Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 13, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
258271 10 危険 シマンテック
IBM		 - Autonomy KeyView Filter SDK の kvolefio.dll における整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2009-3032 2010-08-19 18:22 2010-03-5 Show GitHub Exploit DB Packet Storm
258272 5 警告 The PHP Group - PHP の phar 拡張における重要な情報を取得される脆弱性 CWE-134
書式文字列の問題 		CVE-2010-2094 2010-08-18 18:26 2010-05-14 Show GitHub Exploit DB Packet Storm
258273 7.5 危険 The PHP Group - PHP の sqlite_single_query および sqlite_array_query 関数における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2010-1868 2010-08-18 18:26 2010-05-7 Show GitHub Exploit DB Packet Storm
258274 7.5 危険 The PHP Group - PHP の dechunk フィルタにおけるサービス運用妨害 (DoS) の脆弱性 CWE-189
数値処理の問題 		CVE-2010-1866 2010-08-18 18:26 2010-05-2 Show GitHub Exploit DB Packet Storm
258275 5 警告 The PHP Group - PHP の chunk_split 関数における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2010-1862 2010-08-18 18:25 2010-05-4 Show GitHub Exploit DB Packet Storm
258276 5 警告 The PHP Group - PHP の addcslashes 関数における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2010-1864 2010-08-17 17:37 2010-05-3 Show GitHub Exploit DB Packet Storm
258277 5 警告 The PHP Group - PHP における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2010-2190 2010-08-17 17:36 2010-05-30 Show GitHub Exploit DB Packet Storm
258278 6.4 警告 The PHP Group - PHP における重要な情報を取得される脆弱性 CWE-119
バッファエラー 		CVE-2010-2191 2010-08-17 17:35 2010-05-31 Show GitHub Exploit DB Packet Storm
258279 5 警告 The PHP Group - PHP の Zend Engine における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2010-1914 2010-08-17 17:34 2010-05-8 Show GitHub Exploit DB Packet Storm
258280 6.4 警告 The PHP Group - PHP の sysvshm 拡張における任意のメモリアドレスを書かれる脆弱性 CWE-399
リソース管理の問題 		CVE-2010-1861 2010-08-17 17:33 2010-05-5 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 13, 2026, 4:20 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
246001 4.9 MEDIUM
Network 		openvswitch
redhat
canonical
debian 		openvswitch
openstack
ubuntu_linux
debian_linux 		An issue was discovered in Open vSwitch (OvS) 2.7.x through 2.7.6. The decode_bundle function inside lib/ofp-actions.c is affected by a buffer over-read issue during BUNDLE action decoding. CWE-125
Out-of-bounds Read 		CVE-2018-17206 2024-11-21 12:54 2018-09-20 Show GitHub Exploit DB Packet Storm
246002 7.5 HIGH
Network 		openvswitch
redhat
canonical 		openvswitch
openstack
ubuntu_linux 		An issue was discovered in Open vSwitch (OvS) 2.7.x through 2.7.6, affecting ofproto_rule_insert__ in ofproto/ofproto.c. During bundle commit, flows that are added in a bundle are applied to ofproto … CWE-617
 Reachable Assertion 		CVE-2018-17205 2024-11-21 12:54 2018-09-20 Show GitHub Exploit DB Packet Storm
246003 4.3 MEDIUM
Network 		openvswitch
redhat
canonical
debian 		openvswitch
openstack
ubuntu_linux
debian_linux 		An issue was discovered in Open vSwitch (OvS) 2.7.x through 2.7.6, affecting parse_group_prop_ntr_selection_method in lib/ofp-util.c. When decoding a group mod, it validates the group type and comman… CWE-617
 Reachable Assertion 		CVE-2018-17204 2024-11-21 12:54 2018-09-20 Show GitHub Exploit DB Packet Storm
246004 7.8 HIGH
Local 		debian
canonical
artifex
redhat 		debian_linux
ubuntu_linux
ghostscript
enterprise_linux_desktop
enterprise_linux_workstation
enterprise_linux_server
enterprise_linux_server_tus
enterprise_linux_server_eus
ent… 		Artifex Ghostscript before 9.25 allowed a user-writable error exception table, which could be used by remote attackers able to supply crafted PostScript to potentially overwrite or replace error hand… NVD-CWE-noinfo
CVE-2018-17183 2024-11-21 12:54 2018-09-20 Show GitHub Exploit DB Packet Storm
246005 7.8 HIGH
Local 		linux
canonical
debian
netapp 		linux_kernel
ubuntu_linux
debian_linux
element_software
active_iq_performance_analytics_services 		An issue was discovered in the Linux kernel through 4.18.8. The vmacache_flush_all function in mm/vmacache.c mishandles sequence number overflows. An attacker can trigger a use-after-free (and possib… CWE-416
 Use After Free 		CVE-2018-17182 2024-11-21 12:54 2018-09-19 Show GitHub Exploit DB Packet Storm
246006 5.3 MEDIUM
Adjacent 		neatorobotics botvac_d4_connected_firmware
botvac_d6_connected_firmware
botvac_d5_connected_firmware
botvac_d7_connected_firmware
botvac_d3_connected_firmware 		An issue was discovered on Neato Botvac Connected 2.2.0 devices. They execute unauthenticated manual drive commands (sent to /bin/webserver on port 8081) if they already have an active session. Comma… NVD-CWE-noinfo
CVE-2018-17178 2024-11-21 12:54 2018-09-19 Show GitHub Exploit DB Packet Storm
246007 2.4 LOW
Physics 		neatorobotics botvac_d4_connected_firmware
botvac_d6_connected_firmware
botvac_d5_connected_firmware
botvac_d7_connected_firmware
botvac_d3_connected_firmware
botvac_85_firmware 		An issue was discovered on Neato Botvac Connected 2.2.0 and Botvac 85 1.2.1 devices. Static encryption is used for the copying of so-called "black box" logs (event logs and core dumps) to a USB stick… CWE-326
Inadequate Encryption Strength 		CVE-2018-17177 2024-11-21 12:54 2018-09-19 Show GitHub Exploit DB Packet Storm
246008 7.5 HIGH
Network 		neatorobotics botvac_d4_connected_firmware
botvac_d6_connected_firmware
botvac_d7_connected_firmware 		A replay issue was discovered on Neato Botvac Connected 2.2.0 devices. Manual control mode requires authentication, but once recorded, the authentication (always transmitted in cleartext) can be repl… CWE-294
Authentication Bypass by Capture-replay  		CVE-2018-17176 2024-11-21 12:54 2018-09-19 Show GitHub Exploit DB Packet Storm
246009 5.3 MEDIUM
Network 		marshmallow_project marshmallow In the marshmallow library before 2.15.1 and 3.x before 3.0.0b9 for Python, the schema "only" option treats an empty list as implying no "only" option, which allows a request that was intended to exp… NVD-CWE-noinfo
CVE-2018-17175 2024-11-21 12:54 2018-09-19 Show GitHub Exploit DB Packet Storm
246010 8.8 HIGH
Network 		abus tvip_10000_firmware
tvip_10001_firmware
tvip_10005_firmware
tvip_10005a_firmware
tvip_10005b_firmware
tvip_10050_firmware
tvip_10051_firmware
tvip_10055a_firmware
tvip_10055b_… 		An issue was discovered on certain ABUS TVIP devices. Due to a path traversal in /opt/cgi/admin/filewrite, an attacker can write to files, and thus execute code arbitrarily with root privileges. CWE-22
Path Traversal 		CVE-2018-16739 2024-11-21 12:53 2023-10-27 Show GitHub Exploit DB Packet Storm