Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 22, 2026, 6:01 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
258301 7.6 危険 GNOME Project
レッドハット
- Evince の AFM フォントパーサにおけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2010-2642 2011-01-26 15:30 2011-01-5 Show GitHub Exploit DB Packet Storm
258302 7.6 危険 GNOME Project
レッドハット
- Evince の VF フォントパーサにおける任意のコードを実行される脆弱性 CWE-20
不適切な入力確認
CVE-2010-2641 2011-01-26 15:21 2011-01-5 Show GitHub Exploit DB Packet Storm
258303 7.6 危険 GNOME Project
レッドハット
- Evince の PK フォントパーサにおける任意のコードを実行される脆弱性 CWE-20
不適切な入力確認
CVE-2010-2640 2011-01-26 15:10 2011-01-5 Show GitHub Exploit DB Packet Storm
258304 5 警告 MODX - MODx Evolution におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2010-3930 2011-01-26 14:02 2011-01-26 Show GitHub Exploit DB Packet Storm
258305 7.5 危険 MODX - MODx Evolution における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-3929 2011-01-26 14:01 2011-01-26 Show GitHub Exploit DB Packet Storm
258306 9.3 危険 Google - Google Chrome におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2010-4042 2011-01-26 13:28 2010-10-19 Show GitHub Exploit DB Packet Storm
258307 6.8 警告 Google - Linux 上で稼働する Google Chrome のサンドボックス実装におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2010-4041 2011-01-26 13:26 2010-10-19 Show GitHub Exploit DB Packet Storm
258308 9.3 危険 Google - Google Chrome におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2010-4040 2011-01-26 13:23 2010-10-19 Show GitHub Exploit DB Packet Storm
258309 7.5 危険 Google - Linux 上で稼働する Google Chrome における脆弱性 CWE-DesignError
CWE-noinfo
CVE-2010-4039 2011-01-26 13:17 2010-10-19 Show GitHub Exploit DB Packet Storm
258310 4.3 警告 Google - Google Chrome の Web Sockets 実装におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2010-4038 2011-01-26 13:12 2010-10-19 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 22, 2026, 4 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
250631 4.9 MEDIUM
Network
xovis pc2r_firmware
pc3_firmware
pc2_firmware
Xovis PC2, PC2R, and PC3 devices through 3.6.0 allow XXE. CWE-611
XXE
CVE-2018-11719 2024-11-21 12:43 2018-08-31 Show GitHub Exploit DB Packet Storm
250632 8.8 HIGH
Network
xovis pc2r_firmware
pc3_firmware
pc2_firmware
Xovis PC2, PC2R, and PC3 devices through 3.6.0 allow CSRF. CWE-352
 Origin Validation Error
CVE-2018-11718 2024-11-21 12:43 2018-08-31 Show GitHub Exploit DB Packet Storm
250633 8.8 HIGH
Network
tencent foxmail This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Tencent Foxmail 7.2.9.115. User interaction is required to exploit this vulnerability in that the t… CWE-78
OS Command 
CVE-2018-11616 2024-11-21 12:43 2018-08-30 Show GitHub Exploit DB Packet Storm
250634 7.5 HIGH
Network
mosca_project mosca This vulnerability allows remote attackers to deny service on vulnerable installations of npm mosca 2.8.1. Authentication is not required to exploit this vulnerability. The specific flaw exists withi… CWE-185
 Incorrect Regular Expression
CVE-2018-11615 2024-11-21 12:43 2018-08-30 Show GitHub Exploit DB Packet Storm
250635 7.5 HIGH
Network
seasofsolutions ip_camera_firmware Information disclosure in Netwave IP camera at get_status.cgi (via HTTP on port 8000) allows an unauthenticated attacker to exfiltrate sensitive information from the device. CWE-200
Information Exposure
CVE-2018-11654 2024-11-21 12:43 2018-08-25 Show GitHub Exploit DB Packet Storm
250636 9.8 CRITICAL
Network
seasofsolutions ip_camera_firmware Information disclosure in Netwave IP camera at //etc/RT2870STA.dat (via HTTP on port 8000) allows an unauthenticated attacker to exfiltrate sensitive information about the network configuration like … CWE-200
Information Exposure
CVE-2018-11653 2024-11-21 12:43 2018-08-25 Show GitHub Exploit DB Packet Storm
250637 6.5 MEDIUM
Network
moderator_log_notes_project moderator_log_notes An issue was discovered in the Moderator Log Notes plugin 1.1 for MyBB. It allows moderators to save notes and display them in a list in the modCP. An attacker can remotely delete all mod notes and m… CWE-352
 Origin Validation Error
CVE-2018-11502 2024-11-21 12:43 2018-08-25 Show GitHub Exploit DB Packet Storm
250638 9.8 CRITICAL
Network
puppet puppet_enterprise When users are configured to use startTLS with RBAC LDAP, at login time, the user's credentials are sent via plaintext to the LDAP server. This affects Puppet Enterprise 2018.1.3, 2017.3.9, and 2016.… CWE-319
Cleartext Transmission of Sensitive Information
CVE-2018-11749 2024-11-21 12:43 2018-08-24 Show GitHub Exploit DB Packet Storm
250639 8.1 HIGH
Network
apache cayenne This affects Apache Cayenne 4.1.M1, 3.2.M1, 4.0.M2 to 4.0.M5, 4.0.B1, 4.0.B2, 4.0.RC1, 3.1, 3.1.1, 3.1.2. CayenneModeler is a desktop GUI tool shipped with Apache Cayenne and intended for editing Cay… CWE-611
XXE
CVE-2018-11758 2024-11-21 12:43 2018-08-23 Show GitHub Exploit DB Packet Storm
250640 9.8 CRITICAL
Network
asustor asustor_data_master The tree list functionality in the photo gallery application in ASUSTOR ADM 3.1.0.RFQ3 has a SQL injection vulnerability that affects the 'album_id' or 'scope' parameter via a photo-gallery/api/album… CWE-89
SQL Injection
CVE-2018-11511 2024-11-21 12:43 2018-08-17 Show GitHub Exploit DB Packet Storm