Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 16, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
258411 9.3 危険 リアルネットワークス - Windows 上で稼働する RealNetworks RealPlayer におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2010-0120 2010-09-17 15:56 2010-08-26 Show GitHub Exploit DB Packet Storm
258412 9.3 危険 リアルネットワークス - Windows 上で稼働する RealNetworks RealPlayer における任意のコードを実行される脆弱性 CWE-Other
その他
CVE-2010-0117 2010-09-17 15:56 2010-08-26 Show GitHub Exploit DB Packet Storm
258413 9.3 危険 リアルネットワークス - Windows 上で稼働する RealNetworks RealPlayer における整数オーバーフローの脆弱性 CWE-189
数値処理の問題
CVE-2010-0116 2010-09-17 15:56 2010-08-26 Show GitHub Exploit DB Packet Storm
258414 9.3 危険 Artifex Software - Ghostscript の TrueType bytecode interpreter に脆弱性 CWE-189
数値処理の問題
CVE-2009-3743 2010-09-16 15:42 2010-08-25 Show GitHub Exploit DB Packet Storm
258415 5 警告 Devon IT - Devon IT 製品に複数の脆弱性 CWE-255
証明書・パスワード管理
CVE-2010-3122 2010-09-16 15:42 2010-08-25 Show GitHub Exploit DB Packet Storm
258416 6.4 警告 日立 - JP1/NETM/Remote Control Agent における認証を回避される脆弱性 CWE-287
不適切な認証
- 2010-09-16 15:42 2010-08-31 Show GitHub Exploit DB Packet Storm
258417 6.8 警告 ヒューレット・パッカード - HP HP-UX の Software Distributor における権限を取得される脆弱性 CWE-noinfo
情報不足
CVE-2010-2712 2010-09-15 17:18 2010-08-25 Show GitHub Exploit DB Packet Storm
258418 6 警告 レッドハット - Red Hat Enterprise Linux の gdm におけるアクセス制限を回避される脆弱性 CWE-DesignError
CVE-2007-5079 2010-09-15 17:18 2007-09-25 Show GitHub Exploit DB Packet Storm
258419 9.3 危険 ImageMagick
GraphicsMagick
レッドハット
- ImageMagick および GraphicsMagick の XMakeImage 関数における整数オーバーフローの脆弱性 CWE-189
数値処理の問題
CVE-2009-1882 2010-09-15 17:17 2009-06-2 Show GitHub Exploit DB Packet Storm
258420 3.3 注意 レッドハット - Firefox の SPICE プラグインにおける任意のファイルを上書きされる脆弱性 CWE-59
リンク解釈の問題
CVE-2010-2794 2010-09-15 17:17 2010-08-25 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 16, 2026, 4:13 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
246391 8.8 HIGH
Network
moodle moodle A flaw was found in moodle versions 3.5 to 3.5.2, 3.4 to 3.4.5, 3.3 to 3.3.8, 3.1 to 3.1.14 and earlier. The login form is not protected by a token to prevent login cross-site request forgery. Fixed … CWE-352
 Origin Validation Error
CVE-2018-16854 2024-11-21 12:53 2018-11-27 Show GitHub Exploit DB Packet Storm
246392 7.2 HIGH
Network
sonatype nexus_repository_manager Sonatype Nexus Repository Manager before 3.14 allows Java Expression Language Injection. CWE-917
 Improper Neutralization of Special Elements used in an Expression Language Statement ('Expression Language Injection')
CVE-2018-16621 2024-11-21 12:53 2018-11-16 Show GitHub Exploit DB Packet Storm
246393 7.5 HIGH
Network
sonatype nexus_repository_manager Sonatype Nexus Repository Manager before 3.14 has Incorrect Access Control. CWE-863
 Incorrect Authorization
CVE-2018-16620 2024-11-21 12:53 2018-11-16 Show GitHub Exploit DB Packet Storm
246394 6.1 MEDIUM
Network
sonatype nexus_repository_manager Sonatype Nexus Repository Manager before 3.14 allows XSS. CWE-79
Cross-site Scripting
CVE-2018-16619 2024-11-21 12:53 2018-11-16 Show GitHub Exploit DB Packet Storm
246395 9.8 CRITICAL
Network
postgresql
redhat
canonical
postgresql
enterprise_linux
ubuntu_linux
postgresql before versions 11.1, 10.6 is vulnerable to a to SQL injection in pg_upgrade and pg_dump via CREATE TRIGGER ... REFERENCING. Using a purpose-crafted trigger definition, an attacker can cau… CWE-89
SQL Injection
CVE-2018-16850 2024-11-21 12:53 2018-11-14 Show GitHub Exploit DB Packet Storm
246396 6.1 MEDIUM
Local
f5
debian
canonical
opensuse
apple
nginx
debian_linux
ubuntu_linux
leap
xcode
nginx before versions 1.15.6, 1.14.1 has a vulnerability in the ngx_http_mp4_module, which might allow an attacker to cause infinite loop in a worker process, cause a worker process crash, or might r… - CVE-2018-16845 2024-11-21 12:53 2018-11-7 Show GitHub Exploit DB Packet Storm
246397 7.5 HIGH
Network
f5
debian
canonical
apple
nginx
debian_linux
ubuntu_linux
xcode
nginx before versions 1.15.6 and 1.14.1 has a vulnerability in the implementation of HTTP/2 that can allow for excessive CPU usage. This issue affects nginx compiled with the ngx_http_v2_module (not … - CVE-2018-16844 2024-11-21 12:53 2018-11-7 Show GitHub Exploit DB Packet Storm
246398 7.5 HIGH
Network
f5
debian
canonical
opensuse
apple
nginx
debian_linux
ubuntu_linux
leap
xcode
nginx before versions 1.15.6 and 1.14.1 has a vulnerability in the implementation of HTTP/2 that can allow for excessive memory consumption. This issue affects nginx compiled with the ngx_http_v2_mod… - CVE-2018-16843 2024-11-21 12:53 2018-11-7 Show GitHub Exploit DB Packet Storm
246399 8.8 HIGH
Adjacent
ti ble-stack Texas Instruments BLE-STACK v2.2.1 for SimpleLink CC2640 and CC2650 devices allows remote attackers to execute arbitrary code via a malformed packet that triggers a buffer overflow. CWE-787
 Out-of-bounds Write
CVE-2018-16986 2024-11-21 12:53 2018-11-7 Show GitHub Exploit DB Packet Storm
246400 7.8 HIGH
Local
qemu
canonical
qemu
ubuntu_linux
An OOB heap buffer r/w access issue was found in the NVM Express Controller emulation in QEMU. It could occur in nvme_cmb_ops routines in nvme device. A guest user/process could use this flaw to cras… CWE-125
CWE-787
Out-of-bounds Read
 Out-of-bounds Write
CVE-2018-16847 2024-11-21 12:53 2018-11-3 Show GitHub Exploit DB Packet Storm