Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 11, 2026, 6:13 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
256131 4.3 警告 アップル
GNU Project
ターボリナックス
サイバートラスト株式会社
レッドハット		 - Mailman における複数のクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-0564 2011-06-3 08:55 2008-02-5 Show GitHub Exploit DB Packet Storm
256132 10 危険 7-Technologies - 7-Technologies Interactive Graphical SCADA System の IGSSdataServer.exe におけるスタックベースのオーバーフロー脆弱性 CWE-119
バッファエラー 		CVE-2011-1567 2011-06-2 09:51 2011-04-5 Show GitHub Exploit DB Packet Storm
256133 10 危険 7-Technologies - 7-Technologies Interactive Graphical SCADA System の dc.exe におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2011-1566 2011-06-2 09:50 2011-04-5 Show GitHub Exploit DB Packet Storm
256134 10 危険 7-Technologies - 7-Technologies Interactive Graphical SCADA System の IGSSdataServer.exe におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2011-1565 2011-06-2 09:48 2011-04-5 Show GitHub Exploit DB Packet Storm
256135 10 危険 RealFlex Technologies - DATAC RealFlex RealWin の HMI アプリケーションにおける整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2011-1564 2011-06-2 09:47 2011-04-5 Show GitHub Exploit DB Packet Storm
256136 10 危険 RealFlex Technologies - DATAC RealFlex RealWin の HMI アプリケーションにおけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2011-1563 2011-06-2 09:46 2011-04-5 Show GitHub Exploit DB Packet Storm
256137 4.7 警告 レッドハット
Richard W.M. Jones		 - virt-v2v および virt-inspector などの製品に使用される libguestfs におけるホスト OS 上のファイルを読まれる脆弱性 CWE-200
情報漏えい 		CVE-2010-3851 2011-06-1 10:25 2010-11-4 Show GitHub Exploit DB Packet Storm
256138 4.4 警告 Todd C. Miller
レッドハット		 - sudo の check.c における認証要求を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2011-0010 2011-05-31 11:41 2011-01-18 Show GitHub Exploit DB Packet Storm
256139 - - SmarterTools Inc. - SmarterTools 製ウェブサーバに複数の脆弱性 - - 2011-05-31 11:40 2011-05-19 Show GitHub Exploit DB Packet Storm
256140 - - OpenSSL Project - OpenSSL における ECDSA 秘密鍵が漏えいしてしまう問題 - - 2011-05-31 11:23 2011-05-18 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 11, 2026, 5:13 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
246181 7.8 HIGH
Local 		jhead_project jhead The ProcessGpsInfo function of the gpsinfo.c file of jhead 3.00 may allow a remote attacker to cause a denial-of-service attack or unspecified other impact via a malicious JPEG file, because of incon… CWE-134
Use of Externally-Controlled Format String 		CVE-2018-16554 2024-11-21 12:52 2018-09-16 Show GitHub Exploit DB Packet Storm
246182 8.6 HIGH
Network 		lg supersign_cms LG SuperSign CMS allows reading of arbitrary files via signEzUI/playlist/edit/upload/..%2f URIs. CWE-200
Information Exposure 		CVE-2018-16288 2024-11-21 12:52 2018-09-15 Show GitHub Exploit DB Packet Storm
246183 9.8 CRITICAL
Network 		lg supersign_cms LG SuperSign CMS allows file upload via signEzUI/playlist/edit/upload/..%2f URIs. CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2018-16287 2024-11-21 12:52 2018-09-15 Show GitHub Exploit DB Packet Storm
246184 9.8 CRITICAL
Network 		lg supersign_cms LG SuperSign CMS allows authentication bypass because the CAPTCHA requirement is skipped if a captcha:pass cookie is sent, and because the PIN is limited to four digits. CWE-287
Improper Authentication 		CVE-2018-16286 2024-11-21 12:52 2018-09-15 Show GitHub Exploit DB Packet Storm
246185 5.3 MEDIUM
Adjacent 		o.bike smart_locker_firmware
obike-stationless_bike_sharing 		oBike relies on Hangzhou Luoping Smart Locker to lock bicycles, which allows attackers to bypass the locking mechanism by using Bluetooth Low Energy (BLE) to replay ciphertext based on a predictable … CWE-294
Authentication Bypass by Capture-replay  		CVE-2018-16242 2024-11-21 12:52 2018-09-15 Show GitHub Exploit DB Packet Storm
246186 6.5 MEDIUM
Network 		e107 e107 e107_admin/banlist.php in e107 2.1.8 allows SQL injection via the old_ip parameter. CWE-89
SQL Injection 		CVE-2018-16389 2024-11-21 12:52 2018-09-13 Show GitHub Exploit DB Packet Storm
246187 7.2 HIGH
Network 		e107 e107 e107_web/js/plupload/upload.php in e107 2.1.8 allows remote attackers to execute arbitrary PHP code by uploading a .php filename with the image/jpeg content type. CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2018-16388 2024-11-21 12:52 2018-09-13 Show GitHub Exploit DB Packet Storm
246188 7.5 HIGH
Network 		currency_converter_script_project currency_converter_script PHP Scripts Mall Currency Converter Script 2.0.5 allows remote attackers to cause a denial of service (web-interface change) via an inverted comma. CWE-20
 Improper Input Validation  		CVE-2018-16454 2024-11-21 12:52 2018-09-8 Show GitHub Exploit DB Packet Storm
246189 5.4 MEDIUM
Network 		filemanagerpro file_manager The mndpsingh287 File Manager plugin V2.9 for WordPress has XSS via the lang parameter in a wp-admin/admin.php?page=wp_file_manager request because set_transient is used in file_folder_manager.php an… CWE-79
Cross-site Scripting 		CVE-2018-16363 2024-11-21 12:52 2018-09-8 Show GitHub Exploit DB Packet Storm
246190 5.3 MEDIUM
Network 		endress wirelesshart_fieldgate_swg70_firmware Endress+Hauser WirelessHART Fieldgate SWG70 3.x devices allow Directory Traversal via the fcgi-bin/wgsetcgi filename parameter. CWE-22
Path Traversal 		CVE-2018-16059 2024-11-21 12:52 2018-09-8 Show GitHub Exploit DB Packet Storm