Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 5, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
257151	6.8	警告	マイクロソフト	-	Microsoft Windows の win32k.sys における任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2010-0485	2010-07-1 16:20	2010-06-8	Show	GitHub Exploit DB Packet Storm

257152	6.8	警告	マイクロソフト	-	Microsoft Windows の win32k.sys における任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2010-0484	2010-07-1 16:20	2010-06-8	Show	GitHub Exploit DB Packet Storm

257153	4.3	警告	マイクロソフト	-	Microsoft SharePoint Server におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-0817	2010-07-1 16:02	2010-04-29	Show	GitHub Exploit DB Packet Storm

257154	9.3	危険	マイクロソフト	-	Microsoft Windows の Microsoft Data Analyzer ActiveX コントロールにおける任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-0252	2010-07-1 16:02	2010-02-9	Show	GitHub Exploit DB Packet Storm

257155	9.3	危険	マイクロソフト	-	Microsoft Internet Explorer におけるアクセス制限を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-0255	2010-07-1 16:01	2010-02-3	Show	GitHub Exploit DB Packet Storm

257156	9.3	危険	マイクロソフト	-	Microsoft Internet Explorer における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-1262	2010-06-30 18:53	2010-06-8	Show	GitHub Exploit DB Packet Storm

257157	9.3	危険	マイクロソフト	-	Microsoft Internet Explorer における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-1259	2010-06-30 18:53	2010-06-8	Show	GitHub Exploit DB Packet Storm

257158	9.3	危険	マイクロソフト	-	Microsoft Internet Explorer における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-1261	2010-06-30 18:53	2010-06-8	Show	GitHub Exploit DB Packet Storm

257159	9.3	危険	マイクロソフト	-	Microsoft Internet Explorer における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-1260	2010-06-30 18:53	2010-06-8	Show	GitHub Exploit DB Packet Storm

257160	4.3	警告	マイクロソフト	-	複数の Microsoft 製品におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-1257	2010-06-30 18:53	2010-06-8	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 5, 2026, 4:11 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
249681	5.3	MEDIUM Adjacent	cisco	wap121_firmware wap125_firmware wap131_firmware wap150_firmware wap321_firmware wap351_firmware wap361_firmware wap371_firmware	A vulnerability in the implementation of Extensible Authentication Protocol over LAN (EAPOL) functionality in Cisco Small Business 100 Series Wireless Access Points and Cisco Small Business 300 Serie…	NVD-CWE-noinfo	CVE-2018-0412	2024-11-21 12:38	2018-08-16	Show	GitHub Exploit DB Packet Storm

249682	8.6	HIGH Network	cisco	web_security_appliance	A vulnerability in the web proxy functionality of Cisco AsyncOS Software for Cisco Web Security Appliances could allow an unauthenticated, remote attacker to exhaust system memory and cause a denial …	CWE-400 Uncontrolled Resource Consumption	CVE-2018-0410	2024-11-21 12:38	2018-08-16	Show	GitHub Exploit DB Packet Storm

249683	7.5	HIGH Network	cisco	telepresence_video_communication_server unified_communications_manager_im_and_presence_service	A vulnerability in the XCP Router service of the Cisco Unified Communications Manager IM & Presence Service (CUCM IM&P) and the Cisco TelePresence Video Communication Server (VCS) and Expressway coul…	CWE-125 Out-of-bounds Read	CVE-2018-0409	2024-11-21 12:38	2018-08-16	Show	GitHub Exploit DB Packet Storm

249684	6.1	MEDIUM Network	cisco	unified_communications_domain_manager hosted_collaboration_solution	A vulnerability in Cisco Unified Communications Domain Manager Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack on an affected system. The vulne…	CWE-79 Cross-site Scripting	CVE-2018-0386	2024-11-21 12:38	2018-08-16	Show	GitHub Exploit DB Packet Storm

249685	5.4	MEDIUM Network	cisco	registered_envelope_service	A vulnerability in the web-based management interface of the Cisco Registered Envelope Service could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a u…	CWE-79 Cross-site Scripting	CVE-2018-0367	2024-11-21 12:38	2018-08-16	Show	GitHub Exploit DB Packet Storm

249686	9.8	CRITICAL Network	qnap	helpdesk	Command injection vulnerability in Helpdesk versions 1.1.21 and earlier in QNAP QTS 4.2.6 build 20180531, QTS 4.3.3 build 20180528, QTS 4.3.4 build 20180528 and their earlier versions could allow rem…	CWE-77 Command Injection	CVE-2018-0714	2024-11-21 12:38	2018-08-13	Show	GitHub Exploit DB Packet Storm

249687	7.8	HIGH Local	cisco	thor_video_codec	Stack-based buffer overflow in the Cisco Thor decoder before commit 18de8f9f0762c3a542b1122589edb8af859d9813 allows local users to cause a denial of service (segmentation fault) and execute arbitrary…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2018-0429	2024-11-21 12:38	2018-08-10	Show	GitHub Exploit DB Packet Storm

249688	8.8	HIGH Network	cisco	identity_services_engine_software	A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack and…	CWE-352 Origin Validation Error	CVE-2018-0413	2024-11-21 12:38	2018-08-2	Show	GitHub Exploit DB Packet Storm

249689	6.1	MEDIUM Network	cisco	unified_communications_manager	A vulnerability in the web-based management interface of Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting (XSS) attack …	CWE-79 Cross-site Scripting	CVE-2018-0411	2024-11-21 12:38	2018-08-2	Show	GitHub Exploit DB Packet Storm

249690	5.4	MEDIUM Network	cisco	sf300-08_firmware sf302-08_firmware sf302-08p_firmware sf302-08pp_firmware sf302-08mp_firmware sf302-08mpp_firmware sf300-24_firmware sf300-24p_firmware sf300-24pp_firmware	A vulnerability in the web-based management interface of Cisco Small Business 300 Series (Sx300) Managed Switches could allow an authenticated, remote attacker to conduct a reflected cross-site scrip…	CWE-79 Cross-site Scripting	CVE-2018-0408	2024-11-21 12:38	2018-08-2	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed