Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 3, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
256961 9.3 危険 マイクロソフト - Microsoft Internet Explorer における任意のコードを実行される脆弱性 CWE-399
リソース管理の問題 		CVE-2010-0491 2010-04-19 19:19 2010-03-30 Show GitHub Exploit DB Packet Storm
256962 4.3 警告 マイクロソフト - Microsoft Internet Explorer における同一生成元ポリシーを回避される脆弱性 CWE-200
情報漏えい 		CVE-2010-0494 2010-04-19 19:19 2010-03-30 Show GitHub Exploit DB Packet Storm
256963 9.3 危険 マイクロソフト - Microsoft Internet Explorer の mstime.dll における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2010-0492 2010-04-19 19:19 2010-03-30 Show GitHub Exploit DB Packet Storm
256964 9.3 危険 マイクロソフト - Microsoft Internet Explorer における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2010-0490 2010-04-19 19:18 2010-03-30 Show GitHub Exploit DB Packet Storm
256965 9.3 危険 マイクロソフト - Microsoft Internet Explorer における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2010-0807 2010-04-19 19:18 2010-03-30 Show GitHub Exploit DB Packet Storm
256966 9.3 危険 マイクロソフト - Microsoft Internet Explorer における任意のコードを実行される脆弱性 CWE-362
競合状態 		CVE-2010-0489 2010-04-19 19:18 2010-03-30 Show GitHub Exploit DB Packet Storm
256967 9.3 危険 マイクロソフト - Microsoft Internet Explorer における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2010-0267 2010-04-19 19:18 2010-03-30 Show GitHub Exploit DB Packet Storm
256968 10 危険 アップル - Apple Mac OS X の xar におけるパッケージ署名の検証処理に関する脆弱性 CWE-DesignError
CVE-2010-0055 2010-04-16 16:59 2010-03-29 Show GitHub Exploit DB Packet Storm
256969 0 注意 アップル - Apple Mac OS X の Wiki サーバにおけるコンテンツを公開される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-0534 2010-04-16 16:58 2010-03-29 Show GitHub Exploit DB Packet Storm
256970 5 警告 アップル - Apple Mac OS X の Wiki サーバにおける重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2010-0523 2010-04-16 16:58 2010-03-29 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 3, 2026, 4:18 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
246471 8.1 HIGH
Network 		intelbras nplug_firmware Intelbras NPLUG 1.0.0.14 wireless repeater devices have a critical vulnerability that allows an attacker to authenticate in the web interface just by using "admin:" as the name of a cookie. CWE-287
Improper Authentication 		CVE-2018-12455 2024-11-21 12:45 2018-10-11 Show GitHub Exploit DB Packet Storm
246472 9.8 CRITICAL
Network 		eclipse vert.x In version from 3.5.Beta1 to 3.5.3 of Eclipse Vert.x, the OpenAPI XML type validator creates XML parsers without taking appropriate defense against XML attacks. This mechanism is exclusively when the… CWE-611
XXE 		CVE-2018-12544 2024-11-21 12:45 2018-10-11 Show GitHub Exploit DB Packet Storm
246473 9.8 CRITICAL
Network 		eclipse vert.x In version from 3.0.0 to 3.5.3 of Eclipse Vert.x, the StaticHandler uses external input to construct a pathname that should be within a restricted directory, but it does not properly neutralize '\' (… CWE-22
Path Traversal 		CVE-2018-12542 2024-11-21 12:45 2018-10-11 Show GitHub Exploit DB Packet Storm
246474 6.5 MEDIUM
Network 		eclipse vert.x In version from 3.0.0 to 3.5.3 of Eclipse Vert.x, the WebSocket HTTP upgrade implementation buffers the full http request before doing the handshake, holding the entire request body in memory. There … CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2018-12541 2024-11-21 12:45 2018-10-11 Show GitHub Exploit DB Packet Storm
246475 9.8 CRITICAL
Network 		tibco spotfire_statistics_services The web server component of TIBCO Software Inc's Spotfire Statistics Services contains multiple vulnerabilities that may allow the remote execution of code. Without needing to authenticate, an attack… NVD-CWE-noinfo
CVE-2018-12410 2024-11-21 12:45 2018-10-11 Show GitHub Exploit DB Packet Storm
246476 7.5 HIGH
Network 		opensuse open_build_service A Improper Input Validation vulnerability in Open Build Service allows remote attackers to cause DoS by specifying crafted request IDs. Affected releases are openSUSE Open Build Service: versions pri… CWE-20
 Improper Input Validation  		CVE-2018-12479 2024-11-21 12:45 2018-10-9 Show GitHub Exploit DB Packet Storm
246477 6.5 MEDIUM
Network 		opensuse open_build_service A Improper Input Validation vulnerability in Open Build Service allows remote attackers to extract files from the system where the service runs. Affected releases are openSUSE Open Build Service: sta… CWE-20
 Improper Input Validation  		CVE-2018-12478 2024-11-21 12:45 2018-10-9 Show GitHub Exploit DB Packet Storm
246478 7.5 HIGH
Network 		opensuse leap A Improper Neutralization of CRLF Sequences vulnerability in Open Build Service allows remote attackers to cause deletion of directories by tricking obs-service-refresh_patches to delete them. Affect… CWE-93
CRLF Injection 		CVE-2018-12477 2024-11-21 12:45 2018-10-9 Show GitHub Exploit DB Packet Storm
246479 9.8 CRITICAL
Network 		opensuse tar_scm Improper input validation in obs-service-tar_scm of Open Build Service allows remote attackers to cause access and extract information outside the current build or cause the creation of file in attac… CWE-20
 Improper Input Validation  		CVE-2018-12474 2024-11-21 12:45 2018-10-9 Show GitHub Exploit DB Packet Storm
246480 9.1 CRITICAL
Network 		suse subscription_management_tool A improper authentication using the HOST header in SUSE Linux SMT allows remote attackers to spoof a sibling server. Affected releases are SUSE Linux SMT: versions prior to 3.0.37. CWE-287
Improper Authentication 		CVE-2018-12472 2024-11-21 12:45 2018-10-4 Show GitHub Exploit DB Packet Storm