Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 31, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
256751	9.3	危険	アドビシステムズ	-	Adobe Shockwave Player における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-1287	2010-06-1 15:45	2010-05-11	Show	GitHub Exploit DB Packet Storm

256752	9.3	危険	アドビシステムズ	-	Adobe Shockwave Player における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-1286	2010-06-1 15:44	2010-05-11	Show	GitHub Exploit DB Packet Storm

256753	9.3	危険	アドビシステムズ	-	Adobe Shockwave Player における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-1284	2010-06-1 15:44	2010-05-11	Show	GitHub Exploit DB Packet Storm

256754	9.3	危険	アドビシステムズ	-	Adobe Shockwave Player における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-1283	2010-06-1 15:44	2010-05-11	Show	GitHub Exploit DB Packet Storm

256755	4.3	警告	レッドハット Glyph & Cog, LLC ターボリナックスサイバートラスト株式会社 CUPS	-	Xpdf および CUPS の JBIG2 デコーダーにおけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2009-0166	2010-06-1 12:01	2009-04-16	Show	GitHub Exploit DB Packet Storm

256756	4.3	警告	Glyph & Cog, LLC アップルサイバートラスト株式会社 CUPS ターボリナックスレッドハット	-	Xpdf および CUPS の JBIG2 デコーダーにおける整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2009-0147	2010-06-1 12:01	2009-04-16	Show	GitHub Exploit DB Packet Storm

256757	4.3	警告	Glyph & Cog, LLC アップルサイバートラスト株式会社 CUPS ターボリナックスレッドハット	-	Xpdf および CUPS の JBIG2 デコーダーにおけるサービス運用妨害 (DoS) の脆弱性	CWE-119 バッファエラー	CVE-2009-0146	2010-06-1 12:01	2009-04-16	Show	GitHub Exploit DB Packet Storm

256758	4.3	警告	アドビシステムズ	-	Adobe Shockwave Player におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2010-1282	2010-05-31 18:27	2010-05-11	Show	GitHub Exploit DB Packet Storm

256759	9.3	危険	アドビシステムズ	-	Adobe Shockwave Player の iml32.dll における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-1281	2010-05-31 18:26	2010-05-11	Show	GitHub Exploit DB Packet Storm

256760	9.3	危険	アドビシステムズ	-	Adobe Shockwave Player における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-1280	2010-05-31 18:26	2010-05-11	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 1, 2026, 4:12 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
246601	7.5	HIGH Network	ijg	libjpeg	libjpeg 9c has a large loop because read_pixel in rdtarga.c mishandles EOF.	CWE-834 Excessive Iteration	CVE-2018-11813	2024-11-21 12:44	2018-06-6	Show	GitHub Exploit DB Packet Storm

246602	9.1	CRITICAL Network	zohocorp	manageengine_applications_manager	Incorrect Access Control in CustomFieldsFeedServlet in Zoho ManageEngine Applications Manager Version 13 before build 13740 allows an attacker to delete any file and read certain files on the server …	CWE-20 Improper Input Validation	CVE-2018-11808	2024-11-21 12:44	2018-06-6	Show	GitHub Exploit DB Packet Storm

246603	8.8	HIGH Network	apache	hadoop	Web endpoint authentication check is broken in Apache Hadoop 3.0.0-alpha4, 3.0.0-beta1, and 3.0.0. Authenticated users may impersonate any user even if no proxy user is configured.	CWE-306 Missing Authentication for Critical Function	CVE-2018-11764	2024-11-21 12:43	2020-10-22	Show	GitHub Exploit DB Packet Storm

246604	7.5	HIGH Network	apache	hadoop	In Apache Hadoop versions 3.0.0-alpha2 to 3.0.0, 2.9.0 to 2.9.2, 2.8.0 to 2.8.5, any users can access some servlets without authentication when Kerberos authentication is enabled and SPNEGO through H…	CWE-287 Improper Authentication	CVE-2018-11765	2024-11-21 12:43	2020-10-1	Show	GitHub Exploit DB Packet Storm

246605	5.4	MEDIUM Adjacent	puppet	puppet_server	Previous versions of Puppet Agent didn't verify the peer in the SSL connection prior to downloading the CRL. This issue is resolved in Puppet Agent 6.4.0.	CWE-295 Improper Certificate Validation	CVE-2018-11751	2024-11-21 12:43	2019-12-17	Show	GitHub Exploit DB Packet Storm

246606	7.5	HIGH Network	apache	hadoop	In Apache Hadoop 3.1.0 to 3.1.1, 3.0.0-alpha1 to 3.0.3, 2.9.0 to 2.9.1, and 2.0.0-alpha to 2.8.4, the user/group information can be corrupted across storing in fsimage and reading back from fsimage.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2018-11768	2024-11-21 12:43	2019-10-4	Show	GitHub Exploit DB Packet Storm

246607	9.8	CRITICAL Network	eventum_project	eventum	Controller/ListController.php in Eventum 3.5.0 is vulnerable to Deserialization of Untrusted Data. Fixed in version 3.5.2.	CWE-502 Deserialization of Untrusted Data	CVE-2018-11569	2024-11-21 12:43	2019-09-6	Show	GitHub Exploit DB Packet Storm

246608	8.1	HIGH Network	cloudera	cloudera_manager	Cloudera Manager through 5.15 has Incorrect Access Control.	CWE-284 Improper Access Control	CVE-2018-11744	2024-11-21 12:43	2019-07-11	Show	GitHub Exploit DB Packet Storm

246609	6.1	MEDIUM Network	e107	e107	In e107 v2.1.7, output without filtering results in XSS.	CWE-79 Cross-site Scripting	CVE-2018-11734	2024-11-21 12:43	2019-07-11	Show	GitHub Exploit DB Packet Storm

246610	9.8	CRITICAL Network	fasterxml redhat oracle	jackson-databind openshift_container_platform retail_customer_management_and_segmentation_foundation clusterware global_lifecycle_management_opatch utilities_advanced_spatial_and_opera…	An issue was discovered in FasterXML jackson-databind 2.0.0 through 2.9.5. Use of Jackson default typing along with a gadget class from iBatis allows exfiltration of content. Fixed in 2.7.9.4, 2.8.11…	CWE-502 Deserialization of Untrusted Data	CVE-2018-11307	2024-11-21 12:43	2019-07-10	Show	GitHub Exploit DB Packet Storm