Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":July 1, 2026, 4:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
256571 5.8 警告 Nathaniel Kh - Android 用 Limit My Call における通話履歴および連絡先リストを読まれる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2011-4703 2012-01-27 14:52 2012-01-25 Show GitHub Exploit DB Packet Storm
256572 5.8 警告 Nimbuzz - Android 用 Nimbuzz における連絡先リストを読まれる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2011-4702 2012-01-27 14:46 2012-01-25 Show GitHub Exploit DB Packet Storm
256573 5.8 警告 fa - Android 用 CallConfirm における allow/block リストを読まれる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2011-4701 2012-01-27 14:45 2012-01-25 Show GitHub Exploit DB Packet Storm
256574 5.8 警告 UberMedia - Android 用 UberMedia UberSocial における Twitter 情報を読まれる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2011-4700 2012-01-27 14:44 2012-01-25 Show GitHub Exploit DB Packet Storm
256575 6.4 警告 UberMedia - Android 用 UberMedia Twidroyd Legacy における Twitter 情報を読まれる脆弱性 CWE-200
情報漏えい 		CVE-2011-4699 2012-01-27 14:42 2012-01-25 Show GitHub Exploit DB Packet Storm
256576 6.4 警告 AndroidAppTools - Android 用 AndroidAppTools Easy Filter における SMS メッセージおよび通話履歴を読まれる脆弱性 CWE-200
情報漏えい 		CVE-2011-4698 2012-01-27 14:41 2012-01-25 Show GitHub Exploit DB Packet Storm
256577 6.4 警告 Xiaomi - Android 用 Xiaomi MiTalk Messenger におけるメッセージング情報を読まれる脆弱性 CWE-200
情報漏えい 		CVE-2011-4697 2012-01-27 14:39 2012-01-25 Show GitHub Exploit DB Packet Storm
256578 7.5 危険 ICloudCenter - ICloudCenter ICTimeAttendance における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2012-0913 2012-01-27 12:20 2012-01-24 Show GitHub Exploit DB Packet Storm
256579 9.3 危険 RenRen - RenRen Talk におけるヒープベースのバッファオーバーフロー脆弱性 CWE-119
バッファエラー 		CVE-2012-0916 2012-01-27 11:57 2012-01-24 Show GitHub Exploit DB Packet Storm
256580 9.3 危険 RenRen - RenRen Talk における整数符号エラーの脆弱性 CWE-189
数値処理の問題 		CVE-2012-0915 2012-01-27 11:07 2012-01-24 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:July 1, 2026, 4:27 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
245981 6.1 MEDIUM
Network 		ivanti connect_secure An XSS issue has been found with rd.cgi in Pulse Secure Pulse Connect Secure 8.3RX before 8.3R3 due to improper header sanitization. This is not applicable to 8.1RX. CWE-79
Cross-site Scripting 		CVE-2018-20808 2024-11-21 13:02 2019-06-29 Show GitHub Exploit DB Packet Storm
245982 6.1 MEDIUM
Network 		ivanti connect_secure An XSS issue has been found in welcome.cgi in Pulse Secure Pulse Connect Secure (PCS) 8.1.x before 8.1R12, 8.2.x before 8.2R9, and 8.3.x before 8.3R3 due to one of the URL parameters not being saniti… CWE-79
Cross-site Scripting 		CVE-2018-20807 2024-11-21 13:02 2019-06-29 Show GitHub Exploit DB Packet Storm
245983 8.8 HIGH
Network 		uclouvain
debian 		openjpeg
debian_linux 		An improper computation of p_tx0, p_tx1, p_ty0 and p_ty1 in the function opj_get_encoding_parameters in openjp2/pi.c in OpenJPEG through 2.3.0 can lead to an integer overflow. CWE-190
 Integer Overflow or Wraparound 		CVE-2018-20847 2024-11-21 13:02 2019-06-27 Show GitHub Exploit DB Packet Storm
245984 6.5 MEDIUM
Network 		uclouvain openjpeg Out-of-bounds accesses in the functions pi_next_lrcp, pi_next_rlcp, pi_next_rpcl, pi_next_pcrl, pi_next_rpcl, and pi_next_cprl in openmj2/pi.c in OpenJPEG through 2.3.0 allow remote attackers to caus… CWE-20
 Improper Input Validation  		CVE-2018-20846 2024-11-21 13:02 2019-06-27 Show GitHub Exploit DB Packet Storm
245985 6.5 MEDIUM
Network 		uclouvain openjpeg Division-by-zero vulnerabilities in the functions pi_next_pcrl, pi_next_cprl, and pi_next_rpcl in openmj2/pi.c in OpenJPEG through 2.3.0 allow remote attackers to cause a denial of service (applicati… CWE-369
 Divide By Zero 		CVE-2018-20845 2024-11-21 13:02 2019-06-27 Show GitHub Exploit DB Packet Storm
245986 7.5 HIGH
Network 		libexpat_project
canonical
debian
fedoraproject
opensuse
oracle
tenable 		libexpat
ubuntu_linux
debian_linux
fedora
leap
http_server
outside_in_technology
hospitality_res_3700
nessus 		In libexpat in Expat before 2.2.7, XML input including XML names that contain a large number of colons could make the XML parser consume a high amount of RAM and CPU resources while processing (enoug… CWE-611
XXE 		CVE-2018-20843 2024-11-21 13:02 2019-06-25 Show GitHub Exploit DB Packet Storm
245987 9.8 CRITICAL
Network 		hootoo tripmate_titan_ht-tm05_firmware HooToo TripMate Titan HT-TM05 and HT-05 routers with firmware 2.000.022 and 2.000.082 allow remote command execution via shell metacharacters in the mac parameter of a protocol.csp?function=set&fname… CWE-78
OS Command  		CVE-2018-20841 2024-11-21 13:02 2019-06-12 Show GitHub Exploit DB Packet Storm
245988 9.8 CRITICAL
Network 		qemu qemu In QEMU 3.1.0, load_device_tree in device_tree.c calls the deprecated load_image function, which has a buffer overflow risk. CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2018-20815 2024-11-21 13:02 2019-06-1 Show GitHub Exploit DB Packet Storm
245989 8.6 HIGH
Network 		google api_c\+\+_client An unhandled exception vulnerability exists during Google Sign-In with Google API C++ Client before 2019-04-10. It potentially causes an outage of third-party services that were not designed to recov… CWE-754
 Improper Check for Unusual or Exceptional Conditions 		CVE-2018-20840 2024-11-21 13:02 2019-05-31 Show GitHub Exploit DB Packet Storm
245990 4.3 MEDIUM
Physics 		systemd_project
netapp 		systemd
cn1610_firmware
solidfire_\&_hci_management_node
snapprotect 		systemd 242 changes the VT1 mode upon a logout, which allows attackers to read cleartext passwords in certain circumstances, such as watching a shutdown, or using Ctrl-Alt-F1 and Ctrl-Alt-F2. This oc… NVD-CWE-noinfo
CVE-2018-20839 2024-11-21 13:02 2019-05-17 Show GitHub Exploit DB Packet Storm