Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 7, 2026, 4 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
257701 9.3 危険 マイクロソフト - Microsoft Internet Explorer における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2010-0245 2010-02-22 12:13 2010-01-21 Show GitHub Exploit DB Packet Storm
257702 4.3 警告 マイクロソフト - Microsoft Internet Explorer の XSS フィルタにおけるクロスサイトスクリプティングの脆弱性 CWE-DesignError
CVE-2009-4074 2010-02-22 12:13 2009-11-25 Show GitHub Exploit DB Packet Storm
257703 6.6 警告 マイクロソフト - Microsoft Windows の kernel における権限昇格の脆弱性 CWE-20
不適切な入力確認
CVE-2010-0232 2010-02-22 12:12 2010-01-20 Show GitHub Exploit DB Packet Storm
257704 10 危険 Rockwell Automation - Rockwell Automation Allen-Bradley MicroLogix PLC に複数の脆弱性 CWE-noinfo
情報不足
CVE-2009-3739 2010-02-19 14:22 2010-01-21 Show GitHub Exploit DB Packet Storm
257705 9.3 危険 マイクロソフト - Microsoft Internet Explorer において任意のコードが実行される脆弱性 CWE-399
リソース管理の問題
CVE-2010-0249 2010-02-19 14:21 2010-01-15 Show GitHub Exploit DB Packet Storm
257706 7.5 危険 アップル
MySQL AB
- MySQL で使用される yaSSL におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2008-0227 2010-02-19 11:37 2008-01-10 Show GitHub Exploit DB Packet Storm
257707 7.5 危険 アップル
MySQL AB
- MySQL で使用される yaSSL における複数のバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2008-0226 2010-02-19 11:32 2008-01-10 Show GitHub Exploit DB Packet Storm
257708 7.5 危険 Linux
レッドハット
- Linux kernel の do_coredump 関数における任意のファイルを改ざんされる脆弱性 - CVE-2006-6304 2010-02-18 14:28 2006-12-14 Show GitHub Exploit DB Packet Storm
257709 7.8 危険 Linux
レッドハット
- Linux kernel の net/ipv4/route.c 用の特定のレッドハットパッチにおけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2009-4272 2010-02-18 14:28 2010-01-19 Show GitHub Exploit DB Packet Storm
257710 9.3 危険 レッドハット
リアルネットワークス
- Realnetworks RealPlayer におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2009-4248 2010-02-17 11:48 2010-01-19 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 7, 2026, 4:13 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
248331 9.8 CRITICAL
Network
zohocorp manageengine_desktop_central An issue was discovered in Zoho ManageEngine Desktop Central before 100251. By leveraging access to a log file, a context-dependent attacker can obtain (depending on the modules configured) the Base6… CWE-532
 Inclusion of Sensitive Information in Log Files
CVE-2018-11717 2024-11-21 12:43 2018-07-16 Show GitHub Exploit DB Packet Storm
248332 8.0 HIGH
Adjacent
debian
videolan
debian_linux
vlc_media_player
VideoLAN VLC media player 2.2.x is prone to a use after free vulnerability which an attacker can leverage to execute arbitrary code via crafted MKV files. Failed exploit attempts will likely result i… CWE-416
 Use After Free
CVE-2018-11529 2024-11-21 12:43 2018-07-12 Show GitHub Exploit DB Packet Storm
248333 6.1 MEDIUM
Network
siemens teamcenter_product_lifecycle_management A reflected Cross-Site-Scripting (XSS) vulnerability has been identified in Siemens PLM Software TEAMCENTER (V9.1.2.5). If a user visits the login portal through the URL crafted by the attacker, the … CWE-79
Cross-site Scripting
CVE-2018-11450 2024-11-21 12:43 2018-07-10 Show GitHub Exploit DB Packet Storm
248334 7.5 HIGH
Network
ribboncommunications sonus_sbc_1000_firmware
sonus_sbc_2000_firmware
sbc_swe_lite_firmware
A Local File Inclusion (LFI) vulnerability in the Sonus SBC 1000 / SBC 2000 / SBC SWe Lite web interface allows for the downloading of arbitrary files via an unspecified vector. It affects the 1000 a… CWE-22
Path Traversal
CVE-2018-11543 2024-11-21 12:43 2018-07-9 Show GitHub Exploit DB Packet Storm
248335 9.8 CRITICAL
Network
ribboncommunications sonus_sbc_1000_firmware
sonus_sbc_2000_firmware
sbc_swe_lite_firmware
A Remote Command Execution (RCE) vulnerability in the Sonus SBC 1000 / SBC 2000 / SBC SWe Lite web interface allows for the execution of arbitrary commands via an unspecified vector. It affects the 1… NVD-CWE-noinfo
CVE-2018-11542 2024-11-21 12:43 2018-07-9 Show GitHub Exploit DB Packet Storm
248336 9.8 CRITICAL
Network
ribboncommunications sonus_sbc_1000_firmware
sonus_sbc_2000_firmware
sbc_swe_lite_web
A root privilege escalation vulnerability in the Sonus SBC 1000 / SBC 2000 / SBC SWe Lite web interface allows unauthorised access to privileged content via an unspecified vector. It affects the 1000… CWE-862
 Missing Authorization
CVE-2018-11541 2024-11-21 12:43 2018-07-9 Show GitHub Exploit DB Packet Storm
248337 6.1 MEDIUM
Network
jirafeau jirafeau script.php in Jirafeau before 3.4.1 is affected by two stored Cross-Site Scripting (XSS) vulnerabilities. These are stored within the shared files description file and allow the execution of a JavaSc… CWE-79
Cross-site Scripting
CVE-2018-11351 2024-11-21 12:43 2018-07-8 Show GitHub Exploit DB Packet Storm
248338 6.1 MEDIUM
Network
jirafeau jirafeau An issue was discovered in Jirafeau before 3.4.1. The file "search by name" form is affected by one Cross-Site Scripting vulnerability via the name parameter. CWE-79
Cross-site Scripting
CVE-2018-11350 2024-11-21 12:43 2018-07-8 Show GitHub Exploit DB Packet Storm
248339 8.8 HIGH
Network
jirafeau jirafeau The administration panel of Jirafeau before 3.4.1 is vulnerable to three CSRF attacks on search functionalities: search_by_name, search_by_hash, and search_link. CWE-352
 Origin Validation Error
CVE-2018-11349 2024-11-21 12:43 2018-07-8 Show GitHub Exploit DB Packet Storm
248340 7.8 HIGH
Local
google android Possible buffer overflow in msm_adsp_stream_callback_put due to lack of input validation of user-provided data that leads to integer overflow in all Android releases(Android for MSM, Firefox OS for M… CWE-190
 Integer Overflow or Wraparound
CVE-2018-11304 2024-11-21 12:43 2018-07-7 Show GitHub Exploit DB Packet Storm