Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 18, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
257901	2.6	注意	WEBインベンター	-	Contents-Mall におけるパスワードの取扱いに関する脆弱性	CWE-Other その他	CVE-2010-3925	2011-01-11 14:04	2011-01-11	Show	GitHub Exploit DB Packet Storm

257902	4	警告	エイムラック	-	Aipo における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-3924	2011-01-11 14:02	2011-01-11	Show	GitHub Exploit DB Packet Storm

257903	9.3	危険	レッドハットリアルネットワークス	-	RealNetworks RealPlayer における SIPR ヒープオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-4379	2011-01-7 15:36	2010-12-10	Show	GitHub Exploit DB Packet Storm

257904	10	危険	リアルネットワークス	-	RealNetworks RealPlayer の AAC スペクトルデータの解析処理における脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-0125	2011-01-7 15:35	2010-12-10	Show	GitHub Exploit DB Packet Storm

257905	5	警告	リアルネットワークス	-	RealNetworks RealPlayer の cook コーデックにおける任意のメモリへアクセスされる脆弱性	CWE-Other その他	CVE-2010-2579	2011-01-7 15:35	2010-12-10	Show	GitHub Exploit DB Packet Storm

257906	10	危険	リアルネットワークス	-	RealNetworks RealPlayer の cook コーデックにおける脆弱性	CWE-Other その他	CVE-2010-0121	2011-01-7 15:35	2010-12-10	Show	GitHub Exploit DB Packet Storm

257907	9.3	危険	レッドハットリアルネットワークス	-	RealNetworks RealPlayer の drv2.dll モジュールにおける任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-4378	2011-01-7 15:35	2010-12-10	Show	GitHub Exploit DB Packet Storm

257908	9.3	危険	リアルネットワークス	-	RealNetworks RealPlayer の Cook Audio Codec におけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-4377	2011-01-7 15:35	2010-12-10	Show	GitHub Exploit DB Packet Storm

257909	9.3	危険	リアルネットワークス	-	RealNetworks RealPlayer の RTSP GIF の解析処理におけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-4376	2011-01-7 15:34	2010-12-10	Show	GitHub Exploit DB Packet Storm

257910	9.3	危険	リアルネットワークス	-	RealNetworks RealPlayer の pnen3260.dll モジュールにおける整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2010-4397	2011-01-7 15:34	2010-12-10	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 18, 2026, 4 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
246691	7.5	HIGH Network	telegram	telegram_desktop	Telegram Desktop (aka tdesktop) 1.3.14 might allow attackers to cause a denial of service (assertion failure and application exit) via an "Edit color palette" search that triggers an "index out of ra…	CWE-617 Reachable Assertion	CVE-2018-17231	2024-11-21 12:54	2018-09-20	Show	GitHub Exploit DB Packet Storm

246692	6.5	MEDIUM Network	exiv2	exiv2	Exiv2::ul2Data in types.cpp in Exiv2 v0.26 allows remote attackers to cause a denial of service (heap-based buffer overflow) via a crafted image file.	CWE-787 Out-of-bounds Write	CVE-2018-17230	2024-11-21 12:54	2018-09-20	Show	GitHub Exploit DB Packet Storm

246693	6.5	MEDIUM Network	exiv2	exiv2	Exiv2::d2Data in types.cpp in Exiv2 v0.26 allows remote attackers to cause a denial of service (heap-based buffer overflow) via a crafted image file.	CWE-787 Out-of-bounds Write	CVE-2018-17229	2024-11-21 12:54	2018-09-20	Show	GitHub Exploit DB Packet Storm

246694	9.8	CRITICAL Network	nmap4j_project	nmap4j	nmap4j 1.1.0 allows attackers to execute arbitrary commands via shell metacharacters in an includeHosts call.	CWE-78 OS Command	CVE-2018-17228	2024-11-21 12:54	2018-09-20	Show	GitHub Exploit DB Packet Storm

246695	8.8	HIGH Network	linksys	velop_firmware	Linksys Velop 1.1.2.187020 devices allow unauthenticated command injection, providing an attacker with full root access, via cgi-bin/zbtest.cgi or cgi-bin/zbtest2.cgi (scripts that can be discovered …	CWE-78 OS Command	CVE-2018-17208	2024-11-21 12:54	2018-09-20	Show	GitHub Exploit DB Packet Storm

246696	9.8	CRITICAL Network	snapcreek	duplicator	An issue was discovered in Snap Creek Duplicator before 1.2.42. By accessing leftover installer files (installer.php and installer-backup.php), an attacker can inject PHP code into wp-config.php duri…	CWE-94 Code Injection	CVE-2018-17207	2024-11-21 12:54	2018-09-20	Show	GitHub Exploit DB Packet Storm

246697	4.9	MEDIUM Network	openvswitch redhat canonical debian	openvswitch openstack ubuntu_linux debian_linux	An issue was discovered in Open vSwitch (OvS) 2.7.x through 2.7.6. The decode_bundle function inside lib/ofp-actions.c is affected by a buffer over-read issue during BUNDLE action decoding.	CWE-125 Out-of-bounds Read	CVE-2018-17206	2024-11-21 12:54	2018-09-20	Show	GitHub Exploit DB Packet Storm

246698	7.5	HIGH Network	openvswitch redhat canonical	openvswitch openstack ubuntu_linux	An issue was discovered in Open vSwitch (OvS) 2.7.x through 2.7.6, affecting ofproto_rule_insert__ in ofproto/ofproto.c. During bundle commit, flows that are added in a bundle are applied to ofproto …	CWE-617 Reachable Assertion	CVE-2018-17205	2024-11-21 12:54	2018-09-20	Show	GitHub Exploit DB Packet Storm

246699	4.3	MEDIUM Network	openvswitch redhat canonical debian	openvswitch openstack ubuntu_linux debian_linux	An issue was discovered in Open vSwitch (OvS) 2.7.x through 2.7.6, affecting parse_group_prop_ntr_selection_method in lib/ofp-util.c. When decoding a group mod, it validates the group type and comman…	CWE-617 Reachable Assertion	CVE-2018-17204	2024-11-21 12:54	2018-09-20	Show	GitHub Exploit DB Packet Storm

246700	7.8	HIGH Local	debian canonical artifex redhat	debian_linux ubuntu_linux ghostscript enterprise_linux_desktop enterprise_linux_workstation enterprise_linux_server enterprise_linux_server_tus enterprise_linux_server_eus ent…	Artifex Ghostscript before 9.25 allowed a user-writable error exception table, which could be used by remote attackers able to supply crafted PostScript to potentially overwrite or replace error hand…	NVD-CWE-noinfo	CVE-2018-17183	2024-11-21 12:54	2018-09-20	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed