Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 14, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
257591 3.5 注意 アップル - Apple Mac OS X の Wiki サーバにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-3797 2010-12-3 13:12 2010-11-16 Show GitHub Exploit DB Packet Storm
257592 4.3 警告 アップル - Apple Mac OS X の Safari RSS における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2010-3796 2010-12-3 13:10 2010-11-16 Show GitHub Exploit DB Packet Storm
257593 6 警告 PostgreSQL.org
サイバートラスト株式会社
ターボリナックス
レッドハット
- PostgreSQL の PL/perl および PL/Tcl 実装における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2010-3433 2010-12-2 17:11 2010-10-4 Show GitHub Exploit DB Packet Storm
257594 6.8 警告 アップル
サイバートラスト株式会社
ターボリナックス
FreeType Project
オラクル
レッドハット
- FreeType の Mac_Read_POST_Resource 関数におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2010-2808 2010-12-2 17:08 2010-08-19 Show GitHub Exploit DB Packet Storm
257595 5 警告 アップル
サイバートラスト株式会社
FreeType Project
ターボリナックス
レッドハット
- FreeType の Standard Encoding Accented Character の呼び出しにおけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足
CVE-2010-3054 2010-12-2 16:34 2010-08-19 Show GitHub Exploit DB Packet Storm
257596 4.3 警告 アップル
ターボリナックス
FreeType Project
- FreeType の bdf/bdflib.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2010-3053 2010-12-2 16:28 2010-08-19 Show GitHub Exploit DB Packet Storm
257597 5 警告 アップル - Apple Mac OS X の Printing におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他
CVE-2010-3784 2010-12-1 16:14 2010-11-16 Show GitHub Exploit DB Packet Storm
257598 6.8 警告 アップル - Apple Mac OS X のパスワードサーバにおけるパスワードの認証を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2010-3783 2010-12-1 16:12 2010-11-16 Show GitHub Exploit DB Packet Storm
257599 6.8 警告 アップル
ターボリナックス
FreeType Project
オラクル
- FreeType における任意のコードを実行される脆弱性 CWE-189
数値処理の問題
CVE-2010-2807 2010-12-1 16:00 2010-08-19 Show GitHub Exploit DB Packet Storm
257600 6.8 警告 アップル
サイバートラスト株式会社
ターボリナックス
FreeType Project
オラクル
レッドハット
- FreeType の t42_parse_sfnts 関数における任意のコードを実行される脆弱性 CWE-399
リソース管理の問題
CVE-2010-2806 2010-12-1 15:58 2010-08-19 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 14, 2026, 4:12 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
246151 7.5 HIGH
Network
openvswitch
redhat
canonical
openvswitch
openstack
ubuntu_linux
An issue was discovered in Open vSwitch (OvS) 2.7.x through 2.7.6, affecting ofproto_rule_insert__ in ofproto/ofproto.c. During bundle commit, flows that are added in a bundle are applied to ofproto … CWE-617
 Reachable Assertion
CVE-2018-17205 2024-11-21 12:54 2018-09-20 Show GitHub Exploit DB Packet Storm
246152 4.3 MEDIUM
Network
openvswitch
redhat
canonical
debian
openvswitch
openstack
ubuntu_linux
debian_linux
An issue was discovered in Open vSwitch (OvS) 2.7.x through 2.7.6, affecting parse_group_prop_ntr_selection_method in lib/ofp-util.c. When decoding a group mod, it validates the group type and comman… CWE-617
 Reachable Assertion
CVE-2018-17204 2024-11-21 12:54 2018-09-20 Show GitHub Exploit DB Packet Storm
246153 7.8 HIGH
Local
debian
canonical
artifex
redhat
debian_linux
ubuntu_linux
ghostscript
enterprise_linux_desktop
enterprise_linux_workstation
enterprise_linux_server
enterprise_linux_server_tus
enterprise_linux_server_eus
ent…
Artifex Ghostscript before 9.25 allowed a user-writable error exception table, which could be used by remote attackers able to supply crafted PostScript to potentially overwrite or replace error hand… NVD-CWE-noinfo
CVE-2018-17183 2024-11-21 12:54 2018-09-20 Show GitHub Exploit DB Packet Storm
246154 7.8 HIGH
Local
linux
canonical
debian
netapp
linux_kernel
ubuntu_linux
debian_linux
element_software
active_iq_performance_analytics_services
An issue was discovered in the Linux kernel through 4.18.8. The vmacache_flush_all function in mm/vmacache.c mishandles sequence number overflows. An attacker can trigger a use-after-free (and possib… CWE-416
 Use After Free
CVE-2018-17182 2024-11-21 12:54 2018-09-19 Show GitHub Exploit DB Packet Storm
246155 5.3 MEDIUM
Adjacent
neatorobotics botvac_d4_connected_firmware
botvac_d6_connected_firmware
botvac_d5_connected_firmware
botvac_d7_connected_firmware
botvac_d3_connected_firmware
An issue was discovered on Neato Botvac Connected 2.2.0 devices. They execute unauthenticated manual drive commands (sent to /bin/webserver on port 8081) if they already have an active session. Comma… NVD-CWE-noinfo
CVE-2018-17178 2024-11-21 12:54 2018-09-19 Show GitHub Exploit DB Packet Storm
246156 2.4 LOW
Physics
neatorobotics botvac_d4_connected_firmware
botvac_d6_connected_firmware
botvac_d5_connected_firmware
botvac_d7_connected_firmware
botvac_d3_connected_firmware
botvac_85_firmware
An issue was discovered on Neato Botvac Connected 2.2.0 and Botvac 85 1.2.1 devices. Static encryption is used for the copying of so-called "black box" logs (event logs and core dumps) to a USB stick… CWE-326
Inadequate Encryption Strength
CVE-2018-17177 2024-11-21 12:54 2018-09-19 Show GitHub Exploit DB Packet Storm
246157 7.5 HIGH
Network
neatorobotics botvac_d4_connected_firmware
botvac_d6_connected_firmware
botvac_d7_connected_firmware
A replay issue was discovered on Neato Botvac Connected 2.2.0 devices. Manual control mode requires authentication, but once recorded, the authentication (always transmitted in cleartext) can be repl… CWE-294
Authentication Bypass by Capture-replay 
CVE-2018-17176 2024-11-21 12:54 2018-09-19 Show GitHub Exploit DB Packet Storm
246158 5.3 MEDIUM
Network
marshmallow_project marshmallow In the marshmallow library before 2.15.1 and 3.x before 3.0.0b9 for Python, the schema "only" option treats an empty list as implying no "only" option, which allows a request that was intended to exp… NVD-CWE-noinfo
CVE-2018-17175 2024-11-21 12:54 2018-09-19 Show GitHub Exploit DB Packet Storm
246159 8.8 HIGH
Network
abus tvip_10000_firmware
tvip_10001_firmware
tvip_10005_firmware
tvip_10005a_firmware
tvip_10005b_firmware
tvip_10050_firmware
tvip_10051_firmware
tvip_10055a_firmware
tvip_10055b_…
An issue was discovered on certain ABUS TVIP devices. Due to a path traversal in /opt/cgi/admin/filewrite, an attacker can write to files, and thus execute code arbitrarily with root privileges. CWE-22
Path Traversal
CVE-2018-16739 2024-11-21 12:53 2023-10-27 Show GitHub Exploit DB Packet Storm
246160 8.8 HIGH
Network
open-emr openemr OpenEMR 5.0.1.3 allows Cross-Site Request Forgery (CSRF) via library/ajax and interface/super, as demonstrated by use of interface/super/manage_site_files.php to upload a .php file. CWE-352
 Origin Validation Error
CVE-2018-16795 2024-11-21 12:53 2020-12-31 Show GitHub Exploit DB Packet Storm