Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":July 1, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
256161 7.5 危険 ColdGen - ColdGen ColdUserGroup の index.cfm における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-4916 2012-02-28 10:50 2011-10-8 Show GitHub Exploit DB Packet Storm
256162 7.5 危険 ColdGen - ColdGen ColdBookmarks の index.cfm における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-4915 2012-02-28 10:47 2011-10-8 Show GitHub Exploit DB Packet Storm
256163 7.5 危険 DeltaScripts - PHP Classifieds の tools/phpmailer/class.phpmailer.php における任意の PHP コードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2010-4914 2012-02-28 10:43 2011-10-8 Show GitHub Exploit DB Packet Storm
256164 4.3 警告 ColdGen - ColdGen ColdUserGroup の search 機能におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-4913 2012-02-28 10:41 2011-10-8 Show GitHub Exploit DB Packet Storm
256165 7.5 危険 Discuz - UCenter Home の shop.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-4912 2012-02-28 10:40 2011-10-8 Show GitHub Exploit DB Packet Storm
256166 7.5 危険 Sell@Site - PHP Classifieds Ads の classi/detail.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-4911 2012-02-28 10:39 2011-10-8 Show GitHub Exploit DB Packet Storm
256167 7.5 危険 ColdGen - ColdGen ColdCalendar の index.cfm におけるSQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-4910 2012-02-28 10:37 2011-10-8 Show GitHub Exploit DB Packet Storm
256168 4.3 警告 Mechbunny - PaysiteReviewCMS におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-4909 2012-02-28 10:36 2011-10-8 Show GitHub Exploit DB Packet Storm
256169 7.5 危険 Virtue Netz - Virtue Shopping Mall の detail.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-4908 2012-02-28 10:35 2011-10-8 Show GitHub Exploit DB Packet Storm
256170 4.3 警告 Powie - Powie pFile の pfile/kommentar.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-1211 2012-02-27 17:12 2012-02-24 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:July 1, 2026, 4:27 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
252831 5.5 MEDIUM
Local 		qualcomm mdm9206_firmware
mdm9607_firmware
mdm9650_firmware
mdm9655_firmware
qm215_firmware
sd_210_firmware
sd_212_firmware
sd_205_firmware
sd_410_firmware
sd_412_firmware
sd_425… 		Insufficient protection of keys in keypad can lead HLOS to gain access to confidential keypad input data in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Sna… NVD-CWE-noinfo
CVE-2018-11958 2024-11-21 12:44 2019-04-5 Show GitHub Exploit DB Packet Storm
252832 6.8 MEDIUM
Physics 		tianocore edk_ii Stack overflow in DxeCore for EDK II may allow an unauthenticated user to potentially enable escalation of privilege, information disclosure and/or denial of service via local access. CWE-787
 Out-of-bounds Write 		CVE-2018-12183 2024-11-21 12:44 2019-03-28 Show GitHub Exploit DB Packet Storm
252833 6.7 MEDIUM
Local 		tianocore edk_ii Insufficient memory write check in SMM service for EDK II may allow an authenticated user to potentially enable escalation of privilege, information disclosure and/or denial of service via local acce… CWE-441
Confused Deputy 		CVE-2018-12182 2024-11-21 12:44 2019-03-28 Show GitHub Exploit DB Packet Storm
252834 6.0 MEDIUM
Local 		tianocore edk_ii Stack overflow in corrupted bmp for EDK II may allow unprivileged user to potentially enable denial of service or elevation of privilege via local access. CWE-787
 Out-of-bounds Write 		CVE-2018-12181 2024-11-21 12:44 2019-03-28 Show GitHub Exploit DB Packet Storm
252835 8.8 HIGH
Network 		tianocore
opensuse 		edk_ii
leap 		Buffer overflow in BlockIo service for EDK II may allow an unauthenticated user to potentially enable escalation of privilege, information disclosure and/or denial of service via network access. CWE-787
 Out-of-bounds Write 		CVE-2018-12180 2024-11-21 12:44 2019-03-28 Show GitHub Exploit DB Packet Storm
252836 7.8 HIGH
Local 		tianocore edk_ii Improper configuration in system firmware for EDK II may allow unauthenticated user to potentially enable escalation of privilege, information disclosure and/or denial of service via local access. NVD-CWE-noinfo
CVE-2018-12179 2024-11-21 12:44 2019-03-28 Show GitHub Exploit DB Packet Storm
252837 9.1 CRITICAL
Network 		tianocore edk_ii Buffer overflow in network stack for EDK II may allow unprivileged user to potentially enable escalation of privilege and/or denial of service via network. CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2018-12178 2024-11-21 12:44 2019-03-28 Show GitHub Exploit DB Packet Storm
252838 7.5 HIGH
Network 		fasterxml
debian
fedoraproject
oracle
redhat 		jackson-databind
debian_linux
fedora
jd_edwards_enterpriseone_tools
retail_merchandising_system
openshift_container_platform
jboss_enterprise_application_platform
single_sign-on<… 		An issue was discovered in FasterXML jackson-databind prior to 2.7.9.4, 2.8.11.2, and 2.9.6. When Default Typing is enabled (either globally or for a specific property), the service has the Oracle JD… CWE-502
 Deserialization of Untrusted Data 		CVE-2018-12023 2024-11-21 12:44 2019-03-22 Show GitHub Exploit DB Packet Storm
252839 7.5 HIGH
Network 		fasterxml
debian
fedoraproject
oracle
redhat 		jackson-databind
debian_linux
fedora
jd_edwards_enterpriseone_tools
retail_merchandising_system
openshift_container_platform
jboss_enterprise_application_platform
single_sign-on<… 		An issue was discovered in FasterXML jackson-databind prior to 2.7.9.4, 2.8.11.2, and 2.9.6. When Default Typing is enabled (either globally or for a specific property), the service has the Jodd-db j… CWE-502
 Deserialization of Untrusted Data 		CVE-2018-12022 2024-11-21 12:44 2019-03-22 Show GitHub Exploit DB Packet Storm
252840 7.5 HIGH
Network 		apache heron When accessing the heron-ui webpage, people can modify the file paths outside of the current container to access any file on the host. Example woule be modifying the parameter path= to go to the dire… CWE-22
Path Traversal 		CVE-2018-11789 2024-11-21 12:44 2019-03-22 Show GitHub Exploit DB Packet Storm