Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 16, 2026, 4:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
258361	5.8	警告	Opera Software ASA	-	Windows 上で稼働する Opera におけるアドレスフィールドを偽装される脆弱性	CWE-20 不適切な入力確認	CVE-2009-3832	2010-09-27 16:16	2009-10-28	Show	GitHub Exploit DB Packet Storm

258362	5	警告	Opera Software ASA	-	Opera におけるフィッシング攻撃の脆弱性	CWE-Other その他	CVE-2009-3049	2010-09-27 16:15	2009-09-1	Show	GitHub Exploit DB Packet Storm

258363	4.3	警告	Opera Software ASA	-	Opera における意図しないファイルをアップロードさせられる脆弱性	CWE-20 不適切な入力確認	CVE-2009-3048	2010-09-27 16:15	2009-09-1	Show	GitHub Exploit DB Packet Storm

258364	4.3	警告	Opera Software ASA	-	Opera における URL を偽装される脆弱性	CWE-Other その他	CVE-2009-3047	2010-09-27 16:15	2009-09-1	Show	GitHub Exploit DB Packet Storm

258365	5	警告	Opera Software ASA	-	Opera における証明書チェーンの有効性を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2009-3046	2010-09-27 16:15	2009-09-1	Show	GitHub Exploit DB Packet Storm

258366	5	警告	Opera Software ASA	-	Opera における任意の SSL サーバになりすまされる脆弱性	CWE-310 暗号の問題	CVE-2009-3045	2010-09-27 16:15	2009-09-1	Show	GitHub Exploit DB Packet Storm

258367	9.3	危険	Opera Software ASA	-	Opera における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2009-3831	2010-09-27 16:14	2009-10-28	Show	GitHub Exploit DB Packet Storm

258368	5	警告	Opera Software ASA	-	Opera におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2009-3269	2010-09-27 16:14	2009-09-18	Show	GitHub Exploit DB Packet Storm

258369	4.3	警告	Opera Software ASA	-	Opera におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-3266	2010-09-27 16:14	2009-09-18	Show	GitHub Exploit DB Packet Storm

258370	4.3	警告	Opera Software ASA	-	Opera におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-3265	2010-09-27 16:14	2009-09-18	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 16, 2026, 4:13 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
251111	8.8	HIGH Network	foxitsoftware	phantompdf foxit_reader	This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.0.29935. User interaction is required to exploit this vulnerability in that the ta…	CWE-787 Out-of-bounds Write	CVE-2018-10473	2024-11-21 12:41	2018-05-18	Show	GitHub Exploit DB Packet Storm

251112	8.1	HIGH Network	actiontec	wcb6200q_firmware	An issue was discovered on Actiontec WCB6200Q before 1.1.10.20a devices. The admin login session cookie is insecurely generated making admin session hijacking possible. When an admin logs in, a sessi…	CWE-384 Session Fixation	CVE-2018-10252	2024-11-21 12:41	2018-05-14	Show	GitHub Exploit DB Packet Storm

251113	6.1	MEDIUM Network	mybb	mybb	MyBB 1.8.15, when accessed with Microsoft Edge, mishandles 'target="_blank" rel="noopener"' in A elements, which makes it easier for remote attackers to conduct redirection attacks.	CWE-601 Open Redirect	CVE-2018-10678	2024-11-21 12:41	2018-05-14	Show	GitHub Exploit DB Packet Storm

251114	5.4	MEDIUM Network	latest_posts_on_profile_project	latest_posts_on_profile	The "Latest Posts on Profile" plugin 1.1 for MyBB has XSS because there is an added section in a user profile that displays that user's most recent posts without sanitizing the tsubject (aka thread s…	CWE-79 Cross-site Scripting	CVE-2018-10580	2024-11-21 12:41	2018-05-11	Show	GitHub Exploit DB Packet Storm

251115	7.5	HIGH Network	social-chain	social_chain	An integer overflow in the transferMulti function of a smart contract implementation for Social Chain (SCA), an Ethereum ERC20 token, allows attackers to accomplish an unauthorized increase of digita…	CWE-190 Integer Overflow or Wraparound	CVE-2018-10706	2024-11-21 12:41	2018-05-11	Show	GitHub Exploit DB Packet Storm

251116	7.8	HIGH Local	devicelock	plug_and_play_auditor	DLPnpAuditor.exe in DeviceLock Plug and Play Auditor (freeware) 5.72 has a Unicode Buffer Overflow (SEH).	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2018-10655	2024-11-21 12:41	2018-05-10	Show	GitHub Exploit DB Packet Storm

251117	5.4	MEDIUM Network	opmantek	open-audit	Cross-site scripting (XSS) vulnerability in Open-AudIT Community 2.2.0 allows remote attackers to inject arbitrary web script or HTML via a crafted name of a component, as demonstrated by the action …	CWE-79 Cross-site Scripting	CVE-2018-10314	2024-11-21 12:41	2018-05-10	Show	GitHub Exploit DB Packet Storm

251118	9.8	CRITICAL Network	redhat	wildfly	An issue was discovered in WildFly 10.1.2.Final. In the case of a default installation without a security realm reference, an attacker can successfully access the server without authentication. NOTE:…	CWE-287 Improper Authentication	CVE-2018-10683	2024-11-21 12:41	2018-05-9	Show	GitHub Exploit DB Packet Storm

251119	7.5	HIGH Network	auroradao	aura	The Owned smart contract implementation for Aurora DAO (AURA), an Ethereum ERC20 token, allows attackers to acquire contract ownership because the setOwner function is declared as public. An attacker…	NVD-CWE-noinfo	CVE-2018-10705	2024-11-21 12:41	2018-05-9	Show	GitHub Exploit DB Packet Storm

251120	9.8	CRITICAL Network	wildfly	wildfly	An issue was discovered in WildFly 10.1.2.Final. It is possible for an attacker to access the administration panel on TCP port 9990 without any authentication using "anonymous" access that is automat…	CWE-287 Improper Authentication	CVE-2018-10682	2024-11-21 12:41	2018-05-9	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed