Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 5, 2026, 4 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
257301	5.8	警告	サン・マイクロシステムズ GNOME Project レッドハット	-	Evolution Data Server (別名 evolution-data-server) の ntlm_challenge 関数におけるプロセスメモリ情報の漏洩またはサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2009-0582	2010-05-14 18:37	2009-03-14	Show	GitHub Exploit DB Packet Storm

257302	1.2	注意	日本電気サイバートラスト株式会社サン・マイクロシステムズターボリナックス OpenSSL Project レッドハット	-	RSA key reconstruction vulnerability	-	CVE-2007-3108	2010-05-14 18:37	2007-08-16	Show	GitHub Exploit DB Packet Storm

257303	5	警告	ヒューレット・パッカードサイバートラスト株式会社 OpenSSL Project ターボリナックスレッドハット	-	OpenSSL の zlib_stateful_finish 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2009-4355	2010-05-13 17:21	2010-01-13	Show	GitHub Exploit DB Packet Storm

257304	9.3	危険	日立	-	XMAP3 における任意のコードが実行される脆弱性	CWE-noinfo 情報不足	-	2010-05-13 15:14	2010-04-12	Show	GitHub Exploit DB Packet Storm

257305	4.3	警告	オラクル	-	Oracle Industry Product Suite の Retail - Oracle Retail Plan In-Season コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0863	2010-05-13 15:13	2010-04-13	Show	GitHub Exploit DB Packet Storm

257306	4.3	警告	オラクル	-	Oracle Industry Product Suite の Retail - Oracle Retail Place In-Season コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0864	2010-05-13 15:13	2010-04-13	Show	GitHub Exploit DB Packet Storm

257307	4.3	警告	オラクル	-	Oracle Industry Product Suite の Retail - Oracle Retail Markdown Optimization コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0862	2010-05-13 15:13	2010-04-13	Show	GitHub Exploit DB Packet Storm

257308	4.3	警告	オラクル	-	Oracle Industry Product Suite の Life Sciences - Oracle Thesaurus Management System コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0875	2010-05-13 15:12	2010-04-13	Show	GitHub Exploit DB Packet Storm

257309	4.3	警告	オラクル	-	Oracle Industry Product Suite の Life Sciences - Oracle Clinical Remote Data Capture Option コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0876	2010-05-13 15:12	2010-04-13	Show	GitHub Exploit DB Packet Storm

257310	4.3	警告	オラクル	-	Oracle Industry Product Suite の Communications - Oracle Communications Unified Inventory Management コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0874	2010-05-13 15:12	2010-04-13	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 5, 2026, 4:11 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
246331	4.9	MEDIUM Network	jirafeau	jirafeau	A CSRF issue was discovered in Jirafeau before 3.4.1. The "delete file" feature on the admin panel is not protected against automated requests and could be abused.	CWE-352 Origin Validation Error	CVE-2018-13407	2024-11-21 12:47	2018-07-7	Show	GitHub Exploit DB Packet Storm

246332	7.8	HIGH Local	linux canonical debian	linux_kernel ubuntu_linux debian_linux	An integer overflow in the uvesafb_setcmap function in drivers/video/fbdev/uvesafb.c in the Linux kernel before 4.17.4 could result in local attackers being able to crash the kernel or potentially el…	CWE-190 Integer Overflow or Wraparound	CVE-2018-13406	2024-11-21 12:47	2018-07-6	Show	GitHub Exploit DB Packet Storm

246333	7.8	HIGH Local	linux debian canonical fedoraproject redhat f5	linux_kernel debian_linux ubuntu_linux fedora enterprise_linux_desktop enterprise_linux_server_aus enterprise_linux_workstation enterprise_linux_server_tus enterprise_linux_se…	The inode_init_owner function in fs/inode.c in the Linux kernel through 3.16 allows local users to create files with an unintended group ownership, in a scenario where a directory is SGID to a certai…	CWE-269 Improper Privilege Management	CVE-2018-13405	2024-11-21 12:47	2018-07-6	Show	GitHub Exploit DB Packet Storm

246334	8.8	HIGH Network	fortinet	fortios	An external control of system vulnerability in FortiOS may allow an authenticated, regular user to change the routing settings of the device via connecting to the ZebOS component.	CWE-20 Improper Input Validation	CVE-2018-13371	2024-11-21 12:46	2020-04-2	Show	GitHub Exploit DB Packet Storm

246335	7.5	HIGH Network	easyappointments	easy\!appointments	Easy!Appointments 1.3.0 has a Missing Authorization issue allowing retrieval of hashed passwords and salts.	CWE-862 Missing Authorization	CVE-2018-13063	2024-11-21 12:46	2020-03-17	Show	GitHub Exploit DB Packet Storm

246336	6.5	MEDIUM Network	easyappointments	easy\!appointments	Easy!Appointments 1.3.0 has a Guessable CAPTCHA issue.	CWE-287 Improper Authentication	CVE-2018-13060	2024-11-21 12:46	2020-03-17	Show	GitHub Exploit DB Packet Storm

246337	6.5	MEDIUM Network	totolink	a3002ru_firmware	In TOTOLINK A3002RU 1.0.8, the router provides a page that allows the user to change their account name and password. This page, password.htm, contains JavaScript which is used to confirm the user kn…	CWE-922 Insecure Storage of Sensitive Information	CVE-2018-13313	2024-11-21 12:46	2020-02-25	Show	GitHub Exploit DB Packet Storm

246338	6.1	MEDIUM Network	blackboard	blackboard_learn	The bb-auth-provider-cas authentication module within Blackboard Learn 2018-07-02 is susceptible to HTTP host header spoofing during Central Authentication Service (CAS) service ticket validation, en…	CWE-601 Open Redirect	CVE-2018-13257	2024-11-21 12:46	2019-11-19	Show	GitHub Exploit DB Packet Storm

246339	5.3	MEDIUM Network	fortinet	fortios	An information exposure vulnerability in FortiOS 6.2.3, 6.2.0 and below may allow an unauthenticated attacker to gain platform information such as version, models, via parsing a JavaScript file throu…	CWE-200 Information Exposure	CVE-2018-13367	2024-11-21 12:46	2019-08-24	Show	GitHub Exploit DB Packet Storm

246340	6.1	MEDIUM Network	fortinet	fortios	A Host Header Redirection vulnerability in Fortinet FortiOS all versions below 6.0.5 under SSL VPN web portal allows a remote attacker to potentially poison HTTP cache and subsequently redirect SSL V…	CWE-601 Open Redirect	CVE-2018-13384	2024-11-21 12:46	2019-06-5	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed