Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 4, 2026, 10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
257161	6.5	警告	オラクル	-	Oracle Database の JavaVM コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0866	2010-05-12 15:17	2010-04-13	Show	GitHub Exploit DB Packet Storm

257162	7.1	危険	オラクル	-	Oracle Database の Core RDBMS コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0860	2010-05-12 15:16	2010-04-13	Show	GitHub Exploit DB Packet Storm

257163	7.5	危険	オラクル	-	複数の Oracle 製品の Oracle Internet Directory コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0853	2010-05-12 15:16	2010-04-13	Show	GitHub Exploit DB Packet Storm

257164	2.6	注意	シックス・アパート株式会社	-	Movable Type におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-1985	2010-05-12 12:01	2010-05-12	Show	GitHub Exploit DB Packet Storm

257165	10	危険	日立	-	複数の EUR Form 製品および EUR 製品における任意のコードが実行される脆弱性	CWE-noinfo 情報不足	-	2010-05-11 15:16	2010-03-31	Show	GitHub Exploit DB Packet Storm

257166	6.4	警告	マイクロソフト	-	Microsoft Windows における ISATAP パケットの処理に関する IPv4 ソースアドレスの制限を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-0812	2010-05-11 15:16	2010-04-13	Show	GitHub Exploit DB Packet Storm

257167	7.6	危険	マイクロソフト	-	Microsoft Office Visio における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-0256	2010-05-11 15:16	2010-04-13	Show	GitHub Exploit DB Packet Storm

257168	7.6	危険	マイクロソフト	-	Microsoft Office Visio における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-0254	2010-05-11 15:15	2010-04-13	Show	GitHub Exploit DB Packet Storm

257169	5	警告	マイクロソフト	-	Microsoft Windows の SMTP コンポーネントにおける情報漏えいの脆弱性	CWE-200 情報漏えい	CVE-2010-0025	2010-05-11 15:15	2010-04-13	Show	GitHub Exploit DB Packet Storm

257170	5	警告	マイクロソフト	-	Microsoft Windows の SMTP コンポーネントにおけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2010-0024	2010-05-11 15:15	2010-04-13	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 4, 2026, 4:17 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
246851	7.2	HIGH Network	ui	edgeswitch_firmware	Ubiquiti Networks EdgeSwitch version 1.7.3 and prior suffer from an externally controlled format-string vulnerability due to lack of protection on the admin CLI, leading to code execution and privile…	CWE-134 Use of Externally-Controlled Format String	CVE-2018-12590	2024-11-21 12:45	2018-06-20	Show	GitHub Exploit DB Packet Storm

246852	3.6	LOW Local	dropbox	dropbox	An issue was discovered in the com.dropbox.android application 98.2.2 for Android. The Passcode feature allows authentication bypass via runtime manipulation that forces a certain method's return val…	CWE-287 Improper Authentication	CVE-2018-12446	2024-11-21 12:45	2018-06-20	Show	GitHub Exploit DB Packet Storm

246853	6.1	MEDIUM Network	public_knowledge_project	open_monograph_press	Cross-site scripting (XSS) vulnerability in templates/frontend/pages/searchResults.tpl in Public Knowledge Project (PKP) Open Monograph Press (OMP) v1.2.0 through 3.1.1-2 before 3.1.1-3 allows remote…	CWE-79 Cross-site Scripting	CVE-2018-12588	2024-11-21 12:45	2018-06-20	Show	GitHub Exploit DB Packet Storm

246854	3.1	LOW Physics	dropbox	dropbox	An issue was discovered in the com.dropbox.android application 98.2.2 for Android. The FingerprintManager class for Biometric validation allows authentication bypass through the callback method from …	CWE-287 Improper Authentication	CVE-2018-12445	2024-11-21 12:45	2018-06-20	Show	GitHub Exploit DB Packet Storm

246855	8.8	HIGH Network	codenx	shopnx	An issue was discovered in ShopNx through 2017-11-17. The vulnerability allows a remote attacker to upload any malicious file to a Node.js application. An attacker can upload a malicious HTML file th…	CWE-434 Unrestricted Upload of File with Dangerous Type	CVE-2018-12519	2024-11-21 12:45	2018-06-20	Show	GitHub Exploit DB Packet Storm

246856	6.5	MEDIUM Network	akcms_project	akcms	An issue was discovered in AKCMS 6.1. CSRF can delete an article via an admincp deleteitem action to index.php.	CWE-352 Origin Validation Error	CVE-2018-12583	2024-11-21 12:45	2018-06-20	Show	GitHub Exploit DB Packet Storm

246857	8.8	HIGH Network	akcms_project	akcms	An issue was discovered in AKCMS 6.1. CSRF can add an admin account via a /index.php?file=account&action=manageaccounts&job=newaccount URI.	CWE-352 Origin Validation Error	CVE-2018-12582	2024-11-21 12:45	2018-06-20	Show	GitHub Exploit DB Packet Storm

246858	6.1	MEDIUM Network	dragonbyte-tech	vbsecurity	library/DBTech/Security/Action/Sessions.php in DragonByte vBSecurity 3.x through 3.3.0 for vBulletin 3 and vBulletin 4 allows self-XSS via $session['user_agent'] in the "Login Sessions" feature.	CWE-79 Cross-site Scripting	CVE-2018-12580	2024-11-21 12:45	2018-06-20	Show	GitHub Exploit DB Packet Storm

246859	9.8	CRITICAL Network	sam2p_project	sam2p	There is a heap-based buffer overflow in bmp_compress1_row in appliers.cpp in sam2p 0.49.4 that leads to a denial of service or possibly unspecified other impact.	CWE-787 Out-of-bounds Write	CVE-2018-12578	2024-11-21 12:45	2018-06-20	Show	GitHub Exploit DB Packet Storm

246860	8.8	HIGH Network	linaro debian	lava debian_linux	An issue was discovered in Linaro LAVA before 2018.5.post1. Because of use of yaml.load() instead of yaml.safe_load() when parsing user data, remote code execution can occur.	CWE-20 Improper Input Validation	CVE-2018-12565	2024-11-21 12:45	2018-06-19	Show	GitHub Exploit DB Packet Storm