Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":July 1, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
257941	9.3	危険	マイクロソフト	-	複数の Microsoft Excel 製品における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2011-1988	2011-10-20 16:18	2011-09-13	Show	GitHub Exploit DB Packet Storm

257942	9.3	危険	マイクロソフト	-	複数の Microsoft Excel 製品における任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2011-1989	2011-10-20 16:17	2011-09-13	Show	GitHub Exploit DB Packet Storm

257943	9.3	危険	マイクロソフト	-	複数の Microsoft Excel 製品における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2011-1990	2011-10-20 16:17	2011-09-13	Show	GitHub Exploit DB Packet Storm

257944	9.3	危険	マイクロソフト	-	Microsoft Windows における権限昇格の脆弱性	CWE-Other その他	CVE-2011-1991	2011-10-20 16:17	2011-09-13	Show	GitHub Exploit DB Packet Storm

257945	9.3	危険	アドビシステムズ	-	Adobe Reader および Acrobat における任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2011-2442	2011-10-20 16:14	2011-09-13	Show	GitHub Exploit DB Packet Storm

257946	9.3	危険	アドビシステムズ	-	Adobe Reader および Acrobat の CoolType.dll におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2011-2441	2011-10-20 16:14	2011-09-13	Show	GitHub Exploit DB Packet Storm

257947	9.3	危険	アドビシステムズ	-	Adobe Reader および Acrobat における任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2011-2440	2011-10-20 16:13	2011-09-13	Show	GitHub Exploit DB Packet Storm

257948	9.3	危険	アドビシステムズ	-	Adobe Reader および Acrobat における任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2011-2439	2011-10-20 16:12	2011-09-13	Show	GitHub Exploit DB Packet Storm

257949	-	-	BlueZ Project	-	BlueZ-hcidump におけるヒープオーバーフローの脆弱性	-	CVE-2011-3334	2011-10-19 11:23	2011-10-13	Show	GitHub Exploit DB Packet Storm

257950	-	-	VideoLAN	-	VLC Media Player に脆弱性	-	CVE-2011-3333	2011-10-19 11:22	2011-10-13	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:July 1, 2026, 4:27 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
253781	8.8	HIGH Network	gluster debian	glusterfs debian_linux	glusterfs is vulnerable to privilege escalation on gluster server nodes. An authenticated gluster client via TLS could use gluster cli with --remote-host command to add it self to trusted storage poo…	-	CVE-2018-10841	2024-11-21 12:42	2018-06-21	Show	GitHub Exploit DB Packet Storm

253782	8.8	HIGH Network	openwrt	openwrt	OpenWrt mishandles access control in /etc/config/rpcd and the /usr/share/rpcd/acl.d files, which allows remote authenticated users to call arbitrary methods (i.e., achieve ubus access over HTTP) that…	CWE-732 Incorrect Permission Assignment for Critical Resource	CVE-2018-11116	2024-11-21 12:42	2018-06-20	Show	GitHub Exploit DB Packet Storm

253783	7.5	HIGH Network	cesanta	mongoose	The mg_handle_cgi function in mongoose.c in Mongoose 6.11 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash, or NULL pointer dereference) via an …	CWE-125 CWE-476 Out-of-bounds Read NULL Pointer Dereference	CVE-2018-10945	2024-11-21 12:42	2018-06-20	Show	GitHub Exploit DB Packet Storm

253784	7.5	HIGH Network	strongswan debian canonical fedoraproject	strongswan debian_linux ubuntu_linux fedora	strongSwan 5.6.0 and older allows Remote Denial of Service because of Missing Initialization of a Variable.	CWE-909 Missing Initialization of Resource	CVE-2018-10811	2024-11-21 12:42	2018-06-20	Show	GitHub Exploit DB Packet Storm

253785	9.8	CRITICAL Network	redislabs debian oracle redhat	redis debian_linux communications_operations_monitor openstack	An Integer Overflow issue was discovered in the struct library in the Lua subsystem in Redis before 3.2.12, 4.x before 4.0.10, and 5.x before 5.0 RC2, leading to a failure of bounds checking.	CWE-190 Integer Overflow or Wraparound	CVE-2018-11219	2024-11-21 12:42	2018-06-18	Show	GitHub Exploit DB Packet Storm

253786	9.8	CRITICAL Network	redislabs debian oracle redhat	redis debian_linux communications_operations_monitor openstack	Memory Corruption was discovered in the cmsgpack library in the Lua subsystem in Redis before 3.2.12, 4.x before 4.0.10, and 5.x before 5.0 RC2 because of stack-based buffer overflows.	CWE-787 Out-of-bounds Write	CVE-2018-11218	2024-11-21 12:42	2018-06-18	Show	GitHub Exploit DB Packet Storm

253787	9.8	CRITICAL Network	etere	etereweb	Etere EtereWeb before 28.1.20 has a pre-authentication blind SQL injection in the POST parameters txUserName and txPassword.	CWE-89 SQL Injection	CVE-2018-10997	2024-11-21 12:42	2018-06-18	Show	GitHub Exploit DB Packet Storm

253788	9.8	CRITICAL Network	genetechsolutions	pie_register	SQL injection vulnerability in the Pie Register plugin before 3.0.10 for WordPress allows remote attackers to execute arbitrary SQL commands via the invitation codes grid.	CWE-89 SQL Injection	CVE-2018-10969	2024-11-21 12:42	2018-06-18	Show	GitHub Exploit DB Packet Storm

253789	5.4	MEDIUM Network	pandorafms	artica_pandora_fms	XSS in Artica Pandora FMS before 7.0 NG 723 allows an attacker to execute arbitrary code via a crafted "refr" parameter in a "/pandora_console/index.php?sec=estado&sec2=operation/agentes/estado_agent…	CWE-79 Cross-site Scripting	CVE-2018-11223	2024-11-21 12:42	2018-06-16	Show	GitHub Exploit DB Packet Storm

253790	7.5	HIGH Network	artica	pandora_fms	Local File Inclusion (LFI) in Artica Pandora FMS through version 7.23 allows an attacker to call any php file via the /pandora_console/ajax.php ajax endpoint.	CWE-20 Improper Input Validation	CVE-2018-11222	2024-11-21 12:42	2018-06-16	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed