Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 1, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
256421	7.8	危険	シスコシステムズ	-	複数の Cisco 製品の Transport Layer Security におけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2010-2814	2010-08-27 16:03	2010-08-4	Show	GitHub Exploit DB Packet Storm

256422	7.8	危険	シスコシステムズ	-	複数の Cisco 製品の Transport Layer Security におけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2010-1581	2010-08-27 16:03	2010-08-4	Show	GitHub Exploit DB Packet Storm

256423	7.8	危険	シスコシステムズ	-	複数の Cisco 製品の SunRPC 検査機能におけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2010-1580	2010-08-27 16:03	2010-08-4	Show	GitHub Exploit DB Packet Storm

256424	7.8	危険	シスコシステムズ	-	複数の Cisco 製品の SunRPC 検査機能におけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2010-1579	2010-08-27 16:02	2010-08-4	Show	GitHub Exploit DB Packet Storm

256425	7.8	危険	シスコシステムズ	-	複数の Cisco 製品の SunRPC 検査機能におけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2010-1578	2010-08-27 16:02	2010-08-4	Show	GitHub Exploit DB Packet Storm

256426	5.8	警告	ブルーコートシステムズ	-	Blue Coat ProxySG の HTTP Host ヘッダにおけるアクセスコントロール回避の脆弱性	CWE-16 環境設定	CVE-2009-1211	2010-08-27 16:02	2009-03-2	Show	GitHub Exploit DB Packet Storm

256427	-	-	ウインドリバー株式会社	-	Wind River Systems VxWorks の認証 API (loginLib) における問題	-	-	2010-08-26 16:57	2010-08-3	Show	GitHub Exploit DB Packet Storm

256428	-	-	ウインドリバー株式会社	-	Wind River Systems VxWorks においてデバッグサービスがデフォルトで有効になっている問題	-	-	2010-08-26 16:57	2010-08-3	Show	GitHub Exploit DB Packet Storm

256429	7.5	危険	サイバートラスト株式会社レッドハット Alexander V. Lukyanov	-	LFTP の get1 コマンドにおける任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2010-2251	2010-08-26 16:57	2010-07-6	Show	GitHub Exploit DB Packet Storm

256430	5	警告	日立	-	JP1/Integrated Manager および JP1/Integrated Management 製品におけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	-	2010-08-26 16:56	2010-07-30	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 1, 2026, 4:12 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
246561	5.3	MEDIUM Network	digium debian	asterisk certified_asterisk debian_linux	An issue was discovered in Asterisk Open Source 13.x before 13.21.1, 14.x before 14.7.7, and 15.x before 15.4.1 and Certified Asterisk 13.18-cert before 13.18-cert4 and 13.21-cert before 13.21-cert2.…	CWE-200 Information Exposure	CVE-2018-12227	2024-11-21 12:44	2018-06-12	Show	GitHub Exploit DB Packet Storm

246562	7.8	HIGH Local	md4c_project	md4c	md_build_attribute in md4c.c in md4c 0.2.6 allows remote attackers to cause a denial of service (Segmentation fault and application crash) or possibly have unspecified other impact via a crafted file.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2018-12112	2024-11-21 12:44	2018-06-11	Show	GitHub Exploit DB Packet Storm

246563	6.1	MEDIUM Network	canon	efi_printme	Cross-site scripting (XSS) vulnerability in the Canon PrintMe EFI webinterface allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to the /wt3/mydocs.php URI.	CWE-79 Cross-site Scripting	CVE-2018-12111	2024-11-21 12:44	2018-06-11	Show	GitHub Exploit DB Packet Storm

246564	7.2	HIGH Network	portfoliocms_project	portfoliocms	portfolioCMS 1.0.5 has SQL Injection via the admin/portfolio.php preview parameter.	CWE-89 SQL Injection	CVE-2018-12110	2024-11-21 12:44	2018-06-11	Show	GitHub Exploit DB Packet Storm

246565	7.8	HIGH Local	flif	flif	An issue was discovered in Free Lossless Image Format (FLIF) 0.3. The TransformPaletteC<FileIO>::process function in transform/palette_C.hpp allows remote attackers to cause a denial of service (heap…	CWE-787 Out-of-bounds Write	CVE-2018-12109	2024-11-21 12:44	2018-06-11	Show	GitHub Exploit DB Packet Storm

246566	5.5	MEDIUM Local	dropbox	lepton	An issue was discovered in Dropbox Lepton 1.2.1. The validateAndCompress function in validation.cc allows remote attackers to cause a denial of service (SIGFPE and application crash) via a malformed …	CWE-20 Improper Input Validation	CVE-2018-12108	2024-11-21 12:44	2018-06-11	Show	GitHub Exploit DB Packet Storm

246567	5.5	MEDIUM Local	md4c_project	md4c	md4c 0.2.6 has a NULL pointer dereference in the function md_process_line in md4c.c, related to ctx->current_block.	CWE-476 NULL Pointer Dereference	CVE-2018-12102	2024-11-21 12:44	2018-06-11	Show	GitHub Exploit DB Packet Storm

246568	4.8	MEDIUM Network	sonatype	nexus_repository_manager	Sonatype Nexus Repository Manager versions 3.x before 3.12.0 has XSS in multiple areas in the Administration UI.	CWE-79 Cross-site Scripting	CVE-2018-12100	2024-11-21 12:44	2018-06-11	Show	GitHub Exploit DB Packet Storm

246569	6.1	MEDIUM Network	grafana netapp	grafana active_iq_performance_analytics_services storagegrid_webscale_nas_bridge	Grafana before 5.2.0-beta1 has XSS vulnerabilities in dashboard links.	CWE-79 Cross-site Scripting	CVE-2018-12099	2024-11-21 12:44	2018-06-11	Show	GitHub Exploit DB Packet Storm

246570	5.4	MEDIUM Network	oecms_project	oecms	A Reflected Cross-Site Scripting web vulnerability has been discovered in the OEcms v3.1 web-application. The vulnerability is located in the mod parameter of info.php.	CWE-79 Cross-site Scripting	CVE-2018-12095	2024-11-21 12:44	2018-06-11	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed