Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":July 1, 2026, 2:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
256601 4.3 警告 attenzione - WordPress 用 YouSayToo auto-publishing プラグインにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-0901 2012-01-25 10:39 2012-01-20 Show GitHub Exploit DB Packet Storm
256602 4.3 警告 Beehive Forum - Beehive Forum におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-0900 2012-01-25 10:35 2012-01-20 Show GitHub Exploit DB Packet Storm
256603 4.3 警告 Annuaire PHP - Annuaire PHP におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-0899 2012-01-25 10:32 2012-01-20 Show GitHub Exploit DB Packet Storm
256604 5 警告 camaleo - WordPress 用 myEASYbackup プラグインにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2012-0898 2012-01-25 10:30 2012-01-20 Show GitHub Exploit DB Packet Storm
256605 5 警告 Tom Braider - WordPress 用 Count Per Day モジュールにおける絶対パストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2012-0896 2012-01-25 10:23 2012-01-20 Show GitHub Exploit DB Packet Storm
256606 4.3 警告 Tom Braider - WordPress 用 Count Per Day モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-0895 2012-01-25 10:21 2012-01-20 Show GitHub Exploit DB Packet Storm
256607 9.3 危険 IBM - IBM Lotus Symphony の vclmi.dll における整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2012-0192 2012-01-24 16:45 2012-01-23 Show GitHub Exploit DB Packet Storm
256608 7.5 危険 アドビシステムズ
Linux		 - Linux 上で稼働する Adobe Reader における整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2011-4374 2012-01-24 16:29 2011-09-13 Show GitHub Exploit DB Packet Storm
256609 5 警告 IBM - IBM WebSphere Application Server におけるサービス運用妨害 (CPU 資源の消費) の脆弱性 CWE-20
不適切な入力確認 		CVE-2012-0193 2012-01-24 16:21 2012-01-17 Show GitHub Exploit DB Packet Storm
256610 10 危険 IBM - IBM Rational License Key Server その他の製品におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2011-1389 2012-01-24 16:19 2012-01-19 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:July 1, 2026, 4:27 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
249471 7.5 HIGH
Network 		f5
debian
canonical
opensuse
apple 		nginx
debian_linux
ubuntu_linux
leap
xcode 		nginx before versions 1.15.6 and 1.14.1 has a vulnerability in the implementation of HTTP/2 that can allow for excessive memory consumption. This issue affects nginx compiled with the ngx_http_v2_mod… - CVE-2018-16843 2024-11-21 12:53 2018-11-7 Show GitHub Exploit DB Packet Storm
249472 8.8 HIGH
Adjacent 		ti ble-stack Texas Instruments BLE-STACK v2.2.1 for SimpleLink CC2640 and CC2650 devices allows remote attackers to execute arbitrary code via a malformed packet that triggers a buffer overflow. CWE-787
 Out-of-bounds Write 		CVE-2018-16986 2024-11-21 12:53 2018-11-7 Show GitHub Exploit DB Packet Storm
249473 7.8 HIGH
Local 		qemu
canonical 		qemu
ubuntu_linux 		An OOB heap buffer r/w access issue was found in the NVM Express Controller emulation in QEMU. It could occur in nvme_cmb_ops routines in nvme device. A guest user/process could use this flaw to cras… CWE-125
CWE-787
Out-of-bounds Read
 Out-of-bounds Write 		CVE-2018-16847 2024-11-21 12:53 2018-11-3 Show GitHub Exploit DB Packet Storm
249474 7.5 HIGH
Network 		redhat openstack-mistral A flaw was found in openstack-mistral. By manipulating the SSH private key filename, the std.ssh action can be used to disclose the presence of arbitrary files within the filesystem of the executor r… CWE-200
Information Exposure 		CVE-2018-16849 2024-11-21 12:53 2018-11-3 Show GitHub Exploit DB Packet Storm
249475 9.1 CRITICAL
Network 		haxx
canonical
debian 		curl
ubuntu_linux
debian_linux 		Curl versions 7.14.1 through 7.61.1 are vulnerable to a heap-based buffer over-read in the tool_msgs.c:voutf() function that may result in information exposure and denial of service. CWE-125
Out-of-bounds Read 		CVE-2018-16842 2024-11-21 12:53 2018-11-1 Show GitHub Exploit DB Packet Storm
249476 9.8 CRITICAL
Network 		haxx
canonical 		curl
ubuntu_linux 		A heap use-after-free flaw was found in curl versions from 7.59.0 through 7.61.1 in the code related to closing an easy handle. When closing and cleaning up an 'easy' handle in the `Curl_close()` fun… CWE-416
 Use After Free 		CVE-2018-16840 2024-11-21 12:53 2018-11-1 Show GitHub Exploit DB Packet Storm
249477 9.8 CRITICAL
Network 		haxx
debian
canonical 		curl
debian_linux
ubuntu_linux 		Curl versions 7.33.0 through 7.61.1 are vulnerable to a buffer overrun in the SASL authentication code that may lead to denial of service. CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2018-16839 2024-11-21 12:53 2018-11-1 Show GitHub Exploit DB Packet Storm
249478 7.8 HIGH
Local 		redhat
debian
suse 		ansible_engine
ansible_tower
debian_linux
package_hub 		Ansible "User" module leaks any data which is passed on as a parameter to ssh-keygen. This could lean in undesirable situations such as passphrases credentials passed as a parameter for the ssh-keyge… CWE-311
Missing Encryption of Sensitive Data 		CVE-2018-16837 2024-11-21 12:53 2018-10-24 Show GitHub Exploit DB Packet Storm
249479 5.9 MEDIUM
Network 		tinc-vpn
debian
starwindsoftware 		tinc
debian_linux
starwind_virtual_san 		Missing message authentication in the meta-protocol in Tinc VPN version 1.0.34 and earlier allows a man-in-the-middle attack to disable the encryption of VPN packets. CWE-306
Missing Authentication for Critical Function 		CVE-2018-16758 2024-11-21 12:53 2018-10-11 Show GitHub Exploit DB Packet Storm
249480 3.7 LOW
Network 		tinc-vpn
debian
starwindsoftware 		tinc
debian_linux
starwind_virtual_san 		tinc 1.0.30 through 1.0.34 has a broken authentication protocol, although there is a partial mitigation. This is fixed in 1.1. CWE-287
Improper Authentication 		CVE-2018-16738 2024-11-21 12:53 2018-10-11 Show GitHub Exploit DB Packet Storm