Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 10, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
258251	9.3	危険	アドビシステムズレッドハット	-	Adobe Reader および Acrobat の custom heap management system におけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-1241	2010-04-30 10:26	2010-04-5	Show	GitHub Exploit DB Packet Storm

258252	9.3	危険	アドビシステムズレッドハット	-	Adobe Reader および Acrobat における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-0204	2010-04-30 10:26	2010-04-13	Show	GitHub Exploit DB Packet Storm

258253	9.3	危険	アドビシステムズレッドハット	-	Adobe Reader および Acrobat におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-0203	2010-04-30 10:25	2010-04-13	Show	GitHub Exploit DB Packet Storm

258254	9.3	危険	アドビシステムズレッドハット	-	Adobe Reader および Acrobat におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-0202	2010-04-30 10:25	2010-04-13	Show	GitHub Exploit DB Packet Storm

258255	9.3	危険	アドビシステムズレッドハット	-	Adobe Reader および Acrobat における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-0201	2010-04-30 10:25	2010-04-13	Show	GitHub Exploit DB Packet Storm

258256	9.3	危険	アドビシステムズレッドハット	-	Adobe Reader および Acrobat におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-0199	2010-04-30 10:25	2010-04-13	Show	GitHub Exploit DB Packet Storm

258257	9.3	危険	アドビシステムズレッドハット	-	Adobe Reader および Acrobat におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-0198	2010-04-30 10:24	2010-04-13	Show	GitHub Exploit DB Packet Storm

258258	9.3	危険	アドビシステムズレッドハット	-	Adobe Reader および Acrobat における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-0197	2010-04-28 15:58	2010-04-13	Show	GitHub Exploit DB Packet Storm

258259	9.3	危険	アドビシステムズレッドハット	-	Adobe Reader および Acrobat における任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2010-0196	2010-04-28 15:57	2010-04-13	Show	GitHub Exploit DB Packet Storm

258260	9.3	危険	アドビシステムズレッドハット	-	Adobe Reader および Acrobat における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-0195	2010-04-28 15:57	2010-04-13	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 10, 2026, 5 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
249811	6.1	MEDIUM Network	halo	halo	ruibaby Halo 0.0.2 has stored XSS via the loginName and loginPwd parameters in a failed login attempt to AdminController.java.	CWE-79 Cross-site Scripting	CVE-2018-11012	2024-11-21 12:42	2018-05-12	Show	GitHub Exploit DB Packet Storm

249812	6.1	MEDIUM Network	halo	halo	ruibaby Halo 0.0.2 has stored XSS via the commentAuthor field to FrontCommentController.java.	CWE-79 Cross-site Scripting	CVE-2018-11011	2024-11-21 12:42	2018-05-12	Show	GitHub Exploit DB Packet Storm

249813	8.8	HIGH Network	sdcms	sdcms	An issue was discovered in SDcms v1.5. Cross-site request forgery (CSRF) vulnerability in /WWW//app/admin/controller/admincontroller.php allows remote attackers to add administrator accounts via m=ad…	CWE-352 Origin Validation Error	CVE-2018-11004	2024-11-21 12:42	2018-05-12	Show	GitHub Exploit DB Packet Storm

249814	6.5	MEDIUM Network	yxcms	yxcms	An issue was discovered in YXcms 1.4.7. Cross-site request forgery (CSRF) vulnerability in protected/apps/admin/controller/adminController.php allows remote attackers to delete administrator accounts…	CWE-352 Origin Validation Error	CVE-2018-11003	2024-11-21 12:42	2018-05-12	Show	GitHub Exploit DB Packet Storm

249815	6.5	MEDIUM Network	exiv2 debian canonical	exiv2 debian_linux ubuntu_linux	An issue was discovered in Exiv2 0.26. The Exiv2::Internal::PngChunk::parseTXTChunk function has a heap-based buffer over-read.	CWE-125 Out-of-bounds Read	CVE-2018-10999	2024-11-21 12:42	2018-05-12	Show	GitHub Exploit DB Packet Storm

249816	6.5	MEDIUM Network	exiv2 canonical debian redhat	exiv2 ubuntu_linux debian_linux enterprise_linux_desktop enterprise_linux_workstation enterprise_linux_server	An issue was discovered in Exiv2 0.26. readMetadata in jp2image.cpp allows remote attackers to cause a denial of service (SIGABRT) by triggering an incorrect Safe::add call.	NVD-CWE-noinfo	CVE-2018-10998	2024-11-21 12:42	2018-05-12	Show	GitHub Exploit DB Packet Storm

249817	9.8	CRITICAL Network	d-link	dir-629-b_firmware	The weblogin_log function in /htdocs/cgibin on D-Link DIR-629-B1 devices allows attackers to execute arbitrary code or cause a denial of service (buffer overflow) via a session.cgi?ACTION=logout requ…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2018-10996	2024-11-21 12:42	2018-05-12	Show	GitHub Exploit DB Packet Storm

249818	9.8	CRITICAL Network	lilypond	lilypond	lilypond-invoke-editor in LilyPond 2.19.80 does not validate strings before launching the program specified by the BROWSER environment variable, which allows remote attackers to conduct argument-inje…	CWE-88 Argument Injection	CVE-2018-10992	2024-11-21 12:42	2018-05-12	Show	GitHub Exploit DB Packet Storm

249819	5.5	MEDIUM Local	modbuspal_project	modbuspal	ModbusPal 1.6b is vulnerable to an XML External Entity (XXE) attack. Projects are saved as .xmpp files and automations can be exported as .xmpa files, both XML-based, which are vulnerable to XXE inje…	CWE-611 XXE	CVE-2018-10832	2024-11-21 12:42	2018-05-12	Show	GitHub Exploit DB Packet Storm

249820	8.8	HIGH Local	xen debian	xen debian_linux	An issue was discovered in Xen through 4.10.x allowing x86 HVM guest OS users to cause a denial of service (unexpectedly high interrupt number, array overrun, and hypervisor crash) or possibly gain h…	NVD-CWE-noinfo	CVE-2018-10982	2024-11-21 12:42	2018-05-11	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed