Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":June 15, 2026, 2 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 257611 | 6.8 | 警告 | 富士通 | - | Interstage Application Server における許可されていない IP アドレスからのリクエストのアクセスを許可する脆弱性 |
CWE-noinfo
情報不足 |
- | 2010-12-21 14:14 | 2010-11-19 | Show | GitHub Exploit DB Packet Storm |
| 257612 | 8.3 | 危険 | 日立 | - | 日立の Groupmax 関連製品におけるバッファオーバーフローの脆弱性 |
CWE-119
バッファエラー |
- | 2010-12-21 14:06 | 2010-11-17 | Show | GitHub Exploit DB Packet Storm |
| 257613 | 4.3 | 警告 | The PHP Group アップル サイバートラスト株式会社 レッドハット |
- | PHP の var_export 関数における、重要な情報を取得される脆弱性 |
CWE-200
情報漏えい |
CVE-2010-2531 | 2010-12-20 16:08 | 2010-07-22 | Show | GitHub Exploit DB Packet Storm |
| 257614 | 4.6 | 警告 | サイバートラスト株式会社 Linux レッドハット |
- | Hypervisor の命令のエミュレーションにおけるサービス運用妨害 (DoS) の脆弱性 |
CWE-Other
その他 |
CVE-2010-0435 | 2010-12-20 16:01 | 2010-08-19 | Show | GitHub Exploit DB Packet Storm |
| 257615 | 5 | 警告 | レッドハット Pidgin オラクル |
- | Pidgin の MSN プロトコルプラグインの msn_emoticon_msg 関数におけるサービス運用妨害 (DoS) の脆弱性 |
CWE-20
不適切な入力確認 |
CVE-2010-1624 | 2010-12-20 16:00 | 2010-05-12 | Show | GitHub Exploit DB Packet Storm |
| 257616 | 4.3 | 警告 | IBM Apache Software Foundation アップル サイバートラスト株式会社 富士通 ヒューレット・パッカード ターボリナックス 日立 |
- | Apache HTTP Server の 413 エラーメッセージにおける HTTP メソッドを適切に検査しない問題 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2007-6203 | 2010-12-20 15:38 | 2007-12-3 | Show | GitHub Exploit DB Packet Storm |
| 257617 | 4.3 | 警告 | シマンテック | - | PGP Desktop にデータインジェクションの脆弱性 |
CWE-310
暗号の問題 |
CVE-2010-3618 | 2010-12-20 14:44 | 2010-11-19 | Show | GitHub Exploit DB Packet Storm |
| 257618 | 6.8 | 警告 | アップル | - | Apple iOS の Telephony 内にある GSM 方式の通信管理の実装におけるヒープベースのバッファオーバーフローの脆弱性 |
CWE-119
バッファエラー |
CVE-2010-3832 | 2010-12-20 14:39 | 2010-11-26 | Show | GitHub Exploit DB Packet Storm |
| 257619 | 4.3 | 警告 | アップル | - | Apple iOS の Photos における MobileMe アカウントのパスワードを読まれる脆弱性 |
CWE-200
情報漏えい |
CVE-2010-3831 | 2010-12-20 14:32 | 2010-11-26 | Show | GitHub Exploit DB Packet Storm |
| 257620 | 7.2 | 危険 | アップル | - | Apple iOS の Networking における権限昇格の脆弱性 |
CWE-264
認可・権限・アクセス制御 |
CVE-2010-3830 | 2010-12-20 14:30 | 2010-11-26 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:June 15, 2026, 4:10 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 250971 | 9.0 |
CRITICAL
Network |
phoenixcontact |
fl_switch_3005_firmware fl_switch_3005t_firmware fl_switch_3004t-fx_firmware fl_switch_3004t-fx_st_firmware fl_switch_3008_firmware fl_switch_3008t_firmware fl_switch_3006t-2fx_firm… |
All Phoenix Contact managed FL SWITCH 3xxx, 4xxx, 48xx products running firmware version 1.0 to 1.33 are prone to buffer overflows when handling very large cookies (a different vulnerability than CVE… |
CWE-119
Incorrect Access of Indexable Resource ('Range Error') |
CVE-2018-10731 | 2024-11-21 12:41 | 2018-05-18 | Show | GitHub Exploit DB Packet Storm |
| 250972 | 9.1 |
CRITICAL
Network |
phoenixcontact |
fl_switch_3005_firmware fl_switch_3005t_firmware fl_switch_3004t-fx_firmware fl_switch_3004t-fx_st_firmware fl_switch_3008_firmware fl_switch_3008t_firmware fl_switch_3006t-2fx_firm… |
All Phoenix Contact managed FL SWITCH 3xxx, 4xxx, 48xx products running firmware version 1.0 to 1.33 are prone to OS command injection. |
CWE-78
OS Command |
CVE-2018-10730 | 2024-11-21 12:41 | 2018-05-18 | Show | GitHub Exploit DB Packet Storm |
| 250973 | 5.3 |
MEDIUM
Network |
phoenixcontact |
fl_switch_3005_firmware fl_switch_3005t_firmware fl_switch_3004t-fx_firmware fl_switch_3004t-fx_st_firmware fl_switch_3008_firmware fl_switch_3008t_firmware fl_switch_3006t-2fx_firm… |
All Phoenix Contact managed FL SWITCH 3xxx, 4xxx, 48xx products running firmware version 1.0 to 1.33 allow reading the configuration file by an unauthenticated user. |
CWE-200
Information Exposure |
CVE-2018-10729 | 2024-11-21 12:41 | 2018-05-18 | Show | GitHub Exploit DB Packet Storm |
| 250974 | 8.1 |
HIGH
Network |
phoenixcontact |
fl_switch_3005_firmware fl_switch_3005t_firmware fl_switch_3004t-fx_firmware fl_switch_3004t-fx_st_firmware fl_switch_3008_firmware fl_switch_3008t_firmware fl_switch_3006t-2fx_firm… |
All Phoenix Contact managed FL SWITCH 3xxx, 4xxx, 48xx products running firmware version 1.0 to 1.33 are prone to buffer overflows (a different vulnerability than CVE-2018-10731). |
CWE-119
Incorrect Access of Indexable Resource ('Range Error') |
CVE-2018-10728 | 2024-11-21 12:41 | 2018-05-18 | Show | GitHub Exploit DB Packet Storm |
| 250975 | 8.8 |
HIGH
Network |
projectpier | projectpier | Unrestricted file upload vulnerability in the Files plugin in ProjectPier 0.88 and earlier allows remote authenticated users to execute arbitrary PHP code by uploading a file with an executable exten… |
CWE-434
Unrestricted Upload of File with Dangerous Type |
CVE-2018-10760 | 2024-11-21 12:41 | 2018-05-16 | Show | GitHub Exploit DB Packet Storm |
| 250976 | 9.8 |
CRITICAL
Network |
projectpier | projectpier | PHP remote file inclusion vulnerability in public/patch/patch.php in Project Pier 0.8.8 and earlier allows remote attackers to execute arbitrary commands or SQL statements via the id parameter. |
CWE-89
SQL Injection |
CVE-2018-10759 | 2024-11-21 12:41 | 2018-05-16 | Show | GitHub Exploit DB Packet Storm |
| 250977 | 6.5 |
MEDIUM
Network |
solarwinds | serv-u | A denial of service vulnerability in SolarWinds Serv-U before 15.1.6 HFv1 allows an authenticated user to crash the application (with a NULL pointer dereference) via a specially crafted URL beginning… |
CWE-476
NULL Pointer Dereference |
CVE-2018-10241 | 2024-11-21 12:41 | 2018-05-16 | Show | GitHub Exploit DB Packet Storm |
| 250978 | 7.3 |
HIGH
Network |
solarwinds | serv-u | SolarWinds Serv-U MFT before 15.1.6 HFv1 assigns authenticated users a low-entropy session token that can be included in requests to the application as a URL parameter in lieu of a session cookie. Th… |
CWE-331
Insufficient Entropy |
CVE-2018-10240 | 2024-11-21 12:41 | 2018-05-16 | Show | GitHub Exploit DB Packet Storm |
| 250979 | 7.2 |
HIGH
Network |
nagios | nagios_xi | A SQL injection issue was discovered in Nagios XI before 5.4.13 via the admin/menuaccess.php chbKey1 parameter. |
CWE-89
SQL Injection |
CVE-2018-10738 | 2024-11-21 12:41 | 2018-05-16 | Show | GitHub Exploit DB Packet Storm |
| 250980 | 7.2 |
HIGH
Network |
nagios | nagios_xi | A SQL injection issue was discovered in Nagios XI before 5.4.13 via the admin/logbook.php txtSearch parameter. |
CWE-89
SQL Injection |
CVE-2018-10737 | 2024-11-21 12:41 | 2018-05-16 | Show | GitHub Exploit DB Packet Storm |