Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 9, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
258241	6.4	警告	VMware	-	VMware ACE の ACE 共有フォルダ実装における無効にされた共有フォルダを有効にされる脆弱性	CWE-noinfo 情報不足	CVE-2009-0908	2010-03-23 14:10	2010-04-3	Show	GitHub Exploit DB Packet Storm

258242	2.1	注意	VMware	-	複数の VMware 製品の VI Client におけるパスワードを取得される脆弱性	CWE-200 情報漏えい	CVE-2009-0518	2010-03-23 14:10	2010-04-3	Show	GitHub Exploit DB Packet Storm

258243	4.4	警告	KVM レッドハット	-	KVM の x86 エミュレータにおける権限昇格の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-0419	2010-03-23 14:09	2010-03-1	Show	GitHub Exploit DB Packet Storm

258244	9.3	危険	マイクロソフト	-	複数の Microsoft 製品における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-0263	2010-03-19 10:28	2010-03-9	Show	GitHub Exploit DB Packet Storm

258245	9.3	危険	マイクロソフト	-	複数の Microsoft 製品における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-0262	2010-03-19 10:28	2010-03-9	Show	GitHub Exploit DB Packet Storm

258246	9.3	危険	マイクロソフト	-	複数の Microsoft 製品におけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-0261	2010-03-19 10:28	2010-03-9	Show	GitHub Exploit DB Packet Storm

258247	9.3	危険	マイクロソフト	-	複数の Microsoft 製品におけるヒープベースのバッファオーバーフローの脆弱性	CWE-94 コード・インジェクション	CVE-2010-0260	2010-03-19 10:28	2010-03-9	Show	GitHub Exploit DB Packet Storm

258248	9.3	危険	マイクロソフト	-	複数の Microsoft 製品における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-0258	2010-03-19 10:27	2010-03-9	Show	GitHub Exploit DB Packet Storm

258249	9.3	危険	マイクロソフト	-	複数の Microsoft 製品における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-0264	2010-03-19 10:27	2010-03-9	Show	GitHub Exploit DB Packet Storm

258250	9.3	危険	マイクロソフト	-	Microsoft Office Excel における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-0257	2010-03-19 10:27	2010-03-9	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 9, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
248751	6.5	MEDIUM Network	long_range_zip_project debian	long_range_zip debian_linux	In Long Range Zip (aka lrzip) 0.631, there is a use-after-free in read_stream in stream.c, because decompress_file in lrzip.c lacks certain size validation.	CWE-416 Use After Free	CVE-2018-11496	2024-11-21 12:43	2018-05-27	Show	GitHub Exploit DB Packet Storm

248752	4.9	MEDIUM Network	opencart	opencart	OpenCart through 3.0.2.0 allows directory traversal in the editDownload function in admin\model\catalog\download.php via admin/index.php?route=catalog/download/edit, related to the download_id. For e…	CWE-22 Path Traversal	CVE-2018-11495	2024-11-21 12:43	2018-05-27	Show	GitHub Exploit DB Packet Storm

248753	8.0	HIGH Network	opencart	opencart	The "program extension upload" feature in OpenCart through 3.0.2.0 has a six-step process (upload, install, unzip, move, xml, remove) that allows attackers to execute arbitrary code if the remove ste…	CWE-22 CWE-434 Path Traversal Unrestricted Upload of File with Dangerous Type	CVE-2018-11494	2024-11-21 12:43	2018-05-27	Show	GitHub Exploit DB Packet Storm

248754	8.8	HIGH Network	wuzhicms	wuzhi_cms	An issue was discovered in WUZHI CMS 4.1.0. There is a CSRF vulnerability that can add a friendship link via index.php?m=link&f=index&v=add.	CWE-352 Origin Validation Error	CVE-2018-11493	2024-11-21 12:43	2018-05-27	Show	GitHub Exploit DB Packet Storm

248755	8.8	HIGH Network	sam2p_project giflib_project debian canonical	sam2p giflib debian_linux ubuntu_linux	The DGifDecompressLine function in dgif_lib.c in GIFLIB (possibly version 3.0.x), as later shipped in cgif.c in sam2p 0.49.4, has a heap-based buffer overflow because a certain "Private->RunningCode …	CWE-787 CWE-129 Out-of-bounds Write Improper Validation of Array Index	CVE-2018-11490	2024-11-21 12:43	2018-05-27	Show	GitHub Exploit DB Packet Storm

248756	8.8	HIGH Network	sam2p_project giflib_project	sam2p giflib	The DGifDecompressLine function in dgif_lib.c in GIFLIB (possibly version 3.0.x), as later shipped in cgif.c in sam2p 0.49.4, has a heap-based buffer overflow because a certain CrntCode array index i…	CWE-787 CWE-129 Out-of-bounds Write Improper Validation of Array Index	CVE-2018-11489	2024-11-21 12:43	2018-05-27	Show	GitHub Exploit DB Packet Storm

248757	6.1	MEDIUM Network	phpmywind	phpmywind	PHPMyWind 5.5 has XSS via the cid parameter to newsshow.php, or the query string to news.php or about.php.	CWE-79 Cross-site Scripting	CVE-2018-11487	2024-11-21 12:43	2018-05-27	Show	GitHub Exploit DB Packet Storm

248758	8.0	HIGH Network	monstra	monstra	Monstra CMS 3.0.4 has a Session Management Issue in the Users tab. A password change at users/1/edit does not invalidate a session that is open in a different browser.	CWE-384 Session Fixation	CVE-2018-11475	2024-11-21 12:43	2018-05-26	Show	GitHub Exploit DB Packet Storm

248759	8.0	HIGH Network	monstra	monstra	Monstra CMS 3.0.4 has a Session Management Issue in the Administrations Tab. A password change at admin/index.php?id=users&action=edit&user_id=1 does not invalidate a session that is open in a differ…	CWE-384 Session Fixation	CVE-2018-11474	2024-11-21 12:43	2018-05-26	Show	GitHub Exploit DB Packet Storm

248760	7.8	HIGH Local	windscribe	windscribe	The VPN component in Windscribe 1.81 uses the OpenVPN client for connections. Also, it creates a WindScribeService.exe system process that establishes a \\.\pipe\WindscribeService named pipe endpoint…	CWE-20 Improper Input Validation	CVE-2018-11479	2024-11-21 12:43	2018-05-26	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed