Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 13, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
258321	7.5	危険	オラクル	-	Oracle E-Business Suite の Oracle Applications Framework コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0908	2010-08-5 16:34	2010-07-13	Show	GitHub Exploit DB Packet Storm

258322	4.3	警告	オラクル	-	Oracle Enterprise Manager Grid Control の Console コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-2373	2010-08-5 16:33	2010-07-13	Show	GitHub Exploit DB Packet Storm

258323	4.3	警告	オラクル	-	Oracle Fusion Middleware の Oracle Business Process Management コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-2370	2010-08-5 16:33	2010-07-13	Show	GitHub Exploit DB Packet Storm

258324	5	警告	オラクル	-	Oracle Secure Backup における脆弱性	CWE-noinfo 情報不足	CVE-2010-0904	2010-08-5 16:33	2010-07-13	Show	GitHub Exploit DB Packet Storm

258325	9	危険	オラクル	-	Oracle Secure Backup における脆弱性	CWE-noinfo 情報不足	CVE-2010-0906	2010-08-5 16:32	2010-07-13	Show	GitHub Exploit DB Packet Storm

258326	9	危険	オラクル	-	Oracle Secure Backup における脆弱性	CWE-noinfo 情報不足	CVE-2010-0899	2010-08-5 16:32	2010-07-13	Show	GitHub Exploit DB Packet Storm

258327	10	危険	オラクル	-	Oracle Secure Backup における脆弱性	CWE-noinfo 情報不足	CVE-2010-0907	2010-08-5 16:32	2010-07-13	Show	GitHub Exploit DB Packet Storm

258328	10	危険	オラクル	-	Oracle Secure Backup における脆弱性	CWE-noinfo 情報不足	CVE-2010-0898	2010-08-5 16:31	2010-07-13	Show	GitHub Exploit DB Packet Storm

258329	5	警告	オラクル	-	Oracle TimesTen In-Memory Database の Data Server コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0910	2010-08-5 16:31	2010-07-13	Show	GitHub Exploit DB Packet Storm

258330	10	危険	オラクル	-	Oracle TimesTen In-Memory Database の Data Server コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0873	2010-08-5 16:30	2010-07-13	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 13, 2026, 4:20 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
250171	6.5	MEDIUM Network	long_range_zip_project debian	long_range_zip debian_linux	In Long Range Zip (aka lrzip) 0.631, there is a use-after-free in read_stream in stream.c, because decompress_file in lrzip.c lacks certain size validation.	CWE-416 Use After Free	CVE-2018-11496	2024-11-21 12:43	2018-05-27	Show	GitHub Exploit DB Packet Storm

250172	4.9	MEDIUM Network	opencart	opencart	OpenCart through 3.0.2.0 allows directory traversal in the editDownload function in admin\model\catalog\download.php via admin/index.php?route=catalog/download/edit, related to the download_id. For e…	CWE-22 Path Traversal	CVE-2018-11495	2024-11-21 12:43	2018-05-27	Show	GitHub Exploit DB Packet Storm

250173	8.0	HIGH Network	opencart	opencart	The "program extension upload" feature in OpenCart through 3.0.2.0 has a six-step process (upload, install, unzip, move, xml, remove) that allows attackers to execute arbitrary code if the remove ste…	CWE-22 CWE-434 Path Traversal Unrestricted Upload of File with Dangerous Type	CVE-2018-11494	2024-11-21 12:43	2018-05-27	Show	GitHub Exploit DB Packet Storm

250174	8.8	HIGH Network	wuzhicms	wuzhi_cms	An issue was discovered in WUZHI CMS 4.1.0. There is a CSRF vulnerability that can add a friendship link via index.php?m=link&f=index&v=add.	CWE-352 Origin Validation Error	CVE-2018-11493	2024-11-21 12:43	2018-05-27	Show	GitHub Exploit DB Packet Storm

250175	8.8	HIGH Network	sam2p_project giflib_project debian canonical	sam2p giflib debian_linux ubuntu_linux	The DGifDecompressLine function in dgif_lib.c in GIFLIB (possibly version 3.0.x), as later shipped in cgif.c in sam2p 0.49.4, has a heap-based buffer overflow because a certain "Private->RunningCode …	CWE-787 CWE-129 Out-of-bounds Write Improper Validation of Array Index	CVE-2018-11490	2024-11-21 12:43	2018-05-27	Show	GitHub Exploit DB Packet Storm

250176	8.8	HIGH Network	sam2p_project giflib_project	sam2p giflib	The DGifDecompressLine function in dgif_lib.c in GIFLIB (possibly version 3.0.x), as later shipped in cgif.c in sam2p 0.49.4, has a heap-based buffer overflow because a certain CrntCode array index i…	CWE-787 CWE-129 Out-of-bounds Write Improper Validation of Array Index	CVE-2018-11489	2024-11-21 12:43	2018-05-27	Show	GitHub Exploit DB Packet Storm

250177	6.1	MEDIUM Network	phpmywind	phpmywind	PHPMyWind 5.5 has XSS via the cid parameter to newsshow.php, or the query string to news.php or about.php.	CWE-79 Cross-site Scripting	CVE-2018-11487	2024-11-21 12:43	2018-05-27	Show	GitHub Exploit DB Packet Storm

250178	8.0	HIGH Network	monstra	monstra	Monstra CMS 3.0.4 has a Session Management Issue in the Users tab. A password change at users/1/edit does not invalidate a session that is open in a different browser.	CWE-384 Session Fixation	CVE-2018-11475	2024-11-21 12:43	2018-05-26	Show	GitHub Exploit DB Packet Storm

250179	8.0	HIGH Network	monstra	monstra	Monstra CMS 3.0.4 has a Session Management Issue in the Administrations Tab. A password change at admin/index.php?id=users&action=edit&user_id=1 does not invalidate a session that is open in a differ…	CWE-384 Session Fixation	CVE-2018-11474	2024-11-21 12:43	2018-05-26	Show	GitHub Exploit DB Packet Storm

250180	7.8	HIGH Local	windscribe	windscribe	The VPN component in Windscribe 1.81 uses the OpenVPN client for connections. Also, it creates a WindScribeService.exe system process that establishes a \\.\pipe\WindscribeService named pipe endpoint…	CWE-20 Improper Input Validation	CVE-2018-11479	2024-11-21 12:43	2018-05-26	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed