Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 8, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
257251	6.9	警告	アップル	-	iPhone および iPod touch 上で稼動する Apple iOS の IOSurface における整数オーバーフローの脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-2973	2010-09-6 17:45	2010-08-5	Show	GitHub Exploit DB Packet Storm

257252	9.3	危険	アップル	-	Apple Quicktime に脆弱性	CWE-119 バッファエラー	CVE-2010-1799	2010-09-6 17:44	2010-08-13	Show	GitHub Exploit DB Packet Storm

257253	10	危険	オラクル	-	Oracle WebLogic Server の WebLogic Server コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0073	2010-09-6 17:41	2010-02-4	Show	GitHub Exploit DB Packet Storm

257254	2.1	注意	サイバートラスト株式会社 libvirt.org レッドハット	-	libvirt における任意のファイルを読まれる脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-2242	2010-09-3 16:32	2010-08-4	Show	GitHub Exploit DB Packet Storm

257255	4.4	警告	サイバートラスト株式会社 libvirt.org レッドハット	-	libvirt における任意のファイルを読まれる脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-2239	2010-09-3 16:32	2010-08-10	Show	GitHub Exploit DB Packet Storm

257256	3.6	注意	freedesktop.org サイバートラスト株式会社レッドハット	-	dbus-glib の GObject プロパティにおけるアクセス制限を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-1172	2010-09-3 16:32	2010-08-10	Show	GitHub Exploit DB Packet Storm

257257	6.6	警告	マイクロソフト	-	Microsoft Windows の win32k.sys 内にある Windows カーネルモードドライバにおける権限を取得される脆弱性	CWE-20 不適切な入力確認	CVE-2010-1897	2010-09-3 12:00	2010-08-10	Show	GitHub Exploit DB Packet Storm

257258	6.8	警告	マイクロソフト	-	Windows の Windows Service Isolation 機能における権限を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-1886	2010-09-2 14:07	2010-08-10	Show	GitHub Exploit DB Packet Storm

257259	6.8	警告	マイクロソフト	-	Windows のサービスのトレース機能における権限を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-2554	2010-09-2 14:06	2010-08-10	Show	GitHub Exploit DB Packet Storm

257260	6.8	警告	マイクロソフト	-	Windows のサービスのトレース機能における権限を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-2555	2010-09-2 14:06	2010-08-10	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 8, 2026, 4:09 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
250531	7.5	HIGH Network	microsoft	.net_core .net_framework	A denial of service vulnerability exists when .NET and .NET Core improperly process XML documents, aka ".NET and .NET Core Denial of Service Vulnerability." This affects Microsoft .NET Framework 2.0,…	CWE-611 XXE	CVE-2018-0765	2024-11-21 12:38	2018-05-10	Show	GitHub Exploit DB Packet Storm

250532	6.5	MEDIUM Network	gnu canonical debian redhat	wget ubuntu_linux debian_linux enterprise_linux_desktop enterprise_linux_workstation enterprise_linux_server	GNU Wget before 1.19.5 is prone to a cookie injection vulnerability in the resp_new function in http.c via a \r\n sequence in a continuation line.	CWE-20 Improper Input Validation	CVE-2018-0494	2024-11-21 12:38	2018-05-7	Show	GitHub Exploit DB Packet Storm

250533	6.1	MEDIUM Network	qnap	qts	Cross-site scripting (XSS) vulnerability in QNAP QTS 4.3.3 build 20180126, QTS 4.3.4 build 20180315, and their earlier versions could allow remote attackers to inject arbitrary web script or HTML.	CWE-79 Cross-site Scripting	CVE-2018-0711	2024-11-21 12:38	2018-04-30	Show	GitHub Exploit DB Packet Storm

250534	8.1	HIGH Network	lockon	ec-cube	Session fixation vulnerability in EC-CUBE (EC-CUBE 3.0.0, EC-CUBE 3.0.1, EC-CUBE 3.0.2, EC-CUBE 3.0.3, EC-CUBE 3..4, EC-CUBE 3.0.5, EC-CUBE 3.0.6, EC-CUBE 3.0.7, EC-CUBE 3.0.8, EC-CUBE 3.0.9, EC-CUBE…	CWE-384 Session Fixation	CVE-2018-0564	2024-11-21 12:38	2018-04-20	Show	GitHub Exploit DB Packet Storm

250535	5.9	MEDIUM Network	openssl canonical	openssl ubuntu_linux	The OpenSSL RSA Key generation algorithm has been shown to be vulnerable to a cache timing side channel attack. An attacker with sufficient access to mount cache timing attacks during the RSA key gen…	CWE-327 Use of a Broken or Risky Cryptographic Algorithm	CVE-2018-0737	2024-11-21 12:38	2018-04-17	Show	GitHub Exploit DB Packet Storm

250536	7.8	HIGH Local	coderium	soundengine	Untrusted search path vulnerability in Installer of SoundEngine Free ver.5.21 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.	CWE-426 Untrusted Search Path	CVE-2018-0562	2024-11-21 12:38	2018-04-16	Show	GitHub Exploit DB Packet Storm

250537	7.8	HIGH Local	securebrain	phishwall	Untrusted search path vulnerability in The installer of PhishWall Client Internet Explorer edition Ver. 3.7.15 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecifi…	CWE-426 Untrusted Search Path	CVE-2018-0561	2024-11-21 12:38	2018-04-16	Show	GitHub Exploit DB Packet Storm

250538	6.5	MEDIUM Network	hatena	hatena_bookmark	Hatena Bookmark App for iOS Version 3.0 to 3.70 allows remote attackers to spoof the address bar via vectors related to URL display.	CWE-20 Improper Input Validation	CVE-2018-0560	2024-11-21 12:38	2018-04-16	Show	GitHub Exploit DB Packet Storm

250539	5.4	MEDIUM Network	cybozu	garoon	Cross-site scripting vulnerability in Cybozu Garoon 3.0.0 to 4.6.1 allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors.	CWE-79 Cross-site Scripting	CVE-2018-0551	2024-11-21 12:38	2018-04-16	Show	GitHub Exploit DB Packet Storm

250540	4.3	MEDIUM Network	cybozu	garoon	Cybozu Garoon 3.5.0 to 4.6.1 allows remote authenticated attackers to bypass access restriction to view the closed title of "Cabinet" via unspecified vectors.	NVD-CWE-noinfo	CVE-2018-0550	2024-11-21 12:38	2018-04-16	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed