Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":July 1, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
257891	6.8	警告	アップル	-	Apple iOS の OfficeImport におけるメモリ二重解放の脆弱性	CWE-94 コード・インジェクション	CVE-2011-3261	2011-10-24 16:30	2011-10-14	Show	GitHub Exploit DB Packet Storm

257892	-	-	OneOrZero	-	OneOrZero AIMS に複数の脆弱性	-	-	2011-10-24 11:14	2011-10-14	Show	GitHub Exploit DB Packet Storm

257893	7.6	危険	アップル	-	複数の Apple 製品で使用される WebKit におけるサービス運用妨害 (DoS) の脆弱性	CWE-119 バッファエラー	CVE-2011-3236	2011-10-24 11:08	2011-10-12	Show	GitHub Exploit DB Packet Storm

257894	7.6	危険	アップル	-	複数の Apple 製品で使用される WebKit におけるサービス運用妨害 (DoS) の脆弱性	CWE-119 バッファエラー	CVE-2011-3237	2011-10-24 11:08	2011-10-12	Show	GitHub Exploit DB Packet Storm

257895	7.6	危険	アップル	-	Apple iTunes で使用される CoreFoundation におけるサービス運用妨害 (DoS) の脆弱性	CWE-119 バッファエラー	CVE-2011-0259	2011-10-24 11:07	2011-10-12	Show	GitHub Exploit DB Packet Storm

257896	9.3	危険	マイクロソフト	-	Microsoft Internet Explorer 8 における任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2011-1999	2011-10-21 15:40	2011-10-11	Show	GitHub Exploit DB Packet Storm

257897	9.3	危険	マイクロソフト	-	Microsoft Internet Explorer 9 における任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2011-1998	2011-10-21 15:39	2011-10-11	Show	GitHub Exploit DB Packet Storm

257898	9.3	危険	マイクロソフト	-	Microsoft Internet Explorer 6 における任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2011-1997	2011-10-21 15:39	2011-10-11	Show	GitHub Exploit DB Packet Storm

257899	9.3	危険	マイクロソフト	-	Microsoft Internet Explorer 6 から 8 における任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2011-1996	2011-10-21 15:38	2011-10-11	Show	GitHub Exploit DB Packet Storm

257900	9.3	危険	マイクロソフト	-	Microsoft Internet Explorer 6 から 9 における任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2011-1995	2011-10-21 15:35	2011-10-11	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:July 2, 2026, 4:03 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
249901	6.5	MEDIUM Network	lenovo	xclarity_integrator	In versions prior to 5.5, LXCI for VMware allows an authenticated user to write to any system file due to insufficient sanitization during the upload of a backup file.	CWE-434 Unrestricted Upload of File with Dangerous Type	CVE-2018-16093	2024-11-21 12:52	2018-11-30	Show	GitHub Exploit DB Packet Storm

249902	8.8	HIGH Network	mi	miwifi_os	System command injection in request_mitv in Xiaomi Mi Router 3 version 2.22.15 allows attackers to execute arbitrary system commands via the "payload" URL parameter.	CWE-78 OS Command	CVE-2018-16130	2024-11-21 12:52	2018-11-28	Show	GitHub Exploit DB Packet Storm

249903	6.1	MEDIUM Network	lenovo	system_management_module_firmware	In System Management Module (SMM) versions prior to 1.06, the SMM web interface for changing Enclosure VPD fails to sufficiently sanitize all input for HTML tags, possibly opening a path for cross-si…	CWE-79 Cross-site Scripting	CVE-2018-16096	2024-11-21 12:52	2018-11-27	Show	GitHub Exploit DB Packet Storm

249904	5.9	MEDIUM Network	lenovo	system_management_module_firmware	In System Management Module (SMM) versions prior to 1.06, the SMM records hashed passwords to a debug log when user authentication fails.	CWE-532 Inclusion of Sensitive Information in Log Files	CVE-2018-16095	2024-11-21 12:52	2018-11-27	Show	GitHub Exploit DB Packet Storm

249905	8.1	HIGH Network	lenovo	system_management_module_firmware	In System Management Module (SMM) versions prior to 1.06, an internal SMM function that retrieves configuration settings is prone to a buffer overflow.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2018-16094	2024-11-21 12:52	2018-11-27	Show	GitHub Exploit DB Packet Storm

249906	8.1	HIGH Network	lenovo	system_management_module_firmware	In System Management Module (SMM) versions prior to 1.06, the FFDC feature includes the collection of SMM system files containing sensitive information; notably, the SMM user account credentials and …	NVD-CWE-noinfo	CVE-2018-16092	2024-11-21 12:52	2018-11-27	Show	GitHub Exploit DB Packet Storm

249907	8.1	HIGH Network	lenovo	system_management_module_firmware	In System Management Module (SMM) versions prior to 1.06, the SMM certificate creation and parsing logic is vulnerable to several buffer overflows.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2018-16091	2024-11-21 12:52	2018-11-27	Show	GitHub Exploit DB Packet Storm

249908	7.5	HIGH Network	lenovo	system_management_module_firmware	In System Management Module (SMM) versions prior to 1.06, the SMM certificate creation and parsing logic is vulnerable to post-authentication command injection.	CWE-78 OS Command	CVE-2018-16090	2024-11-21 12:52	2018-11-27	Show	GitHub Exploit DB Packet Storm

249909	7.5	HIGH Network	lenovo	system_management_module_firmware	In System Management Module (SMM) versions prior to 1.06, a field in the header of SMM firmware update images is insufficiently sanitized, allowing post-authentication command injection on the SMM as…	CWE-78 OS Command	CVE-2018-16089	2024-11-21 12:52	2018-11-27	Show	GitHub Exploit DB Packet Storm

249910	5.3	MEDIUM Network	ismartalarm	cubeone_firmware	Incorrect access control for the diagnostic files of the iSmartAlarm Cube One through 2.2.4.10 allows an attacker to retrieve them via a specifically crafted TCP request to port 12345 and 22306, and …	CWE-200 Information Exposure	CVE-2018-16224	2024-11-21 12:52	2018-11-21	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed