Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 14, 2026, 10 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
257981 9.3 危険 マイクロソフト - Microsoft Windows の WordPad Text Converters における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2010-2563 2010-10-6 16:55 2010-09-14 Show GitHub Exploit DB Packet Storm
257982 9.3 危険 マイクロソフト - Microsoft Windows の RPC クライアント実装における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2010-2567 2010-10-6 16:55 2010-09-14 Show GitHub Exploit DB Packet Storm
257983 6.8 警告 マイクロソフト - Windows 上で稼働する Microsoft Internet Information Services におけるアクセス制限を回避される脆弱性 CWE-287
不適切な認証
CVE-2010-2731 2010-10-6 16:54 2010-09-14 Show GitHub Exploit DB Packet Storm
257984 9.3 危険 マイクロソフト - Microsoft Internet Information Services におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2010-2730 2010-10-5 19:00 2010-09-14 Show GitHub Exploit DB Packet Storm
257985 4.3 警告 マイクロソフト - Microsoft Internet Information Services の ASP 実装におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2010-1899 2010-10-5 18:59 2010-09-14 Show GitHub Exploit DB Packet Storm
257986 9.3 危険 マイクロソフト - Microsoft Outlook におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2010-2728 2010-10-5 18:59 2010-09-14 Show GitHub Exploit DB Packet Storm
257987 9.3 危険 マイクロソフト - Microsoft Windows の USP10.DLL 内の Uniscribe 実装における任意のコードを実行される脆弱性 CWE-20
不適切な入力確認
CVE-2010-2738 2010-10-5 18:58 2010-09-14 Show GitHub Exploit DB Packet Storm
257988 9.3 危険 マイクロソフト - Microsoft Windows の MPEG-4 コーデックにおける任意のコードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2010-0818 2010-10-5 18:58 2010-09-14 Show GitHub Exploit DB Packet Storm
257989 9.3 危険 マイクロソフト - Microsoft Windows の Print Spooler サービスにおける任意のコードを実行される脆弱性 CWE-20
不適切な入力確認
CVE-2010-2729 2010-10-5 18:57 2010-09-14 Show GitHub Exploit DB Packet Storm
257990 1.7 注意 IBM - IBM AIX の sa_snap におけるファイルを削除される脆弱性 CWE-noinfo
情報不足
CVE-2010-3406 2010-10-5 18:57 2010-08-6 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 14, 2026, 4:12 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
248951 9.8 CRITICAL
Network
godoc go_doc_dot_org In Go Doc Dot Org (gddo) through 2018-06-27, an attacker could use specially crafted <go-import> tags in packages being fetched by gddo to cause a directory traversal and remote code execution. CWE-22
Path Traversal
CVE-2018-12976 2024-11-21 12:46 2018-07-6 Show GitHub Exploit DB Packet Storm
248952 9.8 CRITICAL
Network
gnome
canonical
debian
redhat
opensuse
libsoup
ubuntu_linux
debian_linux
enterprise_linux_desktop
enterprise_linux_workstation
enterprise_linux_server
openshift_container_platform
ansible_tower
leap
The get_cookies function in soup-cookie-jar.c in libsoup 2.63.2 allows attackers to have unspecified impact via an empty hostname. CWE-125
Out-of-bounds Read
CVE-2018-12910 2024-11-21 12:46 2018-07-6 Show GitHub Exploit DB Packet Storm
248953 8.1 HIGH
Network
ffmpeg ffmpeg In FFmpeg 4.0.1, due to a missing check for negative values of the mquant variable, the vc1_put_blocks_clamped function in libavcodec/vc1_block.c may trigger an out-of-array access while converting a… CWE-125
Out-of-bounds Read
CVE-2018-13305 2024-11-21 12:46 2018-07-6 Show GitHub Exploit DB Packet Storm
248954 6.5 MEDIUM
Network
ffmpeg ffmpeg In libavcodec in FFmpeg 4.0.1, improper maintenance of the consistency between the context profile field and studio_profile in libavcodec may trigger an assertion failure while converting a crafted A… CWE-617
 Reachable Assertion
CVE-2018-13304 2024-11-21 12:46 2018-07-6 Show GitHub Exploit DB Packet Storm
248955 6.5 MEDIUM
Network
ffmpeg ffmpeg In FFmpeg 4.0.1, a missing check for failure of a call to init_get_bits8() in the avpriv_ac3_parse_header function in libavcodec/ac3_parser.c may trigger a NULL pointer dereference while converting a… CWE-476
 NULL Pointer Dereference
CVE-2018-13303 2024-11-21 12:46 2018-07-6 Show GitHub Exploit DB Packet Storm
248956 8.8 HIGH
Network
ffmpeg
debian
ffmpeg
debian_linux
In FFmpeg 4.0.1, improper handling of frame types (other than EAC3_FRAME_TYPE_INDEPENDENT) that have multiple independent substreams in the handle_eac3 function in libavformat/movenc.c may trigger an… CWE-129
 Improper Validation of Array Index
CVE-2018-13302 2024-11-21 12:46 2018-07-6 Show GitHub Exploit DB Packet Storm
248957 6.5 MEDIUM
Network
ffmpeg ffmpeg In FFmpeg 4.0.1, due to a missing check of a profile value before setting it, the ff_mpeg4_decode_picture_header function in libavcodec/mpeg4videodec.c may trigger a NULL pointer dereference while co… CWE-476
 NULL Pointer Dereference
CVE-2018-13301 2024-11-21 12:46 2018-07-6 Show GitHub Exploit DB Packet Storm
248958 8.1 HIGH
Network
ffmpeg
debian
ffmpeg
debian_linux
In FFmpeg 3.2 and 4.0.1, an improper argument (AVCodecParameters) passed to the avpriv_request_sample function in the handle_eac3 function in libavformat/movenc.c may trigger an out-of-array read whi… CWE-125
Out-of-bounds Read
CVE-2018-13300 2024-11-21 12:46 2018-07-6 Show GitHub Exploit DB Packet Storm
248959 6.1 MEDIUM
Network
entrustdatacard syntera_customization_suite Entrust Datacard Syntera CS 5.x has XSS via the name field of "Domain or Computer Name" in the login page. CWE-79
Cross-site Scripting
CVE-2018-13252 2024-11-21 12:46 2018-07-6 Show GitHub Exploit DB Packet Storm
248960 6.5 MEDIUM
Network
libming libming In libming 0.4.8, there is an excessive memory allocation attempt in the readBytes function of the util/read.c file, related to parseSWF_DEFINEBITSJPEG2. Remote attackers could leverage this vulnerab… CWE-400
 Uncontrolled Resource Consumption
CVE-2018-13251 2024-11-21 12:46 2018-07-5 Show GitHub Exploit DB Packet Storm