Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 1, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
257181	9.3	危険	マイクロソフト	-	Microsoft Office PowerPoint におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-0029	2010-03-2 11:26	2010-02-9	Show	GitHub Exploit DB Packet Storm

257182	10	危険	マイクロソフト	-	Microsoft Office の MSO.DLL におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-0243	2010-03-1 11:37	2010-02-9	Show	GitHub Exploit DB Packet Storm

257183	9.3	危険	マイクロソフト	-	Microsoft DirectX の DirectShow におけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-0250	2010-03-1 11:36	2010-02-9	Show	GitHub Exploit DB Packet Storm

257184	7.8	危険	マイクロソフト	-	Microsoft Windows の TCP/IP 実装におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2010-0242	2010-03-1 11:36	2010-02-9	Show	GitHub Exploit DB Packet Storm

257185	10	危険	マイクロソフト	-	Microsoft Windows の TCP/IP 実装における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-0241	2010-03-1 11:36	2010-02-9	Show	GitHub Exploit DB Packet Storm

257186	10	危険	マイクロソフト	-	Microsoft Windows の TCP/IP 実装における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-0240	2010-03-1 11:36	2010-02-9	Show	GitHub Exploit DB Packet Storm

257187	10	危険	マイクロソフト	-	Microsoft Windows の TCP/IP 実装における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-0239	2010-03-1 11:36	2010-02-9	Show	GitHub Exploit DB Packet Storm

257188	9.3	危険	マイクロソフト	-	Microsoft Windows の SMB クライアント実装における権限昇格の脆弱性	CWE-362 競合状態	CVE-2010-0017	2010-03-1 11:35	2010-02-9	Show	GitHub Exploit DB Packet Storm

257189	9.3	危険	マイクロソフト	-	Microsoft Windows の SMB クライアント実装における任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2010-0016	2010-03-1 11:35	2010-02-9	Show	GitHub Exploit DB Packet Storm

257190	5	警告	日立	-	uCosminexus Portal Framework におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	-	2010-02-26 11:36	2010-01-29	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 2, 2026, 4:18 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
248351	5.5	MEDIUM Local	jungo	windriver	windrvr1260.sys in Jungo DriverWizard WinDriver 12.6.0 allows attackers to cause a denial of service (BSOD) via a 0x953826DB DeviceIoControl call.	CWE-20 Improper Input Validation	CVE-2018-10071	2024-11-21 12:40	2018-04-13	Show	GitHub Exploit DB Packet Storm

248352	6.1	MEDIUM Network	jdownloads	jdownloads	The jDownloads extension before 3.2.59 for Joomla! has XSS.	CWE-79 Cross-site Scripting	CVE-2018-10068	2024-11-21 12:40	2018-04-13	Show	GitHub Exploit DB Packet Storm

248353	5.4	MEDIUM Network	cacti debian	cacti debian_linux	Cacti before 1.1.37 has XSS because it makes certain htmlspecialchars calls without the ENT_QUOTES flag (these calls occur when the html_escape function in lib/html.php is not used).	CWE-79 Cross-site Scripting	CVE-2018-10061	2024-11-21 12:40	2018-04-13	Show	GitHub Exploit DB Packet Storm

248354	5.4	MEDIUM Network	cacti debian	cacti debian_linux	Cacti before 1.1.37 has XSS because it does not properly reject unintended characters, related to use of the sanitize_uri function in lib/functions.php.	CWE-79 Cross-site Scripting	CVE-2018-10060	2024-11-21 12:40	2018-04-13	Show	GitHub Exploit DB Packet Storm

248355	5.4	MEDIUM Network	cacti	cacti	Cacti before 1.1.37 has XSS because the get_current_page function in lib/functions.php relies on $_SERVER['PHP_SELF'] instead of $_SERVER['SCRIPT_NAME'] to determine a page name.	CWE-79 Cross-site Scripting	CVE-2018-10059	2024-11-21 12:40	2018-04-13	Show	GitHub Exploit DB Packet Storm

248356	9.8	CRITICAL Network	ipvanish	ipvanish	IPVanish 3.0.11 for macOS suffers from a root privilege escalation vulnerability. The `com.ipvanish.osx.vpnhelper` LaunchDaemon implements an insecure XPC service that could allow an attacker to exec…	NVD-CWE-noinfo	CVE-2018-10192	2024-11-21 12:40	2018-04-18	Show	GitHub Exploit DB Packet Storm

248357	7.8	HIGH Local	londontrustmedia	private_internet_access	A vulnerability in London Trust Media Private Internet Access (PIA) VPN Client v77 for Windows could allow an unauthenticated, local attacker to run executable files with elevated privileges. The vul…	CWE-269 Improper Privilege Management	CVE-2018-10190	2024-11-21 12:40	2018-04-18	Show	GitHub Exploit DB Packet Storm

248358	9.8	CRITICAL Network	nordvpn	nordvpn	NordVPN 6.12.7.0 for Windows suffers from a SYSTEM privilege escalation vulnerability through the "nordvpn-service" service. This service establishes an NetNamedPipe endpoint that allows arbitrary in…	CWE-732 Incorrect Permission Assignment for Critical Resource	CVE-2018-10170	2024-11-21 12:40	2018-04-17	Show	GitHub Exploit DB Packet Storm

248359	9.8	CRITICAL Network	protonmail	protonvpn	ProtonVPN 1.3.3 for Windows suffers from a SYSTEM privilege escalation vulnerability through the "ProtonVPN Service" service. This service establishes an NetNamedPipe endpoint that allows arbitrary i…	CWE-732 Incorrect Permission Assignment for Critical Resource	CVE-2018-10169	2024-11-21 12:40	2018-04-17	Show	GitHub Exploit DB Packet Storm

248360	7.8	HIGH Local	debian libreoffice redhat canonical	debian_linux libreoffice enterprise_linux_desktop enterprise_linux_workstation enterprise_linux_server ubuntu_linux	The SwCTBWrapper::Read function in sw/source/filter/ww8/ww8toolbar.cxx in LibreOffice before 5.4.6.1 and 6.x before 6.0.2.1 does not validate a customizations index, which allows remote attackers to …	CWE-787 CWE-129 Out-of-bounds Write Improper Validation of Array Index	CVE-2018-10120	2024-11-21 12:40	2018-04-16	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed