Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 4, 2026, 4 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
257641	6.8	警告	サイバートラスト株式会社 Mozilla Foundation レッドハット	-	Mozilla Firefox/SeaMonkey における認証されたリクエストを任意のアプリケーションに送信される脆弱性	CWE-Other その他	CVE-2009-3983	2010-01-29 09:53	2009-12-15	Show	GitHub Exploit DB Packet Storm

257642	9.3	危険	Mozilla Foundation	-	複数の Mozilla 製品の libtheora における任意のコードを実行される脆弱性	CWE-189 数値処理の問題	CVE-2009-3389	2010-01-28 12:16	2009-12-15	Show	GitHub Exploit DB Packet Storm

257643	9.3	危険	Mozilla Foundation	-	複数の Mozilla 製品の liboggplay における任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2009-3388	2010-01-28 12:16	2009-12-15	Show	GitHub Exploit DB Packet Storm

257644	9.3	危険	Mozilla Foundation	-	複数の Mozilla 製品の JavaScript エンジンにおける任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2009-3982	2010-01-28 12:16	2009-12-15	Show	GitHub Exploit DB Packet Storm

257645	9.3	危険	サイバートラスト株式会社 Mozilla Foundation レッドハット	-	複数の Mozilla 製品のブラウザエンジンにおける任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2009-3981	2010-01-28 12:16	2009-12-15	Show	GitHub Exploit DB Packet Storm

257646	9.3	危険	Mozilla Foundation	-	複数の Mozilla 製品のブラウザエンジンにおける任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2009-3980	2010-01-28 12:15	2009-12-15	Show	GitHub Exploit DB Packet Storm

257647	10	危険	アドビシステムズ	-	Adobe Flash Media Server におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2009-3792	2010-01-27 10:02	2009-12-18	Show	GitHub Exploit DB Packet Storm

257648	5	警告	アドビシステムズ	-	Adobe Flash Media Server におけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2009-3791	2010-01-27 10:02	2009-12-18	Show	GitHub Exploit DB Packet Storm

257649	5.8	警告	PostgreSQL.org ターボリナックスサン・マイクロシステムズ	-	PostgreSQL における X.509 証明書の処理に関する任意の SSL-based PostgreSQL サーバになりすまされる脆弱性	CWE-310 暗号の問題	CVE-2009-4034	2010-01-26 11:48	2009-12-15	Show	GitHub Exploit DB Packet Storm

257650	7.8	危険	サイバートラスト株式会社 Linux レッドハット	-	Linux kernel の do_insn_fetch 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2009-4031	2010-01-26 11:47	2009-11-29	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 4, 2026, 4:17 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
247321	9.8	CRITICAL Network	canon	lbp7110cw_firmware	A remote attacker can bypass the Management Mode on the Canon LBP7110Cw web interface without a PIN for /checkLogin.cgi via vectors involving /portal_top.html to get full access to the device. NOTE: …	CWE-287 Improper Authentication	CVE-2018-12048	2024-11-21 12:44	2018-06-8	Show	GitHub Exploit DB Packet Storm

247322	6.1	MEDIUM Network	ximdex	ximdex	xfind/search in Ximdex 4.0 has XSS via the filter[n][value] parameters for non-negative values of n, as demonstrated by n equal to 0 through 12.	CWE-79 Cross-site Scripting	CVE-2018-12047	2024-11-21 12:44	2018-06-8	Show	GitHub Exploit DB Packet Storm

247323	7.5	HIGH Network	dedecms	dedecms	DedeCMS through 5.7SP2 allows arbitrary file write in dede/file_manage_control.php via a dede/file_manage_view.php?fmdo=newfile request with name and str parameters, as demonstrated by writing to a n…	CWE-20 Improper Input Validation	CVE-2018-12046	2024-11-21 12:44	2018-06-8	Show	GitHub Exploit DB Packet Storm

247324	9.8	CRITICAL Network	dedecms	dedecms	DedeCMS through V5.7SP2 allows arbitrary file upload in dede/file_manage_control.php via a dede/file_manage_view.php?fmdo=upload request with an upfile1 parameter, as demonstrated by uploading a .php…	CWE-434 Unrestricted Upload of File with Dangerous Type	CVE-2018-12045	2024-11-21 12:44	2018-06-8	Show	GitHub Exploit DB Packet Storm

247325	7.5	HIGH Network	mediatek	awus036nh_firmware	An issue was discovered on the MediaTek AWUS036NH wireless USB adapter through 5.1.25.0. Attackers can remotely deny service by sending specially constructed 802.11 frames.	CWE-20 Improper Input Validation	CVE-2018-12041	2024-11-21 12:44	2018-06-8	Show	GitHub Exploit DB Packet Storm

247326	6.1	MEDIUM Network	getsymphony	symphony	content/content.blueprintspages.php in Symphony 2.7.6 has XSS via the pages content page.	CWE-79 Cross-site Scripting	CVE-2018-12043	2024-11-21 12:44	2018-06-8	Show	GitHub Exploit DB Packet Storm

247327	7.5	HIGH Network	roxyfileman	roxy_fileman	Roxy Fileman through v1.4.5 has Directory traversal via the php/download.php f parameter.	CWE-22 Path Traversal	CVE-2018-12042	2024-11-21 12:44	2018-06-8	Show	GitHub Exploit DB Packet Storm

247328	9.8	CRITICAL Network	joyplus-cms_project	joyplus-cms	joyplus-cms 1.6.0 allows Remote Code Execution because of an Arbitrary SQL command execution issue in manager/index.php involving use of a "/!select/" substring in place of a select substring.	CWE-89 SQL Injection	CVE-2018-12039	2024-11-21 12:44	2018-06-8	Show	GitHub Exploit DB Packet Storm

247329	7.8	HIGH Local	owasp	dependency-check	OWASP Dependency-Check before 3.2.0 allows attackers to write to arbitrary files via a crafted archive that holds directory traversal filenames.	CWE-22 CWE-123 Path Traversal Write-what-where Condition	CVE-2018-12036	2024-11-21 12:44	2018-06-8	Show	GitHub Exploit DB Packet Storm

247330	9.8	CRITICAL Network	eaton	intelligent_power_manager	Local file inclusion in Eaton Intelligent Power Manager v1.6 allows an attacker to include a file via server/node_upgrade_srv.js directory traversal with the firmware parameter in a downloadFirmware …	CWE-22 Path Traversal	CVE-2018-12031	2024-11-21 12:44	2018-06-8	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed