Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 16, 2026, 10:01 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
258341 9.3 危険 アドビシステムズ - Adobe Shockwave Player の IML32.dll における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2010-2869 2010-09-10 15:16 2010-08-24 Show GitHub Exploit DB Packet Storm
258342 9.3 危険 アドビシステムズ - Adobe Shockwave Player の IML32.dll における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2010-2868 2010-09-10 15:16 2010-08-24 Show GitHub Exploit DB Packet Storm
258343 4.3 警告 futomi - futomi's CGI Cafe 製高機能アクセス解析CGI におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-2366 2010-09-10 12:01 2010-09-10 Show GitHub Exploit DB Packet Storm
258344 9.3 危険 アドビシステムズ - Adobe Shockwave Player の DIRAPIX.dll における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2010-2867 2010-09-9 13:35 2010-08-24 Show GitHub Exploit DB Packet Storm
258345 9.3 危険 アドビシステムズ - Adobe Shockwave Player の DIRAPI モジュールにおける整数符号エラーの脆弱性 CWE-189
数値処理の問題 		CVE-2010-2866 2010-09-9 13:34 2010-08-24 Show GitHub Exploit DB Packet Storm
258346 5 警告 アドビシステムズ - Adobe Shockwave Player におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2010-2865 2010-09-9 13:34 2010-08-24 Show GitHub Exploit DB Packet Storm
258347 9.3 危険 アドビシステムズ - Adobe Shockwave Player の IML32.dll における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2010-2864 2010-09-9 13:34 2010-08-24 Show GitHub Exploit DB Packet Storm
258348 10 危険 アドビシステムズ - Adobe Shockwave Player における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2010-2863 2010-09-9 13:34 2010-08-24 Show GitHub Exploit DB Packet Storm
258349 6.4 警告 アップル - Apple Mac OS X の libsecurity における SSL サーバになりすまされる脆弱性 CWE-287
不適切な認証 		CVE-2010-1802 2010-09-8 15:52 2010-08-25 Show GitHub Exploit DB Packet Storm
258350 6.8 警告 アップル - Apple Mac OS X の CoreGraphics におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2010-1801 2010-09-8 15:52 2010-08-25 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 16, 2026, 4:13 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
246441 8.8 HIGH
Network 		linknet-usa lw-n605r_firmware LINK-NET LW-N605R devices with firmware 12.20.2.1486 allow Remote Code Execution via shell metacharacters in the HOST field of the ping feature at adm/systools.asp. Authentication is needed but the d… CWE-78
CWE-1188
OS Command 
 Insecure Default Initialization of Resource 		CVE-2018-16752 2024-11-21 12:53 2018-09-21 Show GitHub Exploit DB Packet Storm
246442 8.8 HIGH
Network 		dedecms dedecms XML injection vulnerability exists in the file of DedeCMS V5.7 SP2 version, which can be utilized by attackers to create script file to obtain webshell CWE-91
Blind XPath Injection 		CVE-2018-16785 2024-11-21 12:53 2018-09-20 Show GitHub Exploit DB Packet Storm
246443 5.4 MEDIUM
Network 		opmantek open-audit Cross-site scripting (XSS) vulnerability in the Orgs Page in Open-AudIT Professional edition in 2.2.7 allows remote attackers to inject arbitrary web script via the Orgs name field. CWE-79
Cross-site Scripting 		CVE-2018-16607 2024-11-21 12:53 2018-09-20 Show GitHub Exploit DB Packet Storm
246444 7.5 HIGH
Network 		bitcoinknots
bitcoin 		bitcoin_knots
bitcoin_core 		Bitcoin Core 0.14.x before 0.14.3, 0.15.x before 0.15.2, and 0.16.x before 0.16.3 and Bitcoin Knots 0.14.x through 0.16.x before 0.16.3 allow a remote denial of service (application crash) exploitabl… NVD-CWE-noinfo
CVE-2018-17144 2024-11-21 12:53 2018-09-19 Show GitHub Exploit DB Packet Storm
246445 9.8 CRITICAL
Network 		coinlancer coinlancer The onlyOwner modifier of a smart contract implementation for Coinlancer (CL), an Ethereum ERC20 token, has a potential access control vulnerability. All contract users can access functions that use … NVD-CWE-noinfo
CVE-2018-17111 2024-11-21 12:53 2018-09-19 Show GitHub Exploit DB Packet Storm
246446 7.5 HIGH
Network 		lucky9 lucky9io The fallback function of a simple lottery smart contract implementation for Lucky9io, an Ethereum gambling game, generates a random value with the publicly readable variable entry_number. This variab… CWE-338
 Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) 		CVE-2018-17071 2024-11-21 12:53 2018-09-19 Show GitHub Exploit DB Packet Storm
246447 7.5 HIGH
Network 		monstra monstra admin/index.php in Monstra CMS 3.0.4 allows arbitrary directory listing via id=filesmanager&path=uploads/.......//./.......//./ requests. CWE-22
Path Traversal 		CVE-2018-16820 2024-11-21 12:53 2018-09-19 Show GitHub Exploit DB Packet Storm
246448 4.9 MEDIUM
Network 		monstra monstra admin/index.php in Monstra CMS 3.0.4 allows arbitrary file deletion via id=filesmanager&path=uploads/.......//./.......//./&delete_file= requests. CWE-22
Path Traversal 		CVE-2018-16819 2024-11-21 12:53 2018-09-19 Show GitHub Exploit DB Packet Storm
246449 8.6 HIGH
Network 		microsoft active_directory_federation_services Microsoft ADFS 4.0 Windows Server 2016 and previous (Active Directory Federation Services) has an SSRF vulnerability via the txtBoxEmail parameter in /adfs/ls. CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2018-16794 2024-11-21 12:53 2018-09-19 Show GitHub Exploit DB Packet Storm
246450 5.3 MEDIUM
Network 		circontrol circarlife_scada An issue was discovered in CIRCONTROL CirCarLife before 4.3. There is system software information disclosure due to lack of authentication for /html/device-id. CWE-200
Information Exposure 		CVE-2018-16671 2024-11-21 12:53 2018-09-19 Show GitHub Exploit DB Packet Storm