Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 22, 2026, 6:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
257451	5	警告	アドビシステムズ	-	Adobe Flash Media Server におけるサービス運用妨害 (XML データ破損) の脆弱性	CWE-399 リソース管理の問題	CVE-2011-0612	2011-05-27 11:19	2011-05-12	Show	GitHub Exploit DB Packet Storm

257452	9.3	危険	アドビシステムズ	-	Windows 上で稼働する Adobe Audition におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2011-0615	2011-05-27 10:50	2011-05-12	Show	GitHub Exploit DB Packet Storm

257453	9.3	危険	アドビシステムズ	-	Windows 上で稼働する Adobe Audition におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2011-0614	2011-05-27 10:49	2011-05-12	Show	GitHub Exploit DB Packet Storm

257454	5	警告	レッドハット Avahi オラクル	-	Avahi の avahi-core/socket.c におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2011-1002	2011-05-27 10:33	2011-02-22	Show	GitHub Exploit DB Packet Storm

257455	5	警告	Squid-cache.org レッドハット	-	Squid の string-comparison 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2010-3072	2011-05-27 10:05	2010-09-3	Show	GitHub Exploit DB Packet Storm

257456	6	警告	Walrus,Digit.	-	WalRack におけるアップロードファイルの取扱いに関する脆弱性	CWE-20 不適切な入力確認	CVE-2011-1329	2011-05-26 11:06	2011-05-26	Show	GitHub Exploit DB Packet Storm

257457	6.9	警告	Linux レッドハット	-	Linux kernel の Radeon GPU ドライバにおける任意のメモリロケーションへ書き込みされる脆弱性	CWE-20 不適切な入力確認	CVE-2011-1016	2011-05-26 10:45	2011-02-28	Show	GitHub Exploit DB Packet Storm

257458	6.9	警告	Linux レッドハット	-	Linux kernel の drm_modeset_ctl 関数における整数符号エラーの脆弱性	CWE-189 数値処理の問題	CVE-2011-1013	2011-05-26 10:43	2011-05-9	Show	GitHub Exploit DB Packet Storm

257459	6.2	警告	Linux レッドハット	-	Linux kernel の caiaq Native Instruments USB オーディオ機能におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2011-0712	2011-05-26 10:21	2011-02-18	Show	GitHub Exploit DB Packet Storm

257460	4.3	警告	アクセラテクノロジ	-	Accela BizSearch の標準検索画面におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	-	2011-05-26 10:07	2010-04-25	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 22, 2026, 4 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
246861	7.5	HIGH Network	polyai_project	polyai	The mintToken function of a smart contract implementation for PolyAi (AI), an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to …	CWE-190 Integer Overflow or Wraparound	CVE-2018-17050	2024-11-21 12:53	2018-09-22	Show	GitHub Exploit DB Packet Storm

246862	6.1	MEDIUM Network	limesurvey	limesurvey	In LimeSurvey 3.14.7, HTML Injection and Stored XSS have been discovered in the appendix via the surveyls_title parameter to /index.php?r=admin/survey/sa/insert.	CWE-79 Cross-site Scripting	CVE-2018-17003	2024-11-21 12:53	2018-09-22	Show	GitHub Exploit DB Packet Storm

246863	6.1	MEDIUM Network	ricoh	mp_2001sp_firmware	On the RICOH MP 2001 printer, HTML Injection and Stored XSS vulnerabilities have been discovered in the area of adding addresses via the entryNameIn parameter to /web/entry/en/address/adrsSetUserWiza…	CWE-79 Cross-site Scripting	CVE-2018-17002	2024-11-21 12:53	2018-09-22	Show	GitHub Exploit DB Packet Storm

246864	6.1	MEDIUM Network	ricoh	sp_4510sf_firmware	On the RICOH SP 4510SF printer, HTML Injection and Stored XSS vulnerabilities have been discovered in the area of adding addresses via the entryNameIn parameter to /web/entry/en/address/adrsSetUserWi…	CWE-79 Cross-site Scripting	CVE-2018-17001	2024-11-21 12:53	2018-09-22	Show	GitHub Exploit DB Packet Storm

246865	6.1	MEDIUM Network	zohocorp	manageengine_supportcenter_plus	In Zoho ManageEngine SupportCenter Plus before 8.1 Build 8109, there is HTML Injection and Stored XSS via the /ServiceContractDef.do contractName parameter.	CWE-79 Cross-site Scripting	CVE-2018-16965	2024-11-21 12:53	2018-09-22	Show	GitHub Exploit DB Packet Storm

246866	6.1	MEDIUM Network	zohocorp	manageengine_desktop_central	Zoho ManageEngine Desktop Central 10.0.271 has XSS via the "Features & Articles" search field to the /advsearch.do?SUBREQUEST=XMLHTTP URI.	CWE-79 Cross-site Scripting	CVE-2018-16833	2024-11-21 12:53	2018-09-22	Show	GitHub Exploit DB Packet Storm

246867	9.8	CRITICAL Network	seacms	seacms	SeaCMS 6.64 allows SQL Injection via the upload/admin/admin_video.php order parameter.	CWE-89 SQL Injection	CVE-2018-16822	2024-11-21 12:53	2018-09-22	Show	GitHub Exploit DB Packet Storm

246868	5.3	MEDIUM Network	seacms	seacms	SeaCMS 6.64 allows arbitrary directory listing via upload/admin/admin_template.php?path=../templets/../../ requests.	CWE-434 Unrestricted Upload of File with Dangerous Type	CVE-2018-16821	2024-11-21 12:53	2018-09-22	Show	GitHub Exploit DB Packet Storm

246869	8.6	HIGH Network	microsoft	exchange_server	Rollup 18 for Microsoft Exchange Server 2010 SP3 and previous versions has an SSRF vulnerability via the username parameter in /owa/auth/logon.aspx in the OWA (Outlook Web Access) login page.	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2018-16793	2024-11-21 12:53	2018-09-22	Show	GitHub Exploit DB Packet Storm

246870	5.5	MEDIUM Local	linux netapp opensuse	linux_kernel element_software active_iq_performance_analytics_services leap	An issue was discovered in the Linux kernel before 4.8. Incorrect access checking in overlayfs mounts could be used by local attackers to modify or truncate files in the underlying filesystem.	CWE-863 Incorrect Authorization	CVE-2018-16597	2024-11-21 12:53	2018-09-22	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed