Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 17, 2026, 2:01 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
256101 10 危険 Google
Mozilla Foundation
- Google Chrome の GPU プロセスにおけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2011-1302 2011-08-31 07:56 2011-04-14 Show GitHub Exploit DB Packet Storm
256102 5 警告 ターボリナックス
Timo Sirainen
レッドハット
- Dovecot の lib-mail/message-header-parser.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2011-1929 2011-08-31 07:53 2011-05-11 Show GitHub Exploit DB Packet Storm
256103 10 危険 アドビシステムズ - Adobe Shockwave Player における任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2010-4309 2011-08-30 09:52 2011-08-9 Show GitHub Exploit DB Packet Storm
256104 10 危険 アドビシステムズ - Adobe Shockwave Player における任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2010-4308 2011-08-30 09:52 2011-08-9 Show GitHub Exploit DB Packet Storm
256105 9.3 危険 アドビシステムズ
レッドハット
- Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2011-2424 2011-08-30 09:50 2011-08-9 Show GitHub Exploit DB Packet Storm
256106 10 危険 サイバートラスト株式会社
オラクル
- net-snmp の fixproc コマンドにおける不適切な一時ファイルを作成される脆弱性 - CVE-2005-1740 2011-08-29 09:55 2005-05-18 Show GitHub Exploit DB Packet Storm
256107 10 危険 サイバートラスト株式会社
Mozilla Foundation
レッドハット
オラクル
- 複数の Mozilla 製品のブラウザエンジンにおける任意のコードを実行される脆弱性 CWE-noinfo
情報不足
CVE-2011-0053 2011-08-29 09:49 2011-03-1 Show GitHub Exploit DB Packet Storm
256108 6.5 警告 PostgreSQL.org
サイバートラスト株式会社
レッドハット
ターボリナックス
オラクル
- PostgreSQL におけるスタックベースのバッファオーバーフローの脆弱性 CWE-189
数値処理の問題
CVE-2010-4015 2011-08-29 09:46 2011-01-31 Show GitHub Exploit DB Packet Storm
256109 4.3 警告 WebsiteBaker Org - WebsiteBaker におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2011-3385 2011-08-26 12:01 2011-08-26 Show GitHub Exploit DB Packet Storm
256110 9.3 危険 マイクロソフト - Microsoft Windows 7 および 2008 の Data Access Tracing component における権限昇格の脆弱性 CWE-Other
その他
CVE-2011-1975 2011-08-26 10:22 2011-08-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 17, 2026, 4:19 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
246181 7.5 HIGH
Network
mesilat zabbix The MESILAT Zabbix plugin before 1.1.15 for Atlassian Confluence allows attackers to read arbitrary files. CWE-200
Information Exposure
CVE-2018-18289 2024-11-21 12:55 2018-10-15 Show GitHub Exploit DB Packet Storm
246182 5.3 MEDIUM
Network
asus rt-ac58u_firmware On ASUS RT-AC58U 3.0.0.4.380_6516 devices, remote attackers can discover hostnames and IP addresses by reading dhcpLeaseInfo data in the HTML source code of the Main_Login.asp page. CWE-200
Information Exposure
CVE-2018-18287 2024-11-21 12:55 2018-10-15 Show GitHub Exploit DB Packet Storm
246183 6.1 MEDIUM
Network
zeit next.js Next.js 7.0.0 and 7.0.1 has XSS via the 404 or 500 /_error page. CWE-79
Cross-site Scripting
CVE-2018-18282 2024-11-21 12:55 2018-10-13 Show GitHub Exploit DB Packet Storm
246184 7.8 HIGH
Local
pdfalto_project pdfalto A issue was found in pdfalto 0.2. There is a heap-based buffer overflow in the TextPage::addAttributsNode function in XmlAltoOutputDev.cc. CWE-787
 Out-of-bounds Write
CVE-2018-18274 2024-11-21 12:55 2018-10-13 Show GitHub Exploit DB Packet Storm
246185 6.1 MEDIUM
Network
cmsmadesimple cms_made_simple XSS exists in CMS Made Simple version 2.2.7 via the m1_extra parameter in an admin/moduleinterface.php "Content-->News-->Add Article" action. CWE-79
Cross-site Scripting
CVE-2018-18271 2024-11-21 12:55 2018-10-13 Show GitHub Exploit DB Packet Storm
246186 6.1 MEDIUM
Network
cmsmadesimple cms_made_simple XSS exists in CMS Made Simple version 2.2.7 via the m1_news_url parameter in an admin/moduleinterface.php "Content-->News-->Add Article" action. CWE-79
Cross-site Scripting
CVE-2018-18270 2024-11-21 12:55 2018-10-13 Show GitHub Exploit DB Packet Storm
246187 9.8 CRITICAL
Network
asuswrt-merlin_project rt-ac5300_firmware
rt_ac1900p_firmware
rt-ac68u_firmware
rt-ac68p_firmware
rt-ac88u_firmware
rt-ac66u_b1_firmware
rt-ac56u_firmware
rt-ac3200_firmware
rt-ac68uf_firmware
rt…
An issue was discovered in the Merlin.PHP component 0.6.6 for Asuswrt-Merlin devices. An attacker can execute arbitrary commands because exec.php has a popen call. NOTE: the vendor indicates that Mer… NVD-CWE-noinfo
CVE-2018-18320 2024-11-21 12:55 2018-10-15 Show GitHub Exploit DB Packet Storm
246188 9.8 CRITICAL
Network
asuswrt-merlin_project rt-ac5300_firmware
rt_ac1900p_firmware
rt-ac68u_firmware
rt-ac68p_firmware
rt-ac88u_firmware
rt-ac66u_b1_firmware
rt-ac56u_firmware
rt-ac3200_firmware
rt-ac68uf_firmware
rt…
An issue was discovered in the Merlin.PHP component 0.6.6 for Asuswrt-Merlin devices. An attacker can execute arbitrary commands because api.php has an eval call, as demonstrated by the /6/api.php?fu… CWE-94
Code Injection
CVE-2018-18319 2024-11-21 12:55 2018-10-15 Show GitHub Exploit DB Packet Storm
246189 5.3 MEDIUM
Network
yokogawa fcj_firmware
fcn-100_firmware
fcn-rtu_firmware
fcn-500_firmware
Yokogawa STARDOM Controllers FCJ, FCN-100, FCN-RTU, FCN-500, All versions R4.10 and prior, The application utilizes multiple methods of session management which could result in a denial of service to… CWE-384
 Session Fixation
CVE-2018-17902 2024-11-21 12:55 2018-10-12 Show GitHub Exploit DB Packet Storm
246190 9.8 CRITICAL
Network
yokogawa fcj_firmware
fcn-100_firmware
fcn-rtu_firmware
fcn-500_firmware
Yokogawa STARDOM Controllers FCJ, FCN-100, FCN-RTU, FCN-500, All versions R4.10 and prior, The web application improperly protects credentials which could allow an attacker to obtain credentials for … CWE-522
 Insufficiently Protected Credentials
CVE-2018-17900 2024-11-21 12:55 2018-10-12 Show GitHub Exploit DB Packet Storm