Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 1, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
256641	4.3	警告	xmlsoft.org アップルサイバートラスト株式会社サン・マイクロシステムズ OpenOffice.org Project レッドハット	-	libxml2 および libxml における DTD 内の要素宣言の処理に関するサービス運用妨害 (DoS) の脆弱性	CWE-119 バッファエラー	CVE-2009-2414	2010-07-13 16:26	2009-08-11	Show	GitHub Exploit DB Packet Storm

256642	4.3	警告	アップル	-	Apple Mac OS の CFNetwork における任意の HTTPS Web サイトを訪問しているように偽装可能な脆弱性	CWE-Other その他	CVE-2009-1723	2010-07-13 16:25	2009-08-5	Show	GitHub Exploit DB Packet Storm

256643	3.5	注意	アップル	-	Apple Mac OS X の Wiki サーバにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-1382	2010-07-12 18:12	2010-06-15	Show	GitHub Exploit DB Packet Storm

256644	3.5	注意	アップル	-	Apple Mac OS X の SMB ファイルサーバにおける任意のファイルにアクセスされる脆弱性	CWE-16 環境設定	CVE-2010-1381	2010-07-12 18:12	2010-06-15	Show	GitHub Exploit DB Packet Storm

256645	7.5	危険	アップル	-	Apple Mac OS X の cgtexttops CUPS フィルタにおける整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2010-1380	2010-07-12 18:11	2010-06-15	Show	GitHub Exploit DB Packet Storm

256646	5	警告	アップル	-	Apple Mac OS X のプリンタ設定におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2010-1379	2010-07-12 18:11	2010-06-15	Show	GitHub Exploit DB Packet Storm

256647	5	警告	IBM	-	IBM WebSphere Application Server におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 CWE-noinfo	CVE-2010-0775	2010-07-12 16:43	2010-05-8	Show	GitHub Exploit DB Packet Storm

256648	4.3	警告	IBM	-	IBM WebSphere Application Server におけるアクセス制限回避の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-0774	2010-07-12 16:43	2010-05-8	Show	GitHub Exploit DB Packet Storm

256649	5	警告	アップルサイバートラスト株式会社レッドハットターボリナックス CUPS	-	CUPS の cupsd におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2009-3553	2010-07-12 16:41	2009-11-20	Show	GitHub Exploit DB Packet Storm

256650	9.3	危険	アップル	-	Apple Mac OS X の Open Directory における任意のコードを実行される脆弱性	CWE-310 暗号の問題	CVE-2010-1377	2010-07-9 16:27	2010-06-15	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 1, 2026, 4:12 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
246591	7.5	HIGH Network	dedecms	dedecms	DedeCMS through 5.7SP2 allows arbitrary file write in dede/file_manage_control.php via a dede/file_manage_view.php?fmdo=newfile request with name and str parameters, as demonstrated by writing to a n…	CWE-20 Improper Input Validation	CVE-2018-12046	2024-11-21 12:44	2018-06-8	Show	GitHub Exploit DB Packet Storm

246592	9.8	CRITICAL Network	dedecms	dedecms	DedeCMS through V5.7SP2 allows arbitrary file upload in dede/file_manage_control.php via a dede/file_manage_view.php?fmdo=upload request with an upfile1 parameter, as demonstrated by uploading a .php…	CWE-434 Unrestricted Upload of File with Dangerous Type	CVE-2018-12045	2024-11-21 12:44	2018-06-8	Show	GitHub Exploit DB Packet Storm

246593	7.5	HIGH Network	mediatek	awus036nh_firmware	An issue was discovered on the MediaTek AWUS036NH wireless USB adapter through 5.1.25.0. Attackers can remotely deny service by sending specially constructed 802.11 frames.	CWE-20 Improper Input Validation	CVE-2018-12041	2024-11-21 12:44	2018-06-8	Show	GitHub Exploit DB Packet Storm

246594	6.1	MEDIUM Network	getsymphony	symphony	content/content.blueprintspages.php in Symphony 2.7.6 has XSS via the pages content page.	CWE-79 Cross-site Scripting	CVE-2018-12043	2024-11-21 12:44	2018-06-8	Show	GitHub Exploit DB Packet Storm

246595	7.5	HIGH Network	roxyfileman	roxy_fileman	Roxy Fileman through v1.4.5 has Directory traversal via the php/download.php f parameter.	CWE-22 Path Traversal	CVE-2018-12042	2024-11-21 12:44	2018-06-8	Show	GitHub Exploit DB Packet Storm

246596	9.8	CRITICAL Network	joyplus-cms_project	joyplus-cms	joyplus-cms 1.6.0 allows Remote Code Execution because of an Arbitrary SQL command execution issue in manager/index.php involving use of a "/!select/" substring in place of a select substring.	CWE-89 SQL Injection	CVE-2018-12039	2024-11-21 12:44	2018-06-8	Show	GitHub Exploit DB Packet Storm

246597	7.8	HIGH Local	owasp	dependency-check	OWASP Dependency-Check before 3.2.0 allows attackers to write to arbitrary files via a crafted archive that holds directory traversal filenames.	CWE-22 CWE-123 Path Traversal Write-what-where Condition	CVE-2018-12036	2024-11-21 12:44	2018-06-8	Show	GitHub Exploit DB Packet Storm

246598	9.8	CRITICAL Network	eaton	intelligent_power_manager	Local file inclusion in Eaton Intelligent Power Manager v1.6 allows an attacker to include a file via server/node_upgrade_srv.js directory traversal with the firmware parameter in a downloadFirmware …	CWE-22 Path Traversal	CVE-2018-12031	2024-11-21 12:44	2018-06-8	Show	GitHub Exploit DB Packet Storm

246599	7.5	HIGH Network	gnome	epiphany	libephymain.so in GNOME Web (aka Epiphany) through 3.28.2.1 allows remote attackers to cause a denial of service (application crash) via certain window.open and document.write calls.	NVD-CWE-noinfo	CVE-2018-12016	2024-11-21 12:44	2018-06-7	Show	GitHub Exploit DB Packet Storm

246600	7.5	HIGH Network	canonical debian perl archive\ apple netapp	ubuntu_linux debian_linux perl \ mac_os_x snap_creator_framework data_ontap_edge snapdrive oncommand_workflow_automation	In Perl through 5.26.2, the Archive::Tar module allows remote attackers to bypass a directory-traversal protection mechanism, and overwrite arbitrary files, via an archive file containing a symlink a…	CWE-59 Link Following	CVE-2018-12015	2024-11-21 12:44	2018-06-7	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed