Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 6, 2026, 2 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
257631 7.2 危険 マイクロソフト - Microsoft Windows の kernel における権限昇格の脆弱性 CWE-Other
その他
CVE-2010-0233 2010-03-3 11:54 2010-02-9 Show GitHub Exploit DB Packet Storm
257632 6.3 警告 マイクロソフト - Microsoft Windows の KDC におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他
CVE-2010-0035 2010-03-3 11:54 2010-02-9 Show GitHub Exploit DB Packet Storm
257633 7.1 危険 マイクロソフト - Microsoft Windows の SMB 実装におけるサービス運用妨害 (DoS) の脆弱性 CWE-362
競合状態
CVE-2010-0021 2010-03-3 11:54 2010-02-9 Show GitHub Exploit DB Packet Storm
257634 10 危険 マイクロソフト - Microsoft Windows の SMB 実装におけるアクセス権を取得される脆弱性 CWE-264
CWE-310
CVE-2010-0231 2010-03-3 11:54 2010-02-9 Show GitHub Exploit DB Packet Storm
257635 7.8 危険 マイクロソフト - Microsoft Windows の SMB 実装におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2010-0022 2010-03-3 11:53 2010-02-9 Show GitHub Exploit DB Packet Storm
257636 9 危険 マイクロソフト - Microsoft Windows の SMB 実装における任意のコードを実行される脆弱性 CWE-20
CWE-94
CVE-2010-0020 2010-03-3 11:53 2010-02-9 Show GitHub Exploit DB Packet Storm
257637 6.9 警告 マイクロソフト - Microsoft Windows の Client/Server Run-time Subsystem における権限昇格の脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2010-0023 2010-03-3 11:53 2010-02-9 Show GitHub Exploit DB Packet Storm
257638 4 警告 マイクロソフト - Microsoft Windows の Hyper-V サーバ実装におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2010-0026 2010-03-3 11:53 2010-02-9 Show GitHub Exploit DB Packet Storm
257639 9.3 危険 日本電気
アップル
富士通
古河電気工業
ヒューレット・パッカード
インターネットイニシアティブ
アラクサラネットワークス
日立
- IPv6 NDP 実装における Neighbor Discovery メッセージの送信元検証処理に関する脆弱性 CWE-20
不適切な入力確認
CVE-2008-2476 2010-03-3 11:43 2008-10-3 Show GitHub Exploit DB Packet Storm
257640 9.3 危険 マイクロソフト - Microsoft Office PowerPoint におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2010-0034 2010-03-2 11:29 2010-02-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 6, 2026, 4:18 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
246571 4.7 MEDIUM
Network
atlassian confluence The attachment resource in Atlassian Confluence before version 6.6.1 allows remote attackers to spoof web content in the Mozilla Firefox Browser through attachments that have a content-type of applic… CWE-20
 Improper Input Validation 
CVE-2018-13389 2024-11-21 12:47 2018-07-10 Show GitHub Exploit DB Packet Storm
246572 5.4 MEDIUM
Network
atlassian fisheye
crucible
The review attachment resource in Atlassian Fisheye and Crucible before version 4.5.3 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in … CWE-79
Cross-site Scripting
CVE-2018-13388 2024-11-21 12:47 2018-07-10 Show GitHub Exploit DB Packet Storm
246573 6.7 MEDIUM
Local
supermicro x11ssz_firmware
x11ssv_firmware
x11ssql_firmware
x11ssq_firmware
x11ssn_firmware
x11srm_firmware
x11sra_firmware
x11sba_firmware
x11sat_firmware
x11sae_m_firmware
x11sae…
Certain Supermicro X11S, X10, X9, X8SI, K1SP, C9X299, C7, B1, A2, and A1 products have a misconfigured Descriptor Region, allowing OS programs to modify firmware. NVD-CWE-noinfo
CVE-2018-13787 2024-11-21 12:47 2018-07-10 Show GitHub Exploit DB Packet Storm
246574 6.5 MEDIUM
Network
libpng
canonical
oracle
redhat
libpng
ubuntu_linux
jdk
jre
enterprise_linux_desktop
enterprise_linux_workstation
enterprise_linux_server
In libpng 1.6.34, a wrong calculation of row_factor in the png_check_chunk_length function (pngrutil.c) may trigger an integer overflow and resultant divide-by-zero while processing a crafted PNG fil… CWE-369
CWE-190
 Divide By Zero
 Integer Overflow or Wraparound
CVE-2018-13785 2024-11-21 12:47 2018-07-9 Show GitHub Exploit DB Packet Storm
246575 9.1 CRITICAL
Network
prestashop prestashop PrestaShop before 1.6.1.20 and 1.7.x before 1.7.3.4 mishandles cookie encryption in Cookie.php, Rinjdael.php, and Blowfish.php. NVD-CWE-noinfo
CVE-2018-13784 2024-11-21 12:47 2018-07-9 Show GitHub Exploit DB Packet Storm
246576 7.5 HIGH
Network
jiucaitoken_project jiucaitoken The mintToken function of a smart contract implementation for JiucaiToken, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to … CWE-190
 Integer Overflow or Wraparound
CVE-2018-13783 2024-11-21 12:47 2018-07-9 Show GitHub Exploit DB Packet Storm
246577 7.5 HIGH
Network
entercoin_project entercoin The mintToken function of a smart contract implementation for ENTER (ENTR) (Contract Name: EnterCoin), an Ethereum token, has an integer overflow that allows the owner of the contract to set the bala… CWE-190
 Integer Overflow or Wraparound
CVE-2018-13782 2024-11-21 12:47 2018-07-9 Show GitHub Exploit DB Packet Storm
246578 7.5 HIGH
Network
myylctoken_project myylctoken The mintToken function of a smart contract implementation for MyYLC, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any va… CWE-190
 Integer Overflow or Wraparound
CVE-2018-13781 2024-11-21 12:47 2018-07-9 Show GitHub Exploit DB Packet Storm
246579 7.5 HIGH
Network
esh_project esh The mintToken function of a smart contract implementation for ESH, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any valu… CWE-190
 Integer Overflow or Wraparound
CVE-2018-13780 2024-11-21 12:47 2018-07-9 Show GitHub Exploit DB Packet Storm
246580 7.5 HIGH
Network
ylctoken_project ylctoken The mintToken function of a smart contract implementation for YLCToken, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any… CWE-190
 Integer Overflow or Wraparound
CVE-2018-13779 2024-11-21 12:47 2018-07-9 Show GitHub Exploit DB Packet Storm