Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 20, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
258141	9.3	危険	マイクロソフト	-	複数の Microsoft 製品における整数アンダーフローの脆弱性	CWE-189 数値処理の問題	CVE-2010-2573	2010-12-6 16:30	2010-11-9	Show	GitHub Exploit DB Packet Storm

258142	9.3	危険	マイクロソフト	-	Microsoft Office における権限昇格の脆弱性	CWE-Other その他	CVE-2010-3337	2010-12-6 15:44	2010-08-23	Show	GitHub Exploit DB Packet Storm

258143	9.3	危険	マイクロソフト	-	複数の Microsoft 製品における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-3335	2010-12-6 15:36	2010-11-9	Show	GitHub Exploit DB Packet Storm

258144	9.3	危険	マイクロソフト	-	複数の Microsoft 製品における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-3334	2010-12-6 15:30	2010-11-9	Show	GitHub Exploit DB Packet Storm

258145	4.3	警告	Zope Foundation	-	Zope Object Database の ZEO/StorageServer.py におけるサービス運用妨害 (DoS) の脆弱性	CWE-362 競合状態	CVE-2010-3495	2010-12-6 15:20	2010-10-19	Show	GitHub Exploit DB Packet Storm

258146	4.3	警告	マイクロソフト	-	複数の Microsoft 製品の toStaticHTML 関数および SafeHTML 関数におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-3324	2010-12-3 14:05	2010-10-12	Show	GitHub Exploit DB Packet Storm

258147	6.8	警告	アップル	-	Apple Mac OS X の xar におけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-3798	2010-12-3 13:13	2010-11-16	Show	GitHub Exploit DB Packet Storm

258148	3.5	注意	アップル	-	Apple Mac OS X の Wiki サーバにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-3797	2010-12-3 13:12	2010-11-16	Show	GitHub Exploit DB Packet Storm

258149	4.3	警告	アップル	-	Apple Mac OS X の Safari RSS における重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2010-3796	2010-12-3 13:10	2010-11-16	Show	GitHub Exploit DB Packet Storm

258150	6	警告	PostgreSQL.org サイバートラスト株式会社ターボリナックスレッドハット	-	PostgreSQL の PL/perl および PL/Tcl 実装における権限を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-3433	2010-12-2 17:11	2010-10-4	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 21, 2026, 4:01 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
249731	8.8	HIGH Network	wordpress debian	wordpress debian_linux	WordPress through 4.9.6 allows Author users to execute arbitrary code by leveraging directory traversal in the wp-admin/post.php thumb parameter, which is passed to the PHP unlink function and can de…	CWE-22 Path Traversal	CVE-2018-12895	2024-11-21 12:46	2018-06-27	Show	GitHub Exploit DB Packet Storm

249732	9.8	CRITICAL Network	ccn-lite	ccn-lite	An issue was discovered in CCN-lite 2.0.1. There is a heap-based buffer overflow in mkAddToRelayCacheRequest and in ccnl_populate_cache for an array lacking '\0' termination when reading a binary CCN…	CWE-787 Out-of-bounds Write	CVE-2018-12889	2024-11-21 12:46	2018-06-26	Show	GitHub Exploit DB Packet Storm

249733	6.5	MEDIUM Network	octopus	octopus_deploy	In Octopus Deploy 3.0 onwards (before 2018.6.7), an authenticated user with incorrect permissions may be able to create Accounts under the Infrastructure menu.	CWE-269 Improper Privilege Management	CVE-2018-12884	2024-11-21 12:46	2018-06-26	Show	GitHub Exploit DB Packet Storm

249734	9.8	CRITICAL Network	php canonical netapp	php ubuntu_linux storage_automation_store	exif_read_from_impl in ext/exif/exif.c in PHP 7.2.x through 7.2.7 allows attackers to trigger a use-after-free (in exif_read_from_file) because it closes a stream that it is not responsible for closi…	CWE-416 Use After Free	CVE-2018-12882	2024-11-21 12:46	2018-06-26	Show	GitHub Exploit DB Packet Storm

249735	5.4	MEDIUM Network	opensuse	open_build_service	A Externally Controlled Reference to a Resource in Another Sphere vulnerability in obs-service-download_files of openSUSE Open Build Service allows authenticated users to generate HTTP request agains…	-	CVE-2018-12475	2024-11-21 12:45	2020-09-1	Show	GitHub Exploit DB Packet Storm

249736	8.8	HIGH Network	mozilla	firefox thunderbird firefox_esr	An integer overflow vulnerability in the Skia library when allocating memory for edge builders on some systems with at least 16 GB of RAM. This results in the use of uninitialized memory, resulting i…	CWE-190 Integer Overflow or Wraparound	CVE-2018-12371	2024-11-21 12:45	2020-07-9	Show	GitHub Exploit DB Packet Storm

249737	7.5	HIGH Network	suse	obs-service-tar_scm	Relative Path Traversal vulnerability in obs-service-tar_scm of SUSE Linux Enterprise Server 15; openSUSE Factory allows remote attackers with control over a repository to overwrite files on the mach…	CWE-22 Path Traversal	CVE-2018-12476	2024-11-21 12:45	2020-01-27	Show	GitHub Exploit DB Packet Storm

249738	6.5	MEDIUM Network	arista	cloudvision_portal	Arista CloudVision Portal through 2018.1.1 has Incorrect Permissions.	CWE-732 Incorrect Permission Assignment for Critical Resource	CVE-2018-12357	2024-11-21 12:45	2019-08-16	Show	GitHub Exploit DB Packet Storm

249739	8.8	HIGH Network	eventum_project	eventum	An issue was discovered in Eventum 3.5.0. CSRF in htdocs/manage/users.php allows creating another user with admin privileges.	CWE-352 Origin Validation Error	CVE-2018-12628	2024-11-21 12:45	2019-07-10	Show	GitHub Exploit DB Packet Storm

249740	6.1	MEDIUM Network	eventum_project	eventum	An issue was discovered in Eventum 3.5.0. /htdocs/list.php has XSS via the show_notification_list_issues or show_authorized_issues parameter.	CWE-79 Cross-site Scripting	CVE-2018-12627	2024-11-21 12:45	2019-07-10	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed