Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 9, 2026, 10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
257111	4.3	警告	Opera Software ASA	-	Opera におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-3266	2010-09-27 16:14	2009-09-18	Show	GitHub Exploit DB Packet Storm

257112	4.3	警告	Opera Software ASA	-	Opera におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-3265	2010-09-27 16:14	2009-09-18	Show	GitHub Exploit DB Packet Storm

257113	5	警告	Opera Software ASA	-	Opera の X.509 証明書における SSLサーバになりすまされる脆弱性	CWE-310 暗号の問題	CVE-2009-3044	2010-09-27 16:13	2009-09-1	Show	GitHub Exploit DB Packet Storm

257114	4.3	警告	Opera Software ASA	-	Opera における data: URI をブロックしない脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-3013	2010-09-27 16:13	2009-08-31	Show	GitHub Exploit DB Packet Storm

257115	5	警告	Opera Software ASA	-	Opera におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2009-2577	2010-09-27 16:12	2009-07-22	Show	GitHub Exploit DB Packet Storm

257116	4.3	警告	Opera Software ASA	-	Opera におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2009-2540	2010-09-27 16:11	2009-07-20	Show	GitHub Exploit DB Packet Storm

257117	4.3	警告	Opera Software ASA	-	Opera における javascript: URI をブロックしない脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-2351	2010-09-27 16:11	2009-07-7	Show	GitHub Exploit DB Packet Storm

257118	6.8	警告	Opera Software ASA	-	Opera における任意の https サイトになりすまされる脆弱性	CWE-287 不適切な認証	CVE-2009-2070	2010-09-27 16:11	2009-06-15	Show	GitHub Exploit DB Packet Storm

257119	6.8	警告	Opera Software ASA	-	Opera における任意の Web スクリプトを実行される脆弱性	CWE-287 不適切な認証	CVE-2009-2067	2010-09-27 16:10	2009-06-15	Show	GitHub Exploit DB Packet Storm

257120	6.8	警告	Opera Software ASA	-	Opera における任意の Web スクリプトを実行される脆弱性	CWE-287 不適切な認証	CVE-2009-2063	2010-09-27 16:10	2009-06-15	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 9, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
250551	3.3	LOW Local	hibara	attachecase	Directory traversal vulnerability in ver.2.8.4.0 and earlier and ver.3.3.0.0 and earlier allows an attacker to create arbitrary files via specially crafted ATC file.	CWE-22 Path Traversal	CVE-2018-0660	2024-11-21 12:38	2018-09-7	Show	GitHub Exploit DB Packet Storm

250552	5.5	MEDIUM Local	hibara	attachecase	Directory traversal vulnerability in ver.2.8.4.0 and earlier and ver.3.3.0.0 and earlier allows an attacker to create or overwrite existing files via specially crafted ATC file.	CWE-22 Path Traversal	CVE-2018-0659	2024-11-21 12:38	2018-09-7	Show	GitHub Exploit DB Packet Storm

250553	7.2	HIGH Network	ec-cube gmo-pg	ec-cube_payment_module gmo-pg_payment_module	Input validation issue in EC-CUBE Payment Module (2.12) version 3.5.23 and earlier, EC-CUBE Payment Module (2.11) version 2.3.17 and earlier, GMO-PG Payment Module (PG Multi-Payment Service) (2.12) v…	CWE-20 Improper Input Validation	CVE-2018-0658	2024-11-21 12:38	2018-09-7	Show	GitHub Exploit DB Packet Storm

250554	4.8	MEDIUM Network	ec-cube gmo-pg	ec-cube_payment_module gmo-pg_payment_module	Cross-site scripting vulnerability in EC-CUBE Payment Module and GMO-PG Payment Module (PG Multi-Payment Service) for EC-CUBE (EC-CUBE Payment Module (2.12) version 3.5.23 and earlier, EC-CUBE Paymen…	CWE-79 Cross-site Scripting	CVE-2018-0657	2024-11-21 12:38	2018-09-7	Show	GitHub Exploit DB Packet Storm

250555	4.8	MEDIUM Network	weseek	growi	Cross-site scripting vulnerability in GROWI v.3.1.11 and earlier allows remote authenticated attackers to inject arbitrary web script or HTML via the app settings section of admin page.	CWE-79 Cross-site Scripting	CVE-2018-0655	2024-11-21 12:38	2018-09-7	Show	GitHub Exploit DB Packet Storm

250556	6.1	MEDIUM Network	weseek	growi	Cross-site scripting vulnerability in GROWI v.3.1.11 and earlier allows remote attackers to inject arbitrary web script or HTML via the modal for creating Wiki page.	CWE-79 Cross-site Scripting	CVE-2018-0654	2024-11-21 12:38	2018-09-7	Show	GitHub Exploit DB Packet Storm

250557	6.1	MEDIUM Network	weseek	growi	Cross-site scripting vulnerability in GROWI v.3.1.11 and earlier allows remote attackers to inject arbitrary web script or HTML via Wiki page view.	CWE-79 Cross-site Scripting	CVE-2018-0653	2024-11-21 12:38	2018-09-7	Show	GitHub Exploit DB Packet Storm

250558	4.8	MEDIUM Network	weseek	growi	Cross-site scripting vulnerability in GROWI v.3.1.11 and earlier allows remote authenticated attackers to inject arbitrary web script or HTML via the UserGroup Management section of admin page.	CWE-79 Cross-site Scripting	CVE-2018-0652	2024-11-21 12:38	2018-09-7	Show	GitHub Exploit DB Packet Storm

250559	7.4	HIGH Network	linecorp	line_music	The LINE MUSIC for Android version 3.1.0 to versions prior to 3.6.5 does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive…	CWE-295 Improper Certificate Validation	CVE-2018-0650	2024-11-21 12:38	2018-09-7	Show	GitHub Exploit DB Packet Storm

250560	7.8	HIGH Local	eset	internet_security smart_security nod32_antivirus deslock\+_pro compusec smart_security_premium	Untrusted search path vulnerability in the installers of multiple Canon IT Solutions Inc. software programs (ESET Smart Security Premium, ESET Internet Security, ESET Smart Security, ESET NOD32 Antiv…	CWE-426 Untrusted Search Path	CVE-2018-0649	2024-11-21 12:38	2018-09-7	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed