Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 19, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
257691	4.3	警告	オラクル	-	Oracle Fusion Middleware の Oracle WebLogic Server コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-4453	2011-02-14 15:15	2011-01-18	Show	GitHub Exploit DB Packet Storm

257692	5	警告	オラクル	-	Oracle Fusion Middleware の Oracle GoldenGate Veridata コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-4416	2011-02-14 15:14	2011-01-18	Show	GitHub Exploit DB Packet Storm

257693	5.5	警告	オラクル	-	Oracle Fusion Middleware の Oracle Discoverer コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-3588	2011-02-14 15:14	2011-01-18	Show	GitHub Exploit DB Packet Storm

257694	5.8	警告	オラクル	-	Oracle Fusion Middleware の Oracle WebLogic Server コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-4437	2011-02-14 15:14	2011-01-18	Show	GitHub Exploit DB Packet Storm

257695	7.2	危険	サイバートラスト株式会社レッドハット SystemTap	-	SystemTap の staprun runtime ツールにおける権限昇格の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-4170	2011-02-10 14:54	2010-11-17	Show	GitHub Exploit DB Packet Storm

257696	2.1	注意	サイバートラスト株式会社レッドハット SystemTap	-	SystemTap の staprun runtime ツールにおけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2010-4171	2011-02-10 14:53	2010-11-17	Show	GitHub Exploit DB Packet Storm

257697	5	警告	The PHP Group チェック・ポイント・ソフトウェア・テクノロジーズレッドハット	-	PHP の zend_strtod 関数にて使用される strtod.c におけるサービス運用妨害 (DoS) の脆弱性	CWE-189 数値処理の問題	CVE-2010-4645	2011-02-10 14:53	2010-12-30	Show	GitHub Exploit DB Packet Storm

257698	6.4	警告	オラクル	-	Oracle Fusion Middleware の Oracle HTTP Server コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-4455	2011-02-10 12:34	2011-01-18	Show	GitHub Exploit DB Packet Storm

257699	7.1	危険	オラクル	-	Oracle Fusion Middleware の Oracle Document Capture コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-3598	2011-02-10 12:29	2011-01-18	Show	GitHub Exploit DB Packet Storm

257700	7.5	危険	オラクル	-	Oracle Fusion Middleware の Services for Beehive コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-4417	2011-02-10 12:13	2011-01-18	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 20, 2026, 4:01 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
246001	9.8	CRITICAL Network	dlink	dsl-2770l_firmware	atbox.htm on D-Link DSL-2770L devices allows remote unauthenticated attackers to discover admin credentials.	CWE-798 Use of Hard-coded Credentials	CVE-2018-18007	2024-11-21 12:55	2018-12-22	Show	GitHub Exploit DB Packet Storm

246002	7.5	HIGH Network	trendmicro	officescan	A Trend Micro OfficeScan XG weak file permissions vulnerability may allow an attacker to potentially manipulate permissions on some key files to modify other files and folders on vulnerable installat…	CWE-732 Incorrect Permission Assignment for Critical Resource	CVE-2018-18332	2024-11-21 12:55	2018-12-22	Show	GitHub Exploit DB Packet Storm

246003	7.5	HIGH Network	trendmicro	officescan	A Trend Micro OfficeScan XG weak file permissions vulnerability on a particular folder for a particular group may allow an attacker to alter the files, which could lead to other exploits on vulnerabl…	CWE-732 Incorrect Permission Assignment for Critical Resource	CVE-2018-18331	2024-11-21 12:55	2018-12-22	Show	GitHub Exploit DB Packet Storm

246004	6.5	MEDIUM Network	trendmicro	dr._safety	An Address Bar Spoofing vulnerability in Trend Micro Dr. Safety for Android (Consumer) versions 3.0.1324 and below could allow an attacker to potentially trick a victim into visiting a malicious URL …	NVD-CWE-noinfo	CVE-2018-18330	2024-11-21 12:55	2018-12-22	Show	GitHub Exploit DB Packet Storm

246005	7.5	HIGH Network	d-link	dcs-825l_firmware	D-Link DCS-825L devices with firmware 1.08 do not employ a suitable mechanism to prevent denial-of-service (DoS) attacks. An attacker can harm the device availability (i.e., live-online video/audio s…	NVD-CWE-noinfo	CVE-2018-18442	2024-11-21 12:55	2018-12-21	Show	GitHub Exploit DB Packet Storm

246006	7.5	HIGH Network	d-link dlink	dcs-936l_firmware dcs-942l_firmware dcs-8000lh_firmware dcs-942lb1_firmware dcs-5222l_firmware dcs-825l_firmware dcs-2630l_firmware dcs-820l_firmware dcs-855l_firmware dcs-…	D-Link DCS series Wi-Fi cameras expose sensitive information regarding the device configuration. The affected devices include many of DCS series, such as: DCS-936L, DCS-942L, DCS-8000LH, DCS-942LB1, …	CWE-200 Information Exposure	CVE-2018-18441	2024-11-21 12:55	2018-12-21	Show	GitHub Exploit DB Packet Storm

246007	9.8	CRITICAL Network	jco	karma	SQL injection vulnerability in the "ContentPlaceHolder1_uxTitle" component in ArchiveNews.aspx in jco.ir KARMA 6.0.0 allows a remote attacker to execute arbitrary SQL commands via the "id" parameter.	CWE-89 SQL Injection	CVE-2018-18399	2024-11-21 12:55	2018-12-21	Show	GitHub Exploit DB Packet Storm

246008	9.8	CRITICAL Network	escanav	escan_anti-virus	eScan Agent Application (MWAGENT.EXE) 4.0.2.98 in MicroWorld Technologies eScan 14.0 allows remote or local attackers to execute arbitrary commands by sending a carefully crafted payload to TCP port …	NVD-CWE-noinfo	CVE-2018-18388	2024-11-21 12:55	2018-12-21	Show	GitHub Exploit DB Packet Storm

246009	7.5	HIGH Network	icinga	icinga_web_2	Icinga Web 2 before 2.6.2 allows parameters that break navigation dashlets, as demonstrated by a single '$' character as the Name of a Navigation item.	CWE-74 Injection	CVE-2018-18250	2024-11-21 12:55	2018-12-18	Show	GitHub Exploit DB Packet Storm

246010	9.8	CRITICAL Network	icinga	icinga_web_2	Icinga Web 2 before 2.6.2 allows injection of PHP ini-file directives via vectors involving environment variables as the channel to send information to the attacker, such as a name=${PATH}_${APACHE_R…	CWE-94 Code Injection	CVE-2018-18249	2024-11-21 12:55	2018-12-18	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed