Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 11, 2026, 6:13 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
258271	4.3	警告	マイクロソフト	-	複数の Microsoft 製品におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-1257	2010-06-30 18:53	2010-06-8	Show	GitHub Exploit DB Packet Storm

258272	9.3	危険	マイクロソフト	-	複数の Microsoft 製品における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-1880	2010-06-30 18:52	2010-06-8	Show	GitHub Exploit DB Packet Storm

258273	9.3	危険	マイクロソフト	-	複数の Microsoft 製品における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-1879	2010-06-30 18:52	2010-06-8	Show	GitHub Exploit DB Packet Storm

258274	8.5	危険	PostgreSQL.org サイバートラスト株式会社レッドハット	-	PostgreSQL における任意の Perl コードを実行される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-1447	2010-06-30 18:17	2010-05-14	Show	GitHub Exploit DB Packet Storm

258275	9.3	危険	アップル	-	Apple Mac OS の ColorSync における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2009-1726	2010-06-30 18:17	2009-08-5	Show	GitHub Exploit DB Packet Storm

258276	6.9	警告	アップルサイバートラスト株式会社 The Perl Foundation レッドハット	-	Perl の rmtree 関数における任意のファイルを削除される脆弱性	CWE-362 競合状態	CVE-2008-5303	2010-06-30 18:16	2008-12-1	Show	GitHub Exploit DB Packet Storm

258277	6.9	警告	アップルサイバートラスト株式会社 The Perl Foundation レッドハット	-	Perl の rmtree 関数における任意の setuid バイナリを作成される脆弱性	CWE-362 競合状態	CVE-2008-5302	2010-06-30 18:16	2008-12-1	Show	GitHub Exploit DB Packet Storm

258278	9.3	危険	アップル	-	Apple Safari の WebKit における任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2010-1419	2010-06-29 16:59	2010-06-10	Show	GitHub Exploit DB Packet Storm

258279	9.3	危険	アップル	-	Apple Safari の WebKit における任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2010-1412	2010-06-25 18:51	2010-06-10	Show	GitHub Exploit DB Packet Storm

258280	9.3	危険	アップル	-	Apple Safari の WebKit における任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2010-1749	2010-06-24 15:38	2010-06-10	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 11, 2026, 5:13 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
248921	8.8	HIGH Network	linaro debian	lava debian_linux	An issue was discovered in Linaro LAVA before 2018.5.post1. Because of use of yaml.load() instead of yaml.safe_load() when parsing user data, remote code execution can occur.	CWE-20 Improper Input Validation	CVE-2018-12565	2024-11-21 12:45	2018-06-19	Show	GitHub Exploit DB Packet Storm

248922	6.5	MEDIUM Network	linaro debian	lava debian_linux	An issue was discovered in Linaro LAVA before 2018.5.post1. Because of support for URLs in the submit page, a user can forge an HTTP request that will force lava-server-gunicorn to return any file on…	CWE-20 Improper Input Validation	CVE-2018-12564	2024-11-21 12:45	2018-06-19	Show	GitHub Exploit DB Packet Storm

248923	6.5	MEDIUM Network	linaro	lava	An issue was discovered in Linaro LAVA before 2018.5.post1. Because of support for file: URLs, a user can force lava-server-gunicorn to download any file from the filesystem if it's readable by lavas…	CWE-20 Improper Input Validation	CVE-2018-12563	2024-11-21 12:45	2018-06-19	Show	GitHub Exploit DB Packet Storm

248924	9.8	CRITICAL Network	cantata_project	cantata	An issue was discovered in the cantata-mounter D-Bus service in Cantata through 2.3.1. The wrapper script 'mount.cifs.wrapper' uses the shell to forward the arguments to the actual mount.cifs binary.…	CWE-20 Improper Input Validation	CVE-2018-12562	2024-11-21 12:45	2018-06-19	Show	GitHub Exploit DB Packet Storm

248925	8.8	HIGH Network	cantata_project	cantata	An issue was discovered in the cantata-mounter D-Bus service in Cantata through 2.3.1. A regular user can inject additional mount options such as file_mode= by manipulating (for example) the domain p…	CWE-20 Improper Input Validation	CVE-2018-12561	2024-11-21 12:45	2018-06-19	Show	GitHub Exploit DB Packet Storm

248926	6.5	MEDIUM Network	cantata_project	cantata	An issue was discovered in the cantata-mounter D-Bus service in Cantata through 2.3.1. Arbitrary unmounts can be performed by regular users via directory traversal sequences such as a home/../sys/ker…	CWE-22 Path Traversal	CVE-2018-12560	2024-11-21 12:45	2018-06-19	Show	GitHub Exploit DB Packet Storm

248927	8.8	HIGH Network	cantata_project	cantata	An issue was discovered in the cantata-mounter D-Bus service in Cantata through 2.3.1. The mount target path check in mounter.cpp `mpOk()` is insufficient. A regular user can consequently mount a CIF…	CWE-22 Path Traversal	CVE-2018-12559	2024-11-21 12:45	2018-06-19	Show	GitHub Exploit DB Packet Storm

248928	9.8	CRITICAL Network	zuul-ci	zuul	An issue was discovered in Zuul 3.x before 3.1.0. If nodes become offline during the build, the no_log attribute of a task is ignored. If the unreachable error occurred in a task used with a loop var…	CWE-200 Information Exposure	CVE-2018-12557	2024-11-21 12:45	2018-06-19	Show	GitHub Exploit DB Packet Storm

248929	9.8	CRITICAL Network	quick_chat_project	quick_chat	A SQL injection issue was discovered in the Quick Chat plugin before 4.00 for WordPress.	CWE-89 SQL Injection	CVE-2018-12534	2024-11-21 12:45	2018-06-18	Show	GitHub Exploit DB Packet Storm

248930	9.8	CRITICAL Network	metinfo	metinfo	An issue was discovered in MetInfo 6.0.0. install\index.php allows remote attackers to write arbitrary PHP code into config_db.php, a different vulnerability than CVE-2018-7271.	CWE-94 Code Injection	CVE-2018-12531	2024-11-21 12:45	2018-06-18	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed