Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 1, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
256891	9.3	危険	マイクロソフト	-	Microsoft Windows の MPEG Layer-3 オーディオコーデックにおけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-0480	2010-05-10 19:11	2010-04-13	Show	GitHub Exploit DB Packet Storm

256892	9.3	危険	マイクロソフト	-	Microsoft Windows の Media Services におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-0478	2010-05-10 19:10	2010-04-13	Show	GitHub Exploit DB Packet Storm

256893	10	危険	マイクロソフト	-	Microsoft Windows の SMB クライアントにおける任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2010-0477	2010-05-10 19:10	2010-04-13	Show	GitHub Exploit DB Packet Storm

256894	10	危険	マイクロソフト	-	Microsoft Windows の SMB クライアントにおける任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2010-0476	2010-05-10 19:10	2010-04-13	Show	GitHub Exploit DB Packet Storm

256895	10	危険	マイクロソフト	-	Microsoft Windows の SMB クライアントにおける任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2010-0270	2010-05-10 19:10	2010-04-13	Show	GitHub Exploit DB Packet Storm

256896	10	危険	マイクロソフト	-	Microsoft Windows の SMB クライアントにおける任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2010-0269	2010-05-10 19:09	2010-04-13	Show	GitHub Exploit DB Packet Storm

256897	9.3	危険	マイクロソフト	-	Microsoft Windows の Cabinet File Viewer Shell Extension における任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2010-0487	2010-05-10 19:09	2010-04-13	Show	GitHub Exploit DB Packet Storm

256898	9.3	危険	マイクロソフト	-	Microsoft Windows の Authenticode Signature Verification における任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2010-0486	2010-05-10 19:09	2010-04-13	Show	GitHub Exploit DB Packet Storm

256899	4.7	警告	サイバートラスト株式会社 Linux レッドハット	-	x86_64 および amd64 プラットフォーム上 Linux Kernel におけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2009-4271	2010-05-10 18:25	2010-03-16	Show	GitHub Exploit DB Packet Storm

256900	5	警告	VMware	-	VMware Authorization Service の VMware Authentication Daemon におけるサービス運用妨害 (DoS) の脆弱性	CWE-134 書式文字列の問題	CVE-2009-3707	2010-05-7 17:26	2009-10-16	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 1, 2026, 4:12 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
246601	7.5	HIGH Network	ijg	libjpeg	libjpeg 9c has a large loop because read_pixel in rdtarga.c mishandles EOF.	CWE-834 Excessive Iteration	CVE-2018-11813	2024-11-21 12:44	2018-06-6	Show	GitHub Exploit DB Packet Storm

246602	9.1	CRITICAL Network	zohocorp	manageengine_applications_manager	Incorrect Access Control in CustomFieldsFeedServlet in Zoho ManageEngine Applications Manager Version 13 before build 13740 allows an attacker to delete any file and read certain files on the server …	CWE-20 Improper Input Validation	CVE-2018-11808	2024-11-21 12:44	2018-06-6	Show	GitHub Exploit DB Packet Storm

246603	8.8	HIGH Network	apache	hadoop	Web endpoint authentication check is broken in Apache Hadoop 3.0.0-alpha4, 3.0.0-beta1, and 3.0.0. Authenticated users may impersonate any user even if no proxy user is configured.	CWE-306 Missing Authentication for Critical Function	CVE-2018-11764	2024-11-21 12:43	2020-10-22	Show	GitHub Exploit DB Packet Storm

246604	7.5	HIGH Network	apache	hadoop	In Apache Hadoop versions 3.0.0-alpha2 to 3.0.0, 2.9.0 to 2.9.2, 2.8.0 to 2.8.5, any users can access some servlets without authentication when Kerberos authentication is enabled and SPNEGO through H…	CWE-287 Improper Authentication	CVE-2018-11765	2024-11-21 12:43	2020-10-1	Show	GitHub Exploit DB Packet Storm

246605	5.4	MEDIUM Adjacent	puppet	puppet_server	Previous versions of Puppet Agent didn't verify the peer in the SSL connection prior to downloading the CRL. This issue is resolved in Puppet Agent 6.4.0.	CWE-295 Improper Certificate Validation	CVE-2018-11751	2024-11-21 12:43	2019-12-17	Show	GitHub Exploit DB Packet Storm

246606	7.5	HIGH Network	apache	hadoop	In Apache Hadoop 3.1.0 to 3.1.1, 3.0.0-alpha1 to 3.0.3, 2.9.0 to 2.9.1, and 2.0.0-alpha to 2.8.4, the user/group information can be corrupted across storing in fsimage and reading back from fsimage.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2018-11768	2024-11-21 12:43	2019-10-4	Show	GitHub Exploit DB Packet Storm

246607	9.8	CRITICAL Network	eventum_project	eventum	Controller/ListController.php in Eventum 3.5.0 is vulnerable to Deserialization of Untrusted Data. Fixed in version 3.5.2.	CWE-502 Deserialization of Untrusted Data	CVE-2018-11569	2024-11-21 12:43	2019-09-6	Show	GitHub Exploit DB Packet Storm

246608	8.1	HIGH Network	cloudera	cloudera_manager	Cloudera Manager through 5.15 has Incorrect Access Control.	CWE-284 Improper Access Control	CVE-2018-11744	2024-11-21 12:43	2019-07-11	Show	GitHub Exploit DB Packet Storm

246609	6.1	MEDIUM Network	e107	e107	In e107 v2.1.7, output without filtering results in XSS.	CWE-79 Cross-site Scripting	CVE-2018-11734	2024-11-21 12:43	2019-07-11	Show	GitHub Exploit DB Packet Storm

246610	9.8	CRITICAL Network	fasterxml redhat oracle	jackson-databind openshift_container_platform retail_customer_management_and_segmentation_foundation clusterware global_lifecycle_management_opatch utilities_advanced_spatial_and_opera…	An issue was discovered in FasterXML jackson-databind 2.0.0 through 2.9.5. Use of Jackson default typing along with a gadget class from iBatis allows exfiltration of content. Fixed in 2.7.9.4, 2.8.11…	CWE-502 Deserialization of Untrusted Data	CVE-2018-11307	2024-11-21 12:43	2019-07-10	Show	GitHub Exploit DB Packet Storm