Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 6, 2026, 2 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
257621 9.3 危険 OpenOffice.org Project
レッドハット
- OpenOffice.org の filter/ww8/ww8par2.cxx におけるサービス運用妨害 (DoS) の脆弱性 CWE-94
コード・インジェクション
CVE-2009-3302 2010-03-5 10:33 2010-02-12 Show GitHub Exploit DB Packet Storm
257622 9.3 危険 OpenOffice.org Project
レッドハット
- OpenOffice.org の filter/ww8/ww8par2.cxx における整数アンダーフローの脆弱性 CWE-189
数値処理の問題
CVE-2009-3301 2010-03-5 10:33 2010-02-12 Show GitHub Exploit DB Packet Storm
257623 9.3 危険 OpenOffice.org Project
レッドハット
- OpenOffice.org の GIFLZWDecompressor::GIFLZWDecompressor 関数におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2009-2950 2010-03-5 10:32 2010-02-12 Show GitHub Exploit DB Packet Storm
257624 9.3 危険 OpenOffice.org Project
レッドハット
- OpenOffice.org の XPMReader::ReadXPM 関数における整数オーバーフローの脆弱性 CWE-189
数値処理の問題
CVE-2009-2949 2010-03-5 10:32 2010-02-12 Show GitHub Exploit DB Packet Storm
257625 4.3 警告 アドビシステムズ - Adobe BlazeDS における重要な情報を取得される脆弱性 CWE-noinfo
情報不足
CVE-2009-3960 2010-03-5 10:32 2010-02-11 Show GitHub Exploit DB Packet Storm
257626 6.8 警告 Linux
レッドハット
- KVM の pit_ioport_read 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-16
環境設定
CVE-2010-0309 2010-03-4 13:41 2010-02-9 Show GitHub Exploit DB Packet Storm
257627 4.1 警告 Linux
レッドハット
- KVM の x86 エミュレータにおける権限昇格の脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2010-0306 2010-03-4 13:41 2010-02-9 Show GitHub Exploit DB Packet Storm
257628 5 警告 レッドハット
リアルネットワークス
- RealNetworks HelixPlayer および RealPlayer におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2010-0417 2010-03-4 13:40 2010-02-18 Show GitHub Exploit DB Packet Storm
257629 7.5 危険 レッドハット
リアルネットワークス
- RealNetworks HelixPlayer および RealPlayer の Unescape 関数におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2010-0416 2010-03-4 13:40 2010-02-18 Show GitHub Exploit DB Packet Storm
257630 9.3 危険 マイクロソフト - Microsoft Windows の Microsoft Paint における整数オーバーフローの脆弱性 CWE-189
数値処理の問題
CVE-2010-0028 2010-03-3 11:54 2010-02-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 6, 2026, 4:18 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
248081 7.5 HIGH
Network
futurxe futurxe The transferFrom function of a smart contract implementation for FuturXE (FXE), an Ethereum ERC20 token, allows attackers to accomplish an unauthorized transfer of digital assets because of a logic e… CWE-20
CWE-191
 Improper Input Validation 
 Integer Underflow (Wrap or Wraparound)
CVE-2018-12025 2024-11-21 12:44 2018-06-11 Show GitHub Exploit DB Packet Storm
248082 7.5 HIGH
Network
s3ql_project s3ql S3QL before 2.27 mishandles checksumming, and consequently allows replay attacks in which an attacker who controls the backend can present old versions of the filesystem metadata database as up-to-da… CWE-20
 Improper Input Validation 
CVE-2018-12088 2024-11-21 12:44 2018-06-11 Show GitHub Exploit DB Packet Storm
248083 8.8 HIGH
Network
liblouis
canonical
opensuse
liblouis
ubuntu_linux
leap
Liblouis 3.6.0 has a stack-based Buffer Overflow in the function parseChars in compileTranslationTable.c, a different vulnerability than CVE-2018-11440. CWE-787
 Out-of-bounds Write
CVE-2018-12085 2024-11-21 12:44 2018-06-9 Show GitHub Exploit DB Packet Storm
248084 7.5 HIGH
Network
redhat
canonical
debian
gnupg
enterprise_linux_desktop
enterprise_linux_workstation
enterprise_linux_server
enterprise_linux_server_eus
enterprise_linux_server_tus
enterprise_linux_server_aus
ubuntu_linux
deb…
mainproc.c in GnuPG before 2.2.8 mishandles the original filename during decryption and verification actions, which allows remote attackers to spoof the output that GnuPG sends on file descriptor 2 t… CWE-706
 Use of Incorrectly-Resolved Name or Reference
CVE-2018-12020 2024-11-21 12:44 2018-06-9 Show GitHub Exploit DB Packet Storm
248085 5.5 MEDIUM
Local
bird_project bird BIRD Internet Routing Daemon before 1.6.4 allows local users to cause a denial of service (stack consumption and daemon crash) via BGP mask expressions in birdc. CWE-400
 Uncontrolled Resource Consumption
CVE-2018-12066 2024-11-21 12:44 2018-06-8 Show GitHub Exploit DB Packet Storm
248086 9.8 CRITICAL
Network
creatiwity witycms A Local File Inclusion vulnerability in /system/WCore/WHelper.php in Creatiwity wityCMS 0.6.2 allows remote attackers to include local PHP files (execute PHP code) or read non-PHP files by replacing … CWE-20
 Improper Input Validation 
CVE-2018-12065 2024-11-21 12:44 2018-06-8 Show GitHub Exploit DB Packet Storm
248087 9.8 CRITICAL
Network
tinyexr_project tinyexr tinyexr 0.9.5 has a heap-based buffer over-read via tinyexr::ReadChannelInfo in tinyexr.h. CWE-125
Out-of-bounds Read
CVE-2018-12064 2024-11-21 12:44 2018-06-8 Show GitHub Exploit DB Packet Storm
248088 9.8 CRITICAL
Network
schools_alert_management_script_project schools_alert_management_script Multiple SQL Injections exist in PHP Scripts Mall Schools Alert Management Script via crafted POST data in contact_us.php, faq.php, about.php, photo_gallery.php, privacy.php, and so on. CWE-89
SQL Injection
CVE-2018-12055 2024-11-21 12:44 2018-06-8 Show GitHub Exploit DB Packet Storm
248089 7.5 HIGH
Network
schools_alert_management_script_project schools_alert_management_script Arbitrary File Read exists in PHP Scripts Mall Schools Alert Management Script via the f parameter in img.php, aka absolute path traversal. CWE-22
Path Traversal
CVE-2018-12054 2024-11-21 12:44 2018-06-8 Show GitHub Exploit DB Packet Storm
248090 7.5 HIGH
Network
schools_alert_management_script_project schools_alert_management_script Arbitrary File Deletion exists in PHP Scripts Mall Schools Alert Management Script via the img parameter in delete_img.php by using directory traversal. CWE-22
Path Traversal
CVE-2018-12053 2024-11-21 12:44 2018-06-8 Show GitHub Exploit DB Packet Storm