Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":June 8, 2026, 6 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 256631 | 9.3 | 危険 | アップル | - | iPhone および iPod touch 上で稼動する Apple iOS の WebKit における任意のコードを実行される脆弱性 |
CWE-119
バッファエラー |
CVE-2010-1813 | 2010-12-8 15:52 | 2010-09-8 | Show | GitHub Exploit DB Packet Storm |
| 256632 | 4.3 | 警告 | IBM | - | IBM WebSphere Application Server の管理コンソールにおけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2010-0784 | 2010-12-8 15:31 | 2010-11-9 | Show | GitHub Exploit DB Packet Storm |
| 256633 | 6.8 | 警告 | シックス・アパート株式会社 | - | Movable Type における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2010-3922 | 2010-12-8 14:02 | 2010-12-8 | Show | GitHub Exploit DB Packet Storm |
| 256634 | 4.3 | 警告 | シックス・アパート株式会社 | - | Movable Type におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2010-3921 | 2010-12-8 14:02 | 2010-12-8 | Show | GitHub Exploit DB Packet Storm |
| 256635 | 2.1 | 注意 | セイコーエプソン株式会社 | - | EPSON 製プリンタドライバのインストーラがアクセス権を変更する脆弱性 |
CWE-DesignError
|
CVE-2010-3920 | 2010-12-8 14:01 | 2010-12-8 | Show | GitHub Exploit DB Packet Storm |
| 256636 | 10 | 危険 | アドビシステムズ | - | Adobe Flash Media Server における任意のコードを実行される脆弱性 |
CWE-94
コード・インジェクション |
CVE-2010-3635 | 2010-12-7 16:45 | 2010-11-9 | Show | GitHub Exploit DB Packet Storm |
| 256637 | 5 | 警告 | アドビシステムズ | - | Adobe Flash Media Server のエッジプロセスにおけるサービス運用妨害 (DoS) の脆弱性 |
CWE-noinfo
情報不足 |
CVE-2010-3634 | 2010-12-7 16:45 | 2010-11-9 | Show | GitHub Exploit DB Packet Storm |
| 256638 | 5 | 警告 | アドビシステムズ | - | Adobe Flash Media Server におけるメモリリークの脆弱性 |
CWE-399
リソース管理の問題 |
CVE-2010-3633 | 2010-12-7 16:45 | 2010-11-9 | Show | GitHub Exploit DB Packet Storm |
| 256639 | 4.3 | 警告 | マイクロソフト | - | Microsoft Forefront Unified Access Gateway の Signurl.asp におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2010-3936 | 2010-12-7 16:45 | 2010-11-9 | Show | GitHub Exploit DB Packet Storm |
| 256640 | 4.3 | 警告 | マイクロソフト | - | Microsoft Forefront Unified Access Gateway のモバイルポータルにおけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2010-2734 | 2010-12-7 16:44 | 2010-11-9 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:June 9, 2026, 4:16 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 246221 | 8.8 |
HIGH
Network |
mybb | trash_bin | Trash Bin plugin 1.1.3 for MyBB has cross-site scripting (XSS) via a thread subject and a cross-site request forgery (CSRF) via a post subject. |
CWE-352 CWE-79 Origin Validation Error Cross-site Scripting |
CVE-2018-14575 | 2024-11-21 12:49 | 2019-03-22 | Show | GitHub Exploit DB Packet Storm |
| 246222 | 6.1 |
MEDIUM
Network |
dnnsoftware | dotnetnuke | DNN (formerly DotNetNuke) 9.1.1 allows cross-site scripting (XSS) via XML. |
CWE-79
Cross-site Scripting |
CVE-2018-14486 | 2024-11-21 12:49 | 2019-03-22 | Show | GitHub Exploit DB Packet Storm |
| 246223 | 6.1 |
MEDIUM
Network |
hyphp | hybbs | An issue was found in HYBBS through 2016-03-08. There is an XSS vulnerablity via an article title to post.html. |
CWE-79
Cross-site Scripting |
CVE-2018-14499 | 2024-11-21 12:49 | 2019-03-8 | Show | GitHub Exploit DB Packet Storm |
| 246224 | 6.5 |
MEDIUM
Network |
mozilla libjpeg-turbo fedoraproject debian opensuse |
mozjpeg libjpeg-turbo fedora debian_linux leap |
get_8bit_row in rdbmp.c in libjpeg-turbo through 1.5.90 and MozJPEG through 3.3.1 allows attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted 8-bit… |
CWE-125
Out-of-bounds Read |
CVE-2018-14498 | 2024-11-21 12:49 | 2019-03-8 | Show | GitHub Exploit DB Packet Storm |
| 246225 | 7.2 |
HIGH
Network |
redhat | satellite | An improper authorization flaw was found in the Smart Class feature of Foreman. An attacker can use it to change configuration of any host registered in Red Hat Satellite, independent of the organiza… |
CWE-863
Incorrect Authorization |
CVE-2018-14666 | 2024-11-21 12:49 | 2019-01-23 | Show | GitHub Exploit DB Packet Storm |
| 246226 | 5.7 |
MEDIUM
Adjacent |
redhat debian opensuse canonical |
ceph debian_linux leap enterprise_linux_server ceph_storage ubuntu_linux |
It was found Ceph versions before 13.2.4 that authenticated ceph users with read only permissions could steal dm-crypt encryption keys used in ceph disk encryption. | - | CVE-2018-14662 | 2024-11-21 12:49 | 2019-01-16 | Show | GitHub Exploit DB Packet Storm |
| 246227 | 6.1 |
MEDIUM
Network |
osclass | osclass | Osclass 3.7.4 has XSS via the query string to index.php, a different vulnerability than CVE-2014-6280. |
CWE-79
Cross-site Scripting |
CVE-2018-14481 | 2024-11-21 12:49 | 2019-01-4 | Show | GitHub Exploit DB Packet Storm |
| 246228 | 10.0 |
CRITICAL
Network |
fasterxml debian oracle redhat |
jackson-databind debian_linux primavera_unifier banking_platform jdeveloper retail_merchandising_system webcenter_portal communications_billing_and_revenue_management financia… |
FasterXML jackson-databind 2.x before 2.9.7 might allow remote attackers to conduct server-side request forgery (SSRF) attacks by leveraging failure to block the axis2-jaxws class from polymorphic de… |
CWE-918
Server-Side Request Forgery (SSRF) |
CVE-2018-14721 | 2024-11-21 12:49 | 2019-01-3 | Show | GitHub Exploit DB Packet Storm |
| 246229 | 9.8 |
CRITICAL
Network |
fasterxml debian oracle redhat |
jackson-databind debian_linux primavera_unifier banking_platform jdeveloper retail_merchandising_system webcenter_portal communications_billing_and_revenue_management financia… |
FasterXML jackson-databind 2.x before 2.9.7 might allow attackers to conduct external XML entity (XXE) attacks by leveraging failure to block unspecified JDK classes from polymorphic deserialization. |
CWE-611 CWE-502 XXE Deserialization of Untrusted Data |
CVE-2018-14720 | 2024-11-21 12:49 | 2019-01-3 | Show | GitHub Exploit DB Packet Storm |
| 246230 | 9.8 |
CRITICAL
Network |
fasterxml debian oracle redhat netapp |
jackson-databind debian_linux primavera_unifier primavera_p6_enterprise_project_portfolio_management database_server banking_platform jdeveloper retail_merchandising_system we… |
FasterXML jackson-databind 2.x before 2.9.7 might allow remote attackers to execute arbitrary code by leveraging failure to block the blaze-ds-opt and blaze-ds-core classes from polymorphic deseriali… |
CWE-502
Deserialization of Untrusted Data |
CVE-2018-14719 | 2024-11-21 12:49 | 2019-01-3 | Show | GitHub Exploit DB Packet Storm |