Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 6, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
257431 9.3 危険 マイクロソフト - Microsoft Internet Explorer における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2010-0267 2010-04-19 19:18 2010-03-30 Show GitHub Exploit DB Packet Storm
257432 10 危険 アップル - Apple Mac OS X の xar におけるパッケージ署名の検証処理に関する脆弱性 CWE-DesignError
CVE-2010-0055 2010-04-16 16:59 2010-03-29 Show GitHub Exploit DB Packet Storm
257433 0 注意 アップル - Apple Mac OS X の Wiki サーバにおけるコンテンツを公開される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-0534 2010-04-16 16:58 2010-03-29 Show GitHub Exploit DB Packet Storm
257434 5 警告 アップル - Apple Mac OS X の Wiki サーバにおける重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2010-0523 2010-04-16 16:58 2010-03-29 Show GitHub Exploit DB Packet Storm
257435 9 危険 アップル - Apple Mac OS X のサーバ管理における管理者権限の処理に関する脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-0522 2010-04-16 16:58 2010-03-29 Show GitHub Exploit DB Packet Storm
257436 5 警告 アップル - Apple Mac OS X のサーバ管理における重要な情報を取得される脆弱性 CWE-287
不適切な認証 		CVE-2010-0521 2010-04-16 16:58 2010-03-29 Show GitHub Exploit DB Packet Storm
257437 4.3 警告 アップル
Ruby on Rails project		 - Ruby on Rails の strip_tags 関数におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4214 2010-04-16 16:58 2009-12-7 Show GitHub Exploit DB Packet Storm
257438 4.3 警告 アップル
Ruby on Rails project		 - Ruby on Rails におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-3009 2010-04-16 16:58 2009-09-8 Show GitHub Exploit DB Packet Storm
257439 7.5 危険 アップル
Ruby on Rails project		 - Ruby on Rails のダイジェスト認証における認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2009-2422 2010-04-16 16:57 2009-07-10 Show GitHub Exploit DB Packet Storm
257440 6.8 警告 アップル - Apple Mac OS X の QuickTime におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2010-0526 2010-04-16 16:57 2010-03-29 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 6, 2026, 4:18 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
247271 5.5 MEDIUM
Local 		linux
canonical 		linux_kernel
ubuntu_linux 		ntfs_read_locked_inode in the ntfs.ko filesystem driver in the Linux kernel 4.15.0 allows attackers to trigger a use-after-free read and possibly cause a denial of service (kernel oops or panic) via … CWE-416
 Use After Free 		CVE-2018-12929 2024-11-21 12:46 2018-06-28 Show GitHub Exploit DB Packet Storm
247272 5.5 MEDIUM
Local 		linux
canonical 		linux_kernel
ubuntu_linux 		In the Linux kernel 4.15.0, a NULL pointer dereference was discovered in hfs_ext_read_extent in hfs.ko. This can occur during a mount of a crafted hfs filesystem. CWE-476
 NULL Pointer Dereference 		CVE-2018-12928 2024-11-21 12:46 2018-06-28 Show GitHub Exploit DB Packet Storm
247273 7.5 HIGH
Network 		northernnep northern_electric_\&_power_inverter_firmware Northern Electric & Power (NEP) inverter devices allow remote attackers to obtain potentially sensitive information via a direct request for the nep/status/index/1 URI. CWE-200
Information Exposure 		CVE-2018-12927 2024-11-21 12:46 2018-06-28 Show GitHub Exploit DB Packet Storm
247274 7.5 HIGH
Network 		pharoscontrols pharos_firmware Pharos Controls devices allow remote attackers to obtain potentially sensitive information via a direct request for the default/index.lsp or default/log.lsp URI. CWE-200
Information Exposure 		CVE-2018-12926 2024-11-21 12:46 2018-06-28 Show GitHub Exploit DB Packet Storm
247275 9.8 CRITICAL
Network 		lantronix mss_firmware Baseon Lantronix MSS devices do not require a password for TELNET access. CWE-521
Weak Password Requirements  		CVE-2018-12925 2024-11-21 12:46 2018-06-28 Show GitHub Exploit DB Packet Storm
247276 9.8 CRITICAL
Network 		eztcp cie-h10_firmware
cie-h12_firmware
cie-h14_firmware
cse-m53n_firmware
cse-m32_firmware
cse-m24_firmware
cse-m73_firmware
cse-b63n2_firmware 		Sollae Serial-Ethernet-Module and Remote-I/O-Device-Server devices have a default password of sollae for the TELNET service. CWE-798
 Use of Hard-coded Credentials 		CVE-2018-12924 2024-11-21 12:46 2018-06-28 Show GitHub Exploit DB Packet Storm
247277 7.5 HIGH
Network 		bwssystems ha_bridge BWS Systems HA-Bridge devices allow remote attackers to obtain potentially sensitive information via a direct request for the #!/system URI. CWE-200
Information Exposure 		CVE-2018-12923 2024-11-21 12:46 2018-06-28 Show GitHub Exploit DB Packet Storm
247278 7.5 HIGH
Network 		vertiv liebert_intellislot_firmware Emerson Liebert IntelliSlot Web Card devices allow remote attackers to reconfigure access control via the config/configUser.htm or config/configTelnet.htm URI. CWE-732
 Incorrect Permission Assignment for Critical Resource 		CVE-2018-12922 2024-11-21 12:46 2018-06-28 Show GitHub Exploit DB Packet Storm
247279 7.5 HIGH
Network 		electroind gaugetech_nexus_firmware Electro Industries GaugeTech Nexus devices allow remote attackers to obtain potentially sensitive information via a direct request for the meter_information.htm, diag_system.htm, or diag_dnp_lan_wan.… CWE-200
Information Exposure 		CVE-2018-12921 2024-11-21 12:46 2018-06-28 Show GitHub Exploit DB Packet Storm
247280 7.5 HIGH
Network 		flir brickstream_2300_firmware Brickstream 2300 devices allow remote attackers to obtain potentially sensitive information via a direct request for the basic.html#ipsettings or basic.html#datadelivery URI. CWE-200
Information Exposure 		CVE-2018-12920 2024-11-21 12:46 2018-06-28 Show GitHub Exploit DB Packet Storm