Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":July 1, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
257141 7.5 危険 Miniwork - Joomla! 用 Canteen コンポーネントの menu.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-4977 2011-12-9 14:39 2011-11-1 Show GitHub Exploit DB Packet Storm
257142 4.3 警告 Nicholas Berry - CANDID の image/view.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-4978 2011-12-9 14:39 2011-11-1 Show GitHub Exploit DB Packet Storm
257143 7.5 危険 Nicholas Berry - CANDID の image/view.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-4979 2011-12-9 14:38 2011-11-1 Show GitHub Exploit DB Packet Storm
257144 7.5 危険 iScripts - iScripts ReserveLogic の packagedetails.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-4980 2011-12-9 14:38 2011-11-1 Show GitHub Exploit DB Packet Storm
257145 7.5 危険 YourFreeWorld.com - YourFreeWorld Banner Management における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-4981 2011-12-9 14:37 2011-11-1 Show GitHub Exploit DB Packet Storm
257146 7.5 危険 My Kazaam - My Kazaam Address & Contact Organizer における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-4982 2011-12-9 14:36 2011-11-1 Show GitHub Exploit DB Packet Storm
257147 7.5 危険 iScripts - iScripts CyberMatch における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-4983 2011-12-9 14:36 2011-11-1 Show GitHub Exploit DB Packet Storm
257148 7.5 危険 My Kazaam - My Kazaam Notes Management System における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-4984 2011-12-9 14:35 2011-11-1 Show GitHub Exploit DB Packet Storm
257149 4.3 警告 My Kazaam - My Kazaam Notes Management System におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-4985 2011-12-9 14:35 2011-11-1 Show GitHub Exploit DB Packet Storm
257150 7.5 危険 Cafuego - Simple Document Management System における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-4986 2011-12-9 14:34 2011-11-1 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:July 1, 2026, 4:27 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
252831 5.5 MEDIUM
Local 		qualcomm mdm9206_firmware
mdm9607_firmware
mdm9650_firmware
mdm9655_firmware
qm215_firmware
sd_210_firmware
sd_212_firmware
sd_205_firmware
sd_410_firmware
sd_412_firmware
sd_425… 		Insufficient protection of keys in keypad can lead HLOS to gain access to confidential keypad input data in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Sna… NVD-CWE-noinfo
CVE-2018-11958 2024-11-21 12:44 2019-04-5 Show GitHub Exploit DB Packet Storm
252832 6.8 MEDIUM
Physics 		tianocore edk_ii Stack overflow in DxeCore for EDK II may allow an unauthenticated user to potentially enable escalation of privilege, information disclosure and/or denial of service via local access. CWE-787
 Out-of-bounds Write 		CVE-2018-12183 2024-11-21 12:44 2019-03-28 Show GitHub Exploit DB Packet Storm
252833 6.7 MEDIUM
Local 		tianocore edk_ii Insufficient memory write check in SMM service for EDK II may allow an authenticated user to potentially enable escalation of privilege, information disclosure and/or denial of service via local acce… CWE-441
Confused Deputy 		CVE-2018-12182 2024-11-21 12:44 2019-03-28 Show GitHub Exploit DB Packet Storm
252834 6.0 MEDIUM
Local 		tianocore edk_ii Stack overflow in corrupted bmp for EDK II may allow unprivileged user to potentially enable denial of service or elevation of privilege via local access. CWE-787
 Out-of-bounds Write 		CVE-2018-12181 2024-11-21 12:44 2019-03-28 Show GitHub Exploit DB Packet Storm
252835 8.8 HIGH
Network 		tianocore
opensuse 		edk_ii
leap 		Buffer overflow in BlockIo service for EDK II may allow an unauthenticated user to potentially enable escalation of privilege, information disclosure and/or denial of service via network access. CWE-787
 Out-of-bounds Write 		CVE-2018-12180 2024-11-21 12:44 2019-03-28 Show GitHub Exploit DB Packet Storm
252836 7.8 HIGH
Local 		tianocore edk_ii Improper configuration in system firmware for EDK II may allow unauthenticated user to potentially enable escalation of privilege, information disclosure and/or denial of service via local access. NVD-CWE-noinfo
CVE-2018-12179 2024-11-21 12:44 2019-03-28 Show GitHub Exploit DB Packet Storm
252837 9.1 CRITICAL
Network 		tianocore edk_ii Buffer overflow in network stack for EDK II may allow unprivileged user to potentially enable escalation of privilege and/or denial of service via network. CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2018-12178 2024-11-21 12:44 2019-03-28 Show GitHub Exploit DB Packet Storm
252838 7.5 HIGH
Network 		fasterxml
debian
fedoraproject
oracle
redhat 		jackson-databind
debian_linux
fedora
jd_edwards_enterpriseone_tools
retail_merchandising_system
openshift_container_platform
jboss_enterprise_application_platform
single_sign-on<… 		An issue was discovered in FasterXML jackson-databind prior to 2.7.9.4, 2.8.11.2, and 2.9.6. When Default Typing is enabled (either globally or for a specific property), the service has the Oracle JD… CWE-502
 Deserialization of Untrusted Data 		CVE-2018-12023 2024-11-21 12:44 2019-03-22 Show GitHub Exploit DB Packet Storm
252839 7.5 HIGH
Network 		fasterxml
debian
fedoraproject
oracle
redhat 		jackson-databind
debian_linux
fedora
jd_edwards_enterpriseone_tools
retail_merchandising_system
openshift_container_platform
jboss_enterprise_application_platform
single_sign-on<… 		An issue was discovered in FasterXML jackson-databind prior to 2.7.9.4, 2.8.11.2, and 2.9.6. When Default Typing is enabled (either globally or for a specific property), the service has the Jodd-db j… CWE-502
 Deserialization of Untrusted Data 		CVE-2018-12022 2024-11-21 12:44 2019-03-22 Show GitHub Exploit DB Packet Storm
252840 7.5 HIGH
Network 		apache heron When accessing the heron-ui webpage, people can modify the file paths outside of the current container to access any file on the host. Example woule be modifying the parameter path= to go to the dire… CWE-22
Path Traversal 		CVE-2018-11789 2024-11-21 12:44 2019-03-22 Show GitHub Exploit DB Packet Storm