Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 12, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
257251	6.8	警告	Google	-	Google Chrome における URL をなりすまされる脆弱性	CWE-20 不適切な入力確認	CVE-2010-4036	2011-01-26 13:08	2010-10-19	Show	GitHub Exploit DB Packet Storm

257252	9.3	危険	Google	-	Google Chrome におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2010-4035	2011-01-26 13:06	2010-10-19	Show	GitHub Exploit DB Packet Storm

257253	9.3	危険	Google	-	Google Chrome におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2010-4034	2011-01-26 13:04	2010-10-19	Show	GitHub Exploit DB Packet Storm

257254	5	警告	Google	-	Google Chrome におけるプロファイルスパム攻撃を誘導される脆弱性	CWE-Other その他	CVE-2010-4033	2011-01-26 13:01	2010-10-19	Show	GitHub Exploit DB Packet Storm

257255	9.3	危険	Google	-	WebKit の WebCore 内にある toAlphabetic 関数における一つずれ (off-by-one) エラーの脆弱性	CWE-189 数値処理の問題	CVE-2010-1773	2011-01-26 12:59	2010-06-8	Show	GitHub Exploit DB Packet Storm

257256	7.2	危険	GNU Project VMware サイバートラスト株式会社レッドハット	-	GNU C library の ld.so における権限昇格の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-3856	2011-01-25 15:48	2010-10-25	Show	GitHub Exploit DB Packet Storm

257257	5.8	警告	Mozilla Foundation オラクル	-	Mozilla Firefox の JavaScript 実装内にある js_InitRandom 関数におけるシード値を推測される脆弱性	CWE-310 暗号の問題	CVE-2010-3400	2011-01-25 15:15	2010-09-15	Show	GitHub Exploit DB Packet Storm

257258	4.3	警告	Mozilla Foundation オラクル	-	Mozilla Firefox におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2010-2117	2011-01-25 15:13	2010-06-1	Show	GitHub Exploit DB Packet Storm

257259	6.8	警告	アップル	-	Apple Mac OS X における脆弱性に対するアップデート	CWE-134 書式文字列の問題	CVE-2010-4013	2011-01-25 15:10	2011-01-7	Show	GitHub Exploit DB Packet Storm

257260	5	警告	GNU Project	-	GNU C Library の regcomp 実装におけるスタック消費の脆弱性	CWE-399 リソース管理の問題	CVE-2010-4052	2011-01-21 16:37	2011-01-13	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 12, 2026, 4:20 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
246061	6.5	MEDIUM Network	xunfeng_project	xunfeng	CSRF in the anti-csrf decorator in xunfeng 0.2.0 allows an attacker to modify the configuration via a Flash file because views/lib/AntiCSRF.py can overwrite the request.host value with the content of…	CWE-352 Origin Validation Error	CVE-2018-16832	2024-11-21 12:53	2018-09-11	Show	GitHub Exploit DB Packet Storm

246062	5.9	MEDIUM Network	smarty	smarty	Smarty before 3.1.33-dev-4 allows attackers to bypass the trusted_dir protection mechanism via a file:./../ substring in an include statement.	CWE-22 Path Traversal	CVE-2018-16831	2024-11-21 12:53	2018-09-11	Show	GitHub Exploit DB Packet Storm

246063	7.5	HIGH Network	bro	bro	In Bro through 2.5.5, there is a memory leak potentially leading to DoS in scripts/base/protocols/krb/main.bro in the Kerberos protocol parser.	CWE-772 Missing Release of Resource after Effective Lifetime	CVE-2018-16807	2024-11-21 12:53	2018-09-11	Show	GitHub Exploit DB Packet Storm

246064	6.5	MEDIUM Adjacent	pektron	passive_keyless_entry_and_start_system_firmware	A Pektron Passive Keyless Entry and Start (PKES) system, as used on the Tesla Model S and possibly other vehicles, relies on the DST40 cipher, which makes it easier for attackers to obtain access via…	CWE-327 Use of a Broken or Risky Cryptographic Algorithm	CVE-2018-16806	2024-11-21 12:53	2018-09-11	Show	GitHub Exploit DB Packet Storm

246065	4.8	MEDIUM Network	b3log	solo	In b3log Solo 2.9.3, XSS in the Input page under the Publish Articles menu, with an ID of linkAddress stored in the link JSON field, allows remote attackers to inject arbitrary Web scripts or HTML vi…	CWE-79 Cross-site Scripting	CVE-2018-16805	2024-11-21 12:53	2018-09-11	Show	GitHub Exploit DB Packet Storm

246066	9.8	CRITICAL Network	furuno	felcom_250_firmware felcom_500_firmware	FURUNO FELCOM 250 and 500 devices allow unauthenticated access to the xml/permission.xml file containing all of the system's usernames and passwords. This includes the Admin and Service user accounts…	CWE-200 Information Exposure	CVE-2018-16705	2024-11-21 12:53	2018-09-11	Show	GitHub Exploit DB Packet Storm

246067	9.8	CRITICAL Network	furuno	felcom_250_firmware felcom_500_firmware	FURUNO FELCOM 250 and 500 devices allow unauthenticated users to change the password for the Admin, Log and Service accounts, as well as the password for the protected "SMS" panel via /cgi-bin/sm_cha…	CWE-862 Missing Authorization	CVE-2018-16591	2024-11-21 12:53	2018-09-11	Show	GitHub Exploit DB Packet Storm

246068	7.8	HIGH Local	artifex debian canonical redhat	ghostscript debian_linux ubuntu_linux enterprise_linux_desktop enterprise_linux_workstation enterprise_linux_server enterprise_linux_server_tus enterprise_linux_server_eus ent…	An issue was discovered in Artifex Ghostscript before 9.25. Incorrect "restoration of privilege" checking when running out of stack during exception handling could be used by attackers able to supply…	NVD-CWE-noinfo	CVE-2018-16802	2024-11-21 12:53	2018-09-11	Show	GitHub Exploit DB Packet Storm

246069	7.8	HIGH Local	kakaocorp	potplayer	A heap-based buffer overflow in PotPlayerMini.exe in PotPlayer 1.7.8556 allows remote attackers to execute arbitrary code via a .wav file with large BytesPerSec and SamplesPerSec values, and a small …	CWE-787 Out-of-bounds Write	CVE-2018-16797	2024-11-21 12:53	2018-09-10	Show	GitHub Exploit DB Packet Storm

246070	8.8	HIGH Network	monstra	monstra	In Monstra CMS 3.0.4, an attacker with 'Editor' privileges can change the password of the administrator via an admin/index.php?id=users&action=edit&user_id=1, Insecure Direct Object Reference (IDOR).	CWE-639 Authorization Bypass Through User-Controlled Key	CVE-2018-16608	2024-11-21 12:53	2018-09-10	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed