Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 13, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
258201	6.6	警告	マイクロソフト	-	Microsoft Windows の win32k.sys 内にある Windows カーネルモードドライバにおける権限を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-1894	2010-09-2 14:04	2010-08-10	Show	GitHub Exploit DB Packet Storm

258202	4.4	警告	マイクロソフト	-	Microsoft Windows の win32k.sys 内にある Windows カーネルモードドライバにおけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2010-1887	2010-09-2 14:04	2010-08-10	Show	GitHub Exploit DB Packet Storm

258203	4.6	警告	マイクロソフト	-	Microsoft Windows のカーネルにおけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2010-1890	2010-09-1 15:19	2010-08-10	Show	GitHub Exploit DB Packet Storm

258204	9.3	危険	マイクロソフト	-	Microsoft Windows の Cinepak コーデックにおける任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-2553	2010-09-1 15:19	2010-08-10	Show	GitHub Exploit DB Packet Storm

258205	7.8	危険	マイクロソフト	-	Microsoft Windows の SMB サーバーにおけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2010-2552	2010-09-1 15:19	2010-08-10	Show	GitHub Exploit DB Packet Storm

258206	7.8	危険	マイクロソフト	-	Microsoft Windows の SMB サーバーにおけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2010-2551	2010-09-1 15:19	2010-08-10	Show	GitHub Exploit DB Packet Storm

258207	10	危険	マイクロソフト	-	Microsoft Windows の SMB サーバーにおける任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2010-2550	2010-09-1 15:17	2010-08-10	Show	GitHub Exploit DB Packet Storm

258208	9.3	危険	マイクロソフト	-	Microsoft Office Word および Office Word Viewe における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-1903	2010-09-1 15:17	2010-08-10	Show	GitHub Exploit DB Packet Storm

258209	9.3	危険	マイクロソフト	-	複数の Microsoft Office 製品におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-1902	2010-09-1 15:17	2010-08-10	Show	GitHub Exploit DB Packet Storm

258210	9.3	危険	マイクロソフト	-	複数の Microsoft Office 製品における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-1901	2010-09-1 15:17	2010-08-10	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 13, 2026, 4:20 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
249481	6.1	MEDIUM Network	seagate	nas_os	Missing HTTPOnly flag on session cookies in the Seagate NAS OS version 4.3.15.1 web application allows attackers to steal session tokens via cross-site scripting.	CWE-79 Cross-site Scripting	CVE-2018-12302	2024-11-21 12:44	2019-05-13	Show	GitHub Exploit DB Packet Storm

249482	7.5	HIGH Network	seagate	nas_os	Unvalidated URL in Download Manager in Seagate NAS OS version 4.3.15.1 allows attackers to access the loopback interface via a Download URL of 127.0.0.1 or localhost.	CWE-200 Information Exposure	CVE-2018-12301	2024-11-21 12:44	2019-05-13	Show	GitHub Exploit DB Packet Storm

249483	6.1	MEDIUM Network	seagate	nas_os	Arbitrary Redirect in echo-server.html in Seagate NAS OS version 4.3.15.1 allows attackers to disclose information in the Referer header via the 'state' URL parameter.	CWE-601 Open Redirect	CVE-2018-12300	2024-11-21 12:44	2019-05-13	Show	GitHub Exploit DB Packet Storm

249484	5.4	MEDIUM Network	seagate	nas_os	Cross-site scripting in filebrowser in Seagate NAS OS version 4.3.15.1 allows attackers to execute JavaScript via uploaded file names.	CWE-79 Cross-site Scripting	CVE-2018-12299	2024-11-21 12:44	2019-05-13	Show	GitHub Exploit DB Packet Storm

249485	7.5	HIGH Network	seagate	nas_os	Directory Traversal in filebrowser in Seagate NAS OS 4.3.15.1 allows attackers to read files within the application's container via a URL path.	CWE-22 Path Traversal	CVE-2018-12298	2024-11-21 12:44	2019-05-13	Show	GitHub Exploit DB Packet Storm

249486	6.1	MEDIUM Network	seagate	nas_os	Cross-site scripting in API error pages in Seagate NAS OS version 4.3.15.1 allows attackers to execute JavaScript via URL path names.	CWE-79 Cross-site Scripting	CVE-2018-12297	2024-11-21 12:44	2019-05-13	Show	GitHub Exploit DB Packet Storm

249487	7.5	HIGH Network	seagate	nas_os	Insufficient access control in /api/external/7.0/system.System.get_infos in Seagate NAS OS version 4.3.15.1 allows attackers to obtain information about the NAS without authentication via empty POST …	CWE-732 Incorrect Permission Assignment for Critical Resource	CVE-2018-12296	2024-11-21 12:44	2019-05-13	Show	GitHub Exploit DB Packet Storm

249488	9.8	CRITICAL Network	seagate	nas_os	SQL injection in folderViewSpecific.psp in Seagate NAS OS version 4.3.15.1 allows attackers to execute arbitrary SQL commands via the dirId URL parameter.	CWE-89 SQL Injection	CVE-2018-12295	2024-11-21 12:44	2019-05-13	Show	GitHub Exploit DB Packet Storm

249489	6.3	MEDIUM Network	symantec	endpoint_protection	SEP (Mac client) prior to and including 12.1 RU6 MP9 and prior to 14.2 RU1 may be susceptible to a CSV/DDE injection (also known as formula injection) vulnerability, which is a type of issue whereby …	CWE-1236 Improper Neutralization of Formula Elements in a CSV File	CVE-2018-12244	2024-11-21 12:44	2019-04-26	Show	GitHub Exploit DB Packet Storm

249490	5.5	MEDIUM Local	qualcomm	mdm9206_firmware mdm9607_firmware mdm9650_firmware mdm9655_firmware qcs605_firmware sd_410_firmware sd_412_firmware sd_615_firmware sd_616_firmware sd_415_firmware sd_63…	Interrupt exit code flow may undermine access control policy set forth by secure world can lead to potential secure asset leakage in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electroni…	CWE-200 Information Exposure	CVE-2018-11971	2024-11-21 12:44	2019-04-5	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed