | Show | GitHub Exploit DB Packet Storm |
| 255739 | 3.5 | 注意 | オラクル | - | Oracle PeopleSoft Products の PeopleSoft Enterprise PeopleTools コンポーネントにおける脆弱性 |
CWE-noinfo
情報不足 |
CVE-2011-2274 | 2011-09-9 09:52 | 2011-07-19 | Show | GitHub Exploit DB Packet Storm |
| 255740 | 3.5 | 注意 | オラクル | - | Oracle PeopleSoft Products の PeopleSoft Enterprise PeopleTools コンポーネントにおける脆弱性 |
CWE-noinfo
情報不足 |
CVE-2011-2282 | 2011-09-9 09:51 | 2011-07-19 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:June 12, 2026, 4:20 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 249511 | 6.8 |
MEDIUM
Physics |
apollotechnologiesinc |
momentum_axel_720p_firmware momentum_axel_720p |
An issue was discovered on Momentum Axel 720P 5.1.8 devices. A password of EHLGVG is hard-coded for the root and admin accounts, which makes it easier for physically proximate attackers to login at t… |
CWE-798
Use of Hard-coded Credentials |
CVE-2018-12323 | 2024-11-21 12:44 | 2018-06-14 | Show | GitHub Exploit DB Packet Storm |
| 249512 | 5.5 |
MEDIUM
Local |
radare | radare2 | There is a heap out of bounds read in radare2 2.6.0 in _6502_op() in libr/anal/p/anal_6502.c via a crafted iNES ROM binary file. |
CWE-125
Out-of-bounds Read |
CVE-2018-12322 | 2024-11-21 12:44 | 2018-06-14 | Show | GitHub Exploit DB Packet Storm |
| 249513 | 7.8 |
HIGH
Local |
radare | radare2 | There is a heap out of bounds read in radare2 2.6.0 in java_switch_op() in libr/anal/p/anal_java.c via a crafted Java binary file. |
CWE-125
Out-of-bounds Read |
CVE-2018-12321 | 2024-11-21 12:44 | 2018-06-14 | Show | GitHub Exploit DB Packet Storm |
| 249514 | 7.8 |
HIGH
Local |
radare | radare2 | There is a use after free in radare2 2.6.0 in r_anal_bb_free() in libr/anal/bb.c via a crafted Java binary file. |
CWE-416
Use After Free |
CVE-2018-12320 | 2024-11-21 12:44 | 2018-06-14 | Show | GitHub Exploit DB Packet Storm |
| 249515 | 8.2 |
HIGH
Local |
qemu canonical redhat debian |
qemu ubuntu_linux enterprise_linux_desktop enterprise_linux_workstation enterprise_linux_server enterprise_linux_eus openstack enterprise_linux_server_tus enterprise_linux_ser… |
m_cat in slirp/mbuf.c in Qemu has a heap-based buffer overflow via incoming fragmented datagrams. |
CWE-787
Out-of-bounds Write |
CVE-2018-11806 | 2024-11-21 12:44 | 2018-06-14 | Show | GitHub Exploit DB Packet Storm |
| 249516 | 9.8 |
CRITICAL
Network |
palemoon | pale_moon | A use-after-free vulnerability exists in DOMProxyHandler::EnsureExpandoObject in Pale Moon before 27.9.3. |
CWE-416
Use After Free |
CVE-2018-12292 | 2024-11-21 12:44 | 2018-06-13 | Show | GitHub Exploit DB Packet Storm |
| 249517 | 7.5 |
HIGH
Network |
matrix | synapse | The on_get_missing_events function in handlers/federation.py in Matrix Synapse before 0.31.1 has a security bug in the get_missing_events federation API where event visibility rules were not applied … |
NVD-CWE-noinfo
|
CVE-2018-12291 | 2024-11-21 12:44 | 2018-06-13 | Show | GitHub Exploit DB Packet Storm |
| 249518 | 6.1 |
MEDIUM
Network |
yii2-statemachine | yii2-statemachine | The Yii2-StateMachine extension v2.x.x for Yii2 has XSS. |
CWE-79
Cross-site Scripting |
CVE-2018-12290 | 2024-11-21 12:44 | 2018-06-13 | Show | GitHub Exploit DB Packet Storm |
| 249519 | 6.1 |
MEDIUM
Network |
ximdex | ximdex | The /edit URI in the DMS component in Ximdex 4.0 has XSS via the Ciudad or Nombre parameter. |
CWE-79
Cross-site Scripting |
CVE-2018-12273 | 2024-11-21 12:44 | 2018-06-13 | Show | GitHub Exploit DB Packet Storm |
| 249520 | 6.1 |
MEDIUM
Network |
ximdex | ximdex | xowl/request.php in Ximdex 4.0 has XSS via the content parameter. |
CWE-79
Cross-site Scripting |
CVE-2018-12272 | 2024-11-21 12:44 | 2018-06-13 | Show | GitHub Exploit DB Packet Storm |