Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 15, 2026, 4:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
258421 9.3 危険 シマンテック
IBM		 - Lotus 1-2-3 reader (wkssr.dll) の SpreadSheet におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2010-0131 2010-08-24 18:40 2010-08-4 Show GitHub Exploit DB Packet Storm
258422 4.3 警告 サイバートラスト株式会社
LibTIFF
レッドハット		 - x86_64 プラットフォーム上で稼動する RHEL の LibTIFF におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2010-2598 2010-08-24 13:44 2010-07-8 Show GitHub Exploit DB Packet Storm
258423 6.8 警告 アップル
サイバートラスト株式会社
LibTIFF
レッドハット		 - LibTIFF の FAX3 デコーダの Fax3SetupState 関数における整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2010-1411 2010-08-24 13:44 2010-06-10 Show GitHub Exploit DB Packet Storm
258424 2.6 注意 アップル - Apple Safari の AutoFill 機能におけるアドレスブックカードの情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2010-1796 2010-08-20 18:24 2010-07-30 Show GitHub Exploit DB Packet Storm
258425 4.3 警告 アップル - Apple Safari におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-1778 2010-08-20 18:24 2010-07-30 Show GitHub Exploit DB Packet Storm
258426 7.5 危険 金子 勇 - Winny におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2010-2360 2010-08-20 12:02 2010-08-20 Show GitHub Exploit DB Packet Storm
258427 7.5 危険 金子 勇 - Winny におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2010-2360 2010-08-20 12:02 2010-08-20 Show GitHub Exploit DB Packet Storm
258428 5 警告 金子 勇 - Winny におけるノード情報の処理に関する脆弱性 CWE-Other
その他 		CVE-2010-2362 2010-08-20 12:01 2010-08-20 Show GitHub Exploit DB Packet Storm
258429 5 警告 金子 勇 - Winny における BBS 情報の処理に関する脆弱性 CWE-Other
その他 		CVE-2010-2361 2010-08-20 12:01 2010-08-20 Show GitHub Exploit DB Packet Storm
258430 10 危険 シマンテック
IBM		 - Autonomy KeyView Filter SDK の kvolefio.dll における整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2009-3032 2010-08-19 18:22 2010-03-5 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 15, 2026, 4:10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
246471 9.8 CRITICAL
Network 		elefantcms elefant An issue was discovered in Elefant CMS before 2.0.7. There is a PHP Code Execution Vulnerability in apps/filemanager/upload/drop.php by using /filemanager/api/rm/.htaccess to remove the .htaccess fil… CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2018-16974 2024-11-21 12:53 2018-09-13 Show GitHub Exploit DB Packet Storm
246472 4.3 MEDIUM
Network 		wisetail learning_management_system Wisetail Learning Ecosystem (LE) through v4.11.6 allows insecure direct object reference (IDOR) attacks to access non-purchased course contents (quiz / test) via a modified id parameter. CWE-639
 Authorization Bypass Through User-Controlled Key 		CVE-2018-16971 2024-11-21 12:53 2018-09-13 Show GitHub Exploit DB Packet Storm
246473 4.3 MEDIUM
Network 		wisetail learning_management_system Wisetail Learning Ecosystem (LE) through v4.11.6 allows insecure direct object reference (IDOR) attacks to download non-purchased course files via a modified id parameter. CWE-538
 File and Directory Information Exposure 		CVE-2018-16970 2024-11-21 12:53 2018-09-13 Show GitHub Exploit DB Packet Storm
246474 7.8 HIGH
Local 		webroot secureanywhere Webroot SecureAnywhere before 9.0.8.34 on macOS mishandles access to the driver by a process that lacks root privileges. CWE-123
 Write-what-where Condition 		CVE-2018-16962 2024-11-21 12:53 2018-09-13 Show GitHub Exploit DB Packet Storm
246475 5.4 MEDIUM
Network 		pluck-cms pluck Pluck 4.7.7 allows XSS via an SVG file that contains Javascript in a SCRIPT element, and is uploaded via pages->manage under admin.php?action=files. CWE-79
Cross-site Scripting 		CVE-2018-16729 2024-11-21 12:53 2018-09-13 Show GitHub Exploit DB Packet Storm
246476 5.4 MEDIUM
Network 		feindura feindura feindura 2.0.7 allows XSS via the tags field of a new page created at index.php?category=0&page=new. CWE-79
Cross-site Scripting 		CVE-2018-16728 2024-11-21 12:53 2018-09-13 Show GitHub Exploit DB Packet Storm
246477 5.4 MEDIUM
Network 		razorcms razorcms razorCMS 3.4.7 allows Stored XSS via the keywords of the homepage within the settings component. CWE-79
Cross-site Scripting 		CVE-2018-16727 2024-11-21 12:53 2018-09-13 Show GitHub Exploit DB Packet Storm
246478 5.4 MEDIUM
Network 		razorcms razorcms razorCMS 3.4.7 allows HTML injection via the description of the homepage within the settings component. CWE-79
Cross-site Scripting 		CVE-2018-16726 2024-11-21 12:53 2018-09-13 Show GitHub Exploit DB Packet Storm
246479 5.4 MEDIUM
Network 		dlink dir-600m_firmware D-Link DIR-600M devices allow XSS via the Hostname and Username fields in the Dynamic DNS Configuration page. CWE-79
Cross-site Scripting 		CVE-2018-16605 2024-11-21 12:53 2018-09-13 Show GitHub Exploit DB Packet Storm
246480 6.5 MEDIUM
Adjacent 		inteno dg400_firmware Inteno DG400 WU7U_ELION3.11.6-170614_1328 devices allow remote attackers to cause a denial of service (connectivity loss) via a series of packets with random MAC addresses, as demonstrated by macof. NVD-CWE-noinfo
CVE-2018-16950 2024-11-21 12:53 2018-09-12 Show GitHub Exploit DB Packet Storm