Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 8, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
258301	9.3	危険	マイクロソフト	-	Microsoft Office Excel における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2009-3128	2010-01-5 16:17	2009-11-10	Show	GitHub Exploit DB Packet Storm

258302	9.3	危険	マイクロソフト	-	Microsoft Office および Open XML File Format Converter における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2009-3127	2010-01-5 16:16	2009-11-10	Show	GitHub Exploit DB Packet Storm

258303	6.8	警告	アップルサイバートラスト株式会社サン・マイクロシステムズターボリナックスヒューレット・パッカード OpenSSL Project レッドハット	-	OpenSSL の SSL_get_shared_ciphers() 関数における一つずれエラーの脆弱性	CWE-189 数値処理の問題	CVE-2007-5135	2010-01-5 13:31	2007-10-12	Show	GitHub Exploit DB Packet Storm

258304	7.8	危険	マイクロソフト	-	Microsoft Windows で稼働している Active Directory の LDAP サービスにおけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2009-1928	2010-01-4 15:24	2009-11-10	Show	GitHub Exploit DB Packet Storm

258305	9.3	危険	マイクロソフト	-	Microsoft Windows の kernel における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2009-2514	2010-01-4 15:24	2009-11-10	Show	GitHub Exploit DB Packet Storm

258306	6.8	警告	マイクロソフト	-	Microsoft Windows の kernel の Graphics Device Interface (GDI) における権限を取得される脆弱性	CWE-20 不適切な入力確認	CVE-2009-2513	2010-01-4 15:24	2009-11-10	Show	GitHub Exploit DB Packet Storm

258307	6.8	警告	マイクロソフト	-	Microsoft Windows の kernel における権限を取得される脆弱性	CWE-20 不適切な入力確認	CVE-2009-1127	2010-01-4 15:24	2009-11-10	Show	GitHub Exploit DB Packet Storm

258308	10	危険	マイクロソフト	-	Microsoft Windows の License Logging Server (llssrv.exe) における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2009-2523	2010-01-4 15:24	2009-11-10	Show	GitHub Exploit DB Packet Storm

258309	9.3	危険	マイクロソフト	-	Microsoft Windows の Web Services on Devices API (WSDAPI) における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2009-2512	2010-01-4 15:23	2009-11-10	Show	GitHub Exploit DB Packet Storm

258310	10	危険	アップル VMware サン・マイクロシステムズ	-	Sun Java SE の Provider クラスにおける詳細不明な脆弱性	CWE-noinfo 情報不足	CVE-2009-2722	2010-01-4 14:56	2009-08-10	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 8, 2026, 4:09 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
248611	4.3	MEDIUM Network	joomla	joomla\!	An issue was discovered in Joomla! Core before 3.8.8. Inadequate checks allowed users to see the names of tags that were either unpublished or published with restricted view permission.	CWE-200 Information Exposure	CVE-2018-11327	2024-11-21 12:43	2018-05-23	Show	GitHub Exploit DB Packet Storm

248612	4.8	MEDIUM Network	joomla	joomla\!	An issue was discovered in Joomla! Core before 3.8.8. Inadequate input filtering leads to a multiple XSS vulnerabilities. Additionally, the default filtering settings could potentially allow users of…	CWE-79 Cross-site Scripting	CVE-2018-11326	2024-11-21 12:43	2018-05-23	Show	GitHub Exploit DB Packet Storm

248613	9.8	CRITICAL Network	joomla	joomla\!	An issue was discovered in Joomla! Core before 3.8.8. The web install application would autofill password fields after either a form validation error or navigating to a previous install step, and dis…	CWE-209 Information Exposure Through an Error Message	CVE-2018-11325	2024-11-21 12:43	2018-05-23	Show	GitHub Exploit DB Packet Storm

248614	5.9	MEDIUM Network	joomla	joomla\!	An issue was discovered in Joomla! Core before 3.8.8. A long running background process, such as remote checks for core or extension updates, could create a race condition where a session that was ex…	CWE-362 Race Condition	CVE-2018-11324	2024-11-21 12:43	2018-05-23	Show	GitHub Exploit DB Packet Storm

248615	8.8	HIGH Network	joomla	joomla\!	An issue was discovered in Joomla! Core before 3.8.8. Inadequate checks allowed users to modify the access levels of user groups with higher permissions.	CWE-269 Improper Privilege Management	CVE-2018-11323	2024-11-21 12:43	2018-05-23	Show	GitHub Exploit DB Packet Storm

248616	7.5	HIGH Network	joomla	joomla\!	An issue was discovered in Joomla! Core before 3.8.8. Depending on the server configuration, PHAR files might be handled as executable PHP scripts by the webserver.	CWE-434 Unrestricted Upload of File with Dangerous Type	CVE-2018-11322	2024-11-21 12:43	2018-05-23	Show	GitHub Exploit DB Packet Storm

248617	6.5	MEDIUM Network	joomla	joomla\!	An issue was discovered in com_fields in Joomla! Core before 3.8.8. Inadequate filtering allows users authorised to create custom fields to manipulate the filtering options and inject an unvalidated …	CWE-20 Improper Input Validation	CVE-2018-11321	2024-11-21 12:43	2018-05-23	Show	GitHub Exploit DB Packet Storm

248618	7.5	HIGH Network	cppcms	cppcms	An issue was discovered in CppCMS before 1.2.1. There is a denial of service in the JSON parser module.	CWE-20 Improper Input Validation	CVE-2018-11367	2024-11-21 12:43	2018-05-22	Show	GitHub Exploit DB Packet Storm

248619	6.1	MEDIUM Network	loginizer	loginizer	init.php in the Loginizer plugin 1.3.8 through 1.3.9 for WordPress has Unauthenticated Stored Cross-Site Scripting (XSS) because logging is mishandled. This is fixed in 1.4.0.	CWE-79 Cross-site Scripting	CVE-2018-11366	2024-11-21 12:43	2018-05-22	Show	GitHub Exploit DB Packet Storm

248620	7.5	HIGH Network	pdfgen	pdfgen	jpeg_size in pdfgen.c in PDFGen before 2018-04-09 has a heap-based buffer over-read.	CWE-125 Out-of-bounds Read	CVE-2018-11363	2024-11-21 12:43	2018-05-22	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed