Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 12, 2026, 12:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
258201	4.3	警告	アップル	-	Apple Safari の WebKit におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-1390	2010-07-13 16:37	2010-06-10	Show	GitHub Exploit DB Packet Storm

258202	4.3	警告	アップル	-	Apple Safari の WebKit におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-1389	2010-07-13 16:36	2010-06-10	Show	GitHub Exploit DB Packet Storm

258203	9.3	危険	アップル	-	Apple Safari の WebKit における任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2010-0054	2010-07-13 16:36	2010-03-15	Show	GitHub Exploit DB Packet Storm

258204	9.3	危険	アップル	-	Apple Safari の WebKit における任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2010-0053	2010-07-13 16:35	2010-03-15	Show	GitHub Exploit DB Packet Storm

258205	9.3	危険	アップル	-	Apple Safari の WebKit における任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2010-0052	2010-07-13 16:35	2010-03-15	Show	GitHub Exploit DB Packet Storm

258206	9.3	危険	アップル	-	Apple Safari の WebKit における任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2010-0050	2010-07-13 16:34	2010-03-15	Show	GitHub Exploit DB Packet Storm

258207	9.3	危険	アップル	-	Apple Safari の WebKit における任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2010-0049	2010-07-13 16:33	2010-03-15	Show	GitHub Exploit DB Packet Storm

258208	9.3	危険	アップル	-	Apple Safari の WebKit における任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2010-0048	2010-07-13 16:33	2010-03-15	Show	GitHub Exploit DB Packet Storm

258209	9.3	危険	アップル	-	Apple Safari の WebKit における任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2010-0047	2010-07-13 16:31	2010-03-15	Show	GitHub Exploit DB Packet Storm

258210	9.3	危険	アップル	-	Apple Safari の Cascading Style Sheet 実装における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-0046	2010-07-13 16:30	2010-03-15	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 12, 2026, 4:20 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
250331	7.8	HIGH Local	xpdfreader	xpdf	The DCTStream::readHuffSym function in Stream.cc in the DCT decoder in xpdf before 4.00 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other imp…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2018-11033	2024-11-21 12:42	2018-05-14	Show	GitHub Exploit DB Packet Storm

250332	9.8	CRITICAL Network	gouguoyin	phprap	PHPRAP 1.0.4 through 1.0.8 has SQL Injection via the application/home/controller/project.php search() function.	CWE-89 SQL Injection	CVE-2018-11032	2024-11-21 12:42	2018-05-14	Show	GitHub Exploit DB Packet Storm

250333	9.8	CRITICAL Network	gouguoyin	phprap	application/home/controller/debug.php in PHPRAP 1.0.4 through 1.0.8 has SSRF via the /debug URI, as demonstrated by an api[url]=file:////etc/passwd&api[method]=get POST request.	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2018-11031	2024-11-21 12:42	2018-05-14	Show	GitHub Exploit DB Packet Storm

250334	8.8	HIGH Network	pbootcms	pbootcms	An issue was discovered in PbootCMS v1.0.7. Cross-site request forgery (CSRF) vulnerability in apps/admin/controller/system/RoleController.php allows remote attackers to add administrator accounts vi…	CWE-352 Origin Validation Error	CVE-2018-11018	2024-11-21 12:42	2018-05-14	Show	GitHub Exploit DB Packet Storm

250335	8.8	HIGH Network	libming	libming	The newVar_N function in decompile.c in libming through 0.4.8 mishandles cases where the header indicates a file size greater than the actual size, which allows remote attackers to cause a denial of …	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2018-11017	2024-11-21 12:42	2018-05-14	Show	GitHub Exploit DB Packet Storm

250336	9.8	CRITICAL Network	d-link	dir-816_a2_firmware	Stack-based buffer overflow in the websRedirect function in GoAhead on D-Link DIR-816 A2 (CN) routers with firmware version 1.10B05 allows unauthenticated remote attackers to execute arbitrary code v…	CWE-787 Out-of-bounds Write	CVE-2018-11013	2024-11-21 12:42	2018-05-14	Show	GitHub Exploit DB Packet Storm

250337	6.1	MEDIUM Network	halo	halo	ruibaby Halo 0.0.2 has stored XSS via the loginName and loginPwd parameters in a failed login attempt to AdminController.java.	CWE-79 Cross-site Scripting	CVE-2018-11012	2024-11-21 12:42	2018-05-12	Show	GitHub Exploit DB Packet Storm

250338	6.1	MEDIUM Network	halo	halo	ruibaby Halo 0.0.2 has stored XSS via the commentAuthor field to FrontCommentController.java.	CWE-79 Cross-site Scripting	CVE-2018-11011	2024-11-21 12:42	2018-05-12	Show	GitHub Exploit DB Packet Storm

250339	8.8	HIGH Network	sdcms	sdcms	An issue was discovered in SDcms v1.5. Cross-site request forgery (CSRF) vulnerability in /WWW//app/admin/controller/admincontroller.php allows remote attackers to add administrator accounts via m=ad…	CWE-352 Origin Validation Error	CVE-2018-11004	2024-11-21 12:42	2018-05-12	Show	GitHub Exploit DB Packet Storm

250340	6.5	MEDIUM Network	yxcms	yxcms	An issue was discovered in YXcms 1.4.7. Cross-site request forgery (CSRF) vulnerability in protected/apps/admin/controller/adminController.php allows remote attackers to delete administrator accounts…	CWE-352 Origin Validation Error	CVE-2018-11003	2024-11-21 12:42	2018-05-12	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed