Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 25, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
258041	6.9	警告	Gentoo Linux レッドハット	-	logrotate の shred_file 関数における任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2011-1154	2011-04-27 11:40	2011-03-30	Show	GitHub Exploit DB Packet Storm

258042	1.9	注意	Gentoo Linux レッドハット	-	logrotate の createOutputFile 関数におけるログデータを閲覧される脆弱性	CWE-362 競合状態	CVE-2011-1098	2011-04-27 11:39	2011-03-30	Show	GitHub Exploit DB Packet Storm

258043	6.9	警告	サイバートラスト株式会社 libvirt.org レッドハット	-	複数のレッドハット製品などで利用される libvirt の libvirt.c における任意のコードを実行される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-1146	2011-04-27 11:34	2011-02-17	Show	GitHub Exploit DB Packet Storm

258044	5.1	警告	rsync.samba.org レッドハット	-	rsync における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2011-1097	2011-04-27 11:32	2011-03-26	Show	GitHub Exploit DB Packet Storm

258045	6.9	警告	GNOME Project レッドハット	-	GNOME Display Manager におけるファイルの所有権を変更される脆弱性	CWE-59 リンク解釈の問題	CVE-2011-0727	2011-04-27 11:31	2011-03-28	Show	GitHub Exploit DB Packet Storm

258046	7.5	危険	レッドハット	-	Plone における管理者のアクセス権限を取得される脆弱性	CWE-noinfo 情報不足	CVE-2011-0720	2011-04-27 11:30	2011-02-3	Show	GitHub Exploit DB Packet Storm

258047	7.5	危険	CA Technologies	-	複数の CA 製品の mng_core_com.dll におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-3984	2011-04-27 11:29	2010-12-9	Show	GitHub Exploit DB Packet Storm

258048	2.1	注意	freedesktop.org サイバートラスト株式会社レッドハット	-	D-Bus におけるサービス運用妨害 (デーモンクラッシュ) の脆弱性	CWE-399 リソース管理の問題	CVE-2010-4352	2011-04-27 11:26	2010-12-30	Show	GitHub Exploit DB Packet Storm

258049	-	-	foolabs	-	Foolabs Xpdf にサービス運用妨害 (DoS) の脆弱性	-	-	2011-04-26 12:35	2011-03-22	Show	GitHub Exploit DB Packet Storm

258050	4.3	警告	サイバートラスト株式会社 Wireshark レッドハット	-	Wireshark におけるサービス運用妨害 (メモリ消費) の脆弱性	CWE-399 リソース管理の問題	CVE-2011-1141	2011-04-26 12:28	2011-02-28	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 25, 2026, 4:04 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
246581	7.5	HIGH Network	ptc	thingworx_platform	An issue was discovered in PTC ThingWorx Platform 6.5 through 8.2. There is a hardcoded encryption key.	CWE-798 Use of Hard-coded Credentials	CVE-2018-17217	2024-11-21 12:54	2018-10-1	Show	GitHub Exploit DB Packet Storm

246582	6.5	MEDIUM Network	ptc	thingworx_platform	An issue was discovered in PTC ThingWorx Platform 6.5 through 8.2. There is password hash exposure to privileged users.	CWE-200 Information Exposure	CVE-2018-17216	2024-11-21 12:54	2018-10-1	Show	GitHub Exploit DB Packet Storm

246583	6.5	MEDIUM Network	zzcms	zzcms	An issue was discovered in zzcms 8.3. user/zssave.php allows remote attackers to delete arbitrary files via directory traversal sequences in the oldimg parameter in an action=modify request. This can…	CWE-22 Path Traversal	CVE-2018-17797	2024-11-21 12:54	2018-10-1	Show	GitHub Exploit DB Packet Storm

246584	9.8	CRITICAL Network	mushroom_content_management_system_project	mushroom_content_management_system	An issue was discovered in MRCMS (aka mushroom) through 3.1.2. The WebParam.java file directly accepts the FIELD_T parameter in a request and uses it as a hash of SQL statements without filtering, re…	CWE-89 SQL Injection	CVE-2018-17796	2024-11-21 12:54	2018-10-1	Show	GitHub Exploit DB Packet Storm

246585	8.8	HIGH Network	libtiff	libtiff	The function t2p_write_pdf in tiff2pdf.c in LibTIFF 4.0.9 and earlier allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecif…	CWE-787 Out-of-bounds Write	CVE-2018-17795	2024-11-21 12:54	2018-10-1	Show	GitHub Exploit DB Packet Storm

246586	6.5	MEDIUM Network	gnu	binutils	An issue was discovered in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.31. There is a NULL pointer dereference in work_stuff_copy_to_from when called from iterate_demangle_function.	CWE-476 NULL Pointer Dereference	CVE-2018-17794	2024-11-21 12:54	2018-10-1	Show	GitHub Exploit DB Packet Storm

246587	7.5	HIGH Network	blynk	blynk-server	In blynk-server in Blynk before 0.39.7, Directory Traversal exists via a ../ in a URI that has /static or /static/js at the beginning, as demonstrated by reading the /etc/passwd file.	CWE-22 Path Traversal	CVE-2018-17785	2024-11-21 12:54	2018-10-1	Show	GitHub Exploit DB Packet Storm

246588	6.5	MEDIUM Network	telegram	telegram_desktop telegram_messenger	Telegram Desktop (aka tdesktop) 1.3.14, and Telegram 3.3.0.0 WP8.1 on Windows, leaks end-user public and private IP addresses during a call because of an unsafe default behavior in which P2P connecti…	CWE-200 Information Exposure	CVE-2018-17780	2024-11-21 12:54	2018-09-30	Show	GitHub Exploit DB Packet Storm

246589	7.5	HIGH Network	foxitsoftware	phantompdf reader	Foxit PhantomPDF and Reader before 9.3 allow remote attackers to trigger Uninitialized Object Information Disclosure because creation of ArrayBuffer and DataView objects is mishandled.	CWE-200 Information Exposure	CVE-2018-17781	2024-11-21 12:54	2018-09-30	Show	GitHub Exploit DB Packet Storm

246590	7.8	HIGH Local	pcprotect	antivirus	PCProtect Anti-Virus v4.8.35 has "Everyone: (F)" permission for %PROGRAMFILES(X86)%\PCProtect, which allows local users to gain privileges by replacing an executable file with a Trojan horse.	CWE-732 Incorrect Permission Assignment for Critical Resource	CVE-2018-17776	2024-11-21 12:54	2018-09-29	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed