Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 9, 2026, 10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
257651	9.3	危険	アドビシステムズ	-	Adobe Shockwave Player における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2010-0129	2010-05-28 18:43	2010-05-11	Show	GitHub Exploit DB Packet Storm

257652	9.3	危険	アドビシステムズ	-	Adobe Shockwave Player および Adobe Director における任意のコードを実行される脆弱性	CWE-189 数値処理の問題	CVE-2010-0128	2010-05-28 18:43	2010-05-11	Show	GitHub Exploit DB Packet Storm

257653	9.3	危険	アドビシステムズ	-	Adobe Shockwave Player における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-0127	2010-05-28 18:43	2010-05-11	Show	GitHub Exploit DB Packet Storm

257654	9.3	危険	マイクロソフト	-	複数の Microsoft 製品の VBE6.DLL における整数オーバーフローの脆弱性	CWE-94 コード・インジェクション	CVE-2010-0815	2010-05-28 18:43	2010-05-11	Show	GitHub Exploit DB Packet Storm

257655	9.3	危険	マイクロソフト	-	複数の Microsoft 製品の inetcomm.dll における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2010-0816	2010-05-28 18:43	2010-05-11	Show	GitHub Exploit DB Packet Storm

257656	9.3	危険	日立	-	複数の日立製品におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2009-4776	2010-05-28 18:42	2009-07-21	Show	GitHub Exploit DB Packet Storm

257657	6.8	警告	サイバートラスト株式会社レッドハット	-	TeX Live 2009 および teTeX の dvips における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2010-0827	2010-05-27 17:40	2010-05-6	Show	GitHub Exploit DB Packet Storm

257658	6.8	警告	サイバートラスト株式会社レッドハット	-	teTeX および TeXlive 2007 の hpc.c における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2007-5935	2010-05-27 17:40	2007-11-13	Show	GitHub Exploit DB Packet Storm

257659	4.3	警告	サイバートラスト株式会社レッドハット	-	dvipng および teTeX の set.c における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-0829	2010-05-27 17:40	2010-05-6	Show	GitHub Exploit DB Packet Storm

257660	1.9	注意	IBM	-	IBM WebSphere Application Server における KeyRingPassword のパスワード情報が漏えいする脆弱性	CWE-255 証明書・パスワード管理	CVE-2010-0769	2010-05-27 17:25	2010-04-1	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 9, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
250651	6.1	MEDIUM Network	cisco	web_security_appliance	A vulnerability in the web-based management interface of Cisco Web Security Appliance (WSA) could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting (XSS) attack ag…	CWE-79 Cross-site Scripting	CVE-2018-0366	2024-11-21 12:38	2018-07-17	Show	GitHub Exploit DB Packet Storm

250652	9.8	CRITICAL Network	haxx canonical	curl ubuntu_linux	Curl_smtp_escape_eob in lib/smtp.c in curl 7.54.1 to and including curl 7.60.0 has a heap-based buffer overflow that might be exploitable by an attacker who can control the data that curl transmits o…	CWE-787 Out-of-bounds Write	CVE-2018-0500	2024-11-21 12:38	2018-07-11	Show	GitHub Exploit DB Packet Storm

250653	6.1	MEDIUM Network	xapian canonical	xapian-core ubuntu_linux	A cross-site scripting vulnerability in queryparser/termgenerator_internal.cc in Xapian xapian-core before 1.4.6 exists due to incomplete HTML escaping by Xapian::MSet::snippet().	CWE-79 Cross-site Scripting	CVE-2018-0499	2024-11-21 12:38	2018-07-2	Show	GitHub Exploit DB Packet Storm

250654	6.1	MEDIUM Network	5000_trillion_yen_converter_project	5000_trillion_yen_converter	Cross-site scripting vulnerability in 5000 trillion yen converter v1.0.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.	CWE-79 Cross-site Scripting	CVE-2018-0612	2024-11-21 12:38	2018-06-26	Show	GitHub Exploit DB Packet Storm

250655	7.4	HIGH Network	ana	ana	The ANA App for iOS version 4.0.22 and earlier does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a cr…	CWE-295 Improper Certificate Validation	CVE-2018-0611	2024-11-21 12:38	2018-06-26	Show	GitHub Exploit DB Packet Storm

250656	7.2	HIGH Network	zenphoto	zenphoto	Local file inclusion vulnerability in Zenphoto 1.4.14 and earlier allows a remote attacker with an administrative privilege to execute arbitrary code or obtain sensitive information.	CWE-269 Improper Privilege Management	CVE-2018-0610	2024-11-21 12:38	2018-06-26	Show	GitHub Exploit DB Packet Storm

250657	7.8	HIGH Local	linecorp	line	Untrusted search path vulnerability in LINE for Windows versions before 5.8.0 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.	CWE-426 Untrusted Search Path	CVE-2018-0609	2024-11-21 12:38	2018-06-26	Show	GitHub Exploit DB Packet Storm

250658	9.8	CRITICAL Network	dena	h2o	Buffer overflow in H2O version 2.2.4 and earlier allows remote attackers to execute arbitrary code or cause a denial of service (DoS) via unspecified vectors.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2018-0608	2024-11-21 12:38	2018-06-26	Show	GitHub Exploit DB Packet Storm

250659	7.2	HIGH Network	pixelpost	pixelpost	SQL injection vulnerability in the Pixelpost v1.7.3 and earlier allows remote authenticated attackers to execute arbitrary SQL commands via unspecified vectors.	CWE-89 SQL Injection	CVE-2018-0606	2024-11-21 12:38	2018-06-26	Show	GitHub Exploit DB Packet Storm

250660	6.1	MEDIUM Network	pixelpost	pixelpost	Cross-site scripting vulnerability in Pixelpost v1.7.3 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.	CWE-79 Cross-site Scripting	CVE-2018-0605	2024-11-21 12:38	2018-06-26	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed