Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":July 1, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
257891	6.8	警告	アップル	-	Apple iOS の OfficeImport におけるメモリ二重解放の脆弱性	CWE-94 コード・インジェクション	CVE-2011-3261	2011-10-24 16:30	2011-10-14	Show	GitHub Exploit DB Packet Storm

257892	-	-	OneOrZero	-	OneOrZero AIMS に複数の脆弱性	-	-	2011-10-24 11:14	2011-10-14	Show	GitHub Exploit DB Packet Storm

257893	7.6	危険	アップル	-	複数の Apple 製品で使用される WebKit におけるサービス運用妨害 (DoS) の脆弱性	CWE-119 バッファエラー	CVE-2011-3236	2011-10-24 11:08	2011-10-12	Show	GitHub Exploit DB Packet Storm

257894	7.6	危険	アップル	-	複数の Apple 製品で使用される WebKit におけるサービス運用妨害 (DoS) の脆弱性	CWE-119 バッファエラー	CVE-2011-3237	2011-10-24 11:08	2011-10-12	Show	GitHub Exploit DB Packet Storm

257895	7.6	危険	アップル	-	Apple iTunes で使用される CoreFoundation におけるサービス運用妨害 (DoS) の脆弱性	CWE-119 バッファエラー	CVE-2011-0259	2011-10-24 11:07	2011-10-12	Show	GitHub Exploit DB Packet Storm

257896	9.3	危険	マイクロソフト	-	Microsoft Internet Explorer 8 における任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2011-1999	2011-10-21 15:40	2011-10-11	Show	GitHub Exploit DB Packet Storm

257897	9.3	危険	マイクロソフト	-	Microsoft Internet Explorer 9 における任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2011-1998	2011-10-21 15:39	2011-10-11	Show	GitHub Exploit DB Packet Storm

257898	9.3	危険	マイクロソフト	-	Microsoft Internet Explorer 6 における任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2011-1997	2011-10-21 15:39	2011-10-11	Show	GitHub Exploit DB Packet Storm

257899	9.3	危険	マイクロソフト	-	Microsoft Internet Explorer 6 から 8 における任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2011-1996	2011-10-21 15:38	2011-10-11	Show	GitHub Exploit DB Packet Storm

257900	9.3	危険	マイクロソフト	-	Microsoft Internet Explorer 6 から 9 における任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2011-1995	2011-10-21 15:35	2011-10-11	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:July 1, 2026, 4:27 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
249471	7.5	HIGH Network	f5 debian canonical opensuse apple	nginx debian_linux ubuntu_linux leap xcode	nginx before versions 1.15.6 and 1.14.1 has a vulnerability in the implementation of HTTP/2 that can allow for excessive memory consumption. This issue affects nginx compiled with the ngx_http_v2_mod…	-	CVE-2018-16843	2024-11-21 12:53	2018-11-7	Show	GitHub Exploit DB Packet Storm

249472	8.8	HIGH Adjacent	ti	ble-stack	Texas Instruments BLE-STACK v2.2.1 for SimpleLink CC2640 and CC2650 devices allows remote attackers to execute arbitrary code via a malformed packet that triggers a buffer overflow.	CWE-787 Out-of-bounds Write	CVE-2018-16986	2024-11-21 12:53	2018-11-7	Show	GitHub Exploit DB Packet Storm

249473	7.8	HIGH Local	qemu canonical	qemu ubuntu_linux	An OOB heap buffer r/w access issue was found in the NVM Express Controller emulation in QEMU. It could occur in nvme_cmb_ops routines in nvme device. A guest user/process could use this flaw to cras…	CWE-125 CWE-787 Out-of-bounds Read Out-of-bounds Write	CVE-2018-16847	2024-11-21 12:53	2018-11-3	Show	GitHub Exploit DB Packet Storm

249474	7.5	HIGH Network	redhat	openstack-mistral	A flaw was found in openstack-mistral. By manipulating the SSH private key filename, the std.ssh action can be used to disclose the presence of arbitrary files within the filesystem of the executor r…	CWE-200 Information Exposure	CVE-2018-16849	2024-11-21 12:53	2018-11-3	Show	GitHub Exploit DB Packet Storm

249475	9.1	CRITICAL Network	haxx canonical debian	curl ubuntu_linux debian_linux	Curl versions 7.14.1 through 7.61.1 are vulnerable to a heap-based buffer over-read in the tool_msgs.c:voutf() function that may result in information exposure and denial of service.	CWE-125 Out-of-bounds Read	CVE-2018-16842	2024-11-21 12:53	2018-11-1	Show	GitHub Exploit DB Packet Storm

249476	9.8	CRITICAL Network	haxx canonical	curl ubuntu_linux	A heap use-after-free flaw was found in curl versions from 7.59.0 through 7.61.1 in the code related to closing an easy handle. When closing and cleaning up an 'easy' handle in the `Curl_close()` fun…	CWE-416 Use After Free	CVE-2018-16840	2024-11-21 12:53	2018-11-1	Show	GitHub Exploit DB Packet Storm

249477	9.8	CRITICAL Network	haxx debian canonical	curl debian_linux ubuntu_linux	Curl versions 7.33.0 through 7.61.1 are vulnerable to a buffer overrun in the SASL authentication code that may lead to denial of service.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2018-16839	2024-11-21 12:53	2018-11-1	Show	GitHub Exploit DB Packet Storm

249478	7.8	HIGH Local	redhat debian suse	ansible_engine ansible_tower debian_linux package_hub	Ansible "User" module leaks any data which is passed on as a parameter to ssh-keygen. This could lean in undesirable situations such as passphrases credentials passed as a parameter for the ssh-keyge…	CWE-311 Missing Encryption of Sensitive Data	CVE-2018-16837	2024-11-21 12:53	2018-10-24	Show	GitHub Exploit DB Packet Storm

249479	5.9	MEDIUM Network	tinc-vpn debian starwindsoftware	tinc debian_linux starwind_virtual_san	Missing message authentication in the meta-protocol in Tinc VPN version 1.0.34 and earlier allows a man-in-the-middle attack to disable the encryption of VPN packets.	CWE-306 Missing Authentication for Critical Function	CVE-2018-16758	2024-11-21 12:53	2018-10-11	Show	GitHub Exploit DB Packet Storm

249480	3.7	LOW Network	tinc-vpn debian starwindsoftware	tinc debian_linux starwind_virtual_san	tinc 1.0.30 through 1.0.34 has a broken authentication protocol, although there is a partial mitigation. This is fixed in 1.1.	CWE-287 Improper Authentication	CVE-2018-16738	2024-11-21 12:53	2018-10-11	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed