Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 16, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
258441 2.1 注意 VMware - VMware ESX の VMware Consolidated Backup コマンドラインユーティリティにおける重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2008-2101 2010-09-13 16:01 2008-08-29 Show GitHub Exploit DB Packet Storm
258442 9 危険 VMware - VMware ESXi および ESX の openwsman management service におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2008-2097 2010-09-13 16:01 2008-06-4 Show GitHub Exploit DB Packet Storm
258443 6.9 警告 VMware - Windows 上で稼働する複数の VMware 製品の VMCI における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2008-2099 2010-09-13 16:00 2008-05-30 Show GitHub Exploit DB Packet Storm
258444 6.9 警告 VMware - 複数の VMware 製品の HGFS におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2008-2098 2010-09-13 16:00 2008-05-30 Show GitHub Exploit DB Packet Storm
258445 5 警告 VMware - 複数の VMware 製品の VMware Authentication Daemon におけるサービス運用妨害 (DoS) の脆弱性 CWE-134
書式文字列の問題 		CVE-2009-4811 2010-09-13 16:00 2010-04-27 Show GitHub Exploit DB Packet Storm
258446 7.2 危険 VMware - Windows 上で稼働する複数の VMware 製品の OpenProcess 関数における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-3698 2010-09-13 15:59 2008-08-29 Show GitHub Exploit DB Packet Storm
258447 10 危険 VMware - 複数の VMware 製品の ActiveX コントロールにおける脆弱性 CWE-noinfo
情報不足 		CVE-2008-3696 2010-09-13 15:59 2008-08-28 Show GitHub Exploit DB Packet Storm
258448 10 危険 VMware - 複数の VMware 製品の ActiveX コントロールにおける脆弱性 CWE-noinfo
情報不足 		CVE-2008-3695 2010-09-13 15:59 2008-08-28 Show GitHub Exploit DB Packet Storm
258449 10 危険 VMware - 複数の VMware 製品の ActiveX コントロールにおける脆弱性 CWE-noinfo
情報不足 		CVE-2008-3694 2010-09-13 15:58 2008-08-28 Show GitHub Exploit DB Packet Storm
258450 10 危険 VMware - 複数の VMware 製品の ActiveX コントロールにおける脆弱性 CWE-noinfo
情報不足 		CVE-2008-3693 2010-09-13 15:58 2008-08-28 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 16, 2026, 4:13 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
246891 9.8 CRITICAL
Network 		deiser profields-project_custom_fields The DEISER "Profields - Project Custom Fields" app before 6.0.2 for Jira has Incorrect Access Control. NVD-CWE-noinfo
CVE-2018-16281 2024-11-21 12:52 2018-09-22 Show GitHub Exploit DB Packet Storm
246892 8.8 HIGH
Network 		moxa edr-810_firmware A command injection vulnerability in the web server functionality of Moxa EDR-810 V4.2 build 18041013 allows remote attackers to execute arbitrary OS commands with root privilege via the caname param… CWE-78
OS Command  		CVE-2018-16282 2024-11-21 12:52 2018-09-21 Show GitHub Exploit DB Packet Storm
246893 8.8 HIGH
Network 		matrix
debian 		synapse
debian_linux 		Matrix Synapse before 0.33.3.1 allows remote attackers to spoof events and possibly have unspecified other impacts by leveraging improper transaction and event signature validation. CWE-347
 Improper Verification of Cryptographic Signature 		CVE-2018-16515 2024-11-21 12:52 2018-09-19 Show GitHub Exploit DB Packet Storm
246894 6.5 MEDIUM
Adjacent 		qbeecam
swisscom 		qbee_multi-sensor_camera_firmware
swisscom_home_app
qbeecam 		The QBee MultiSensor Camera through 4.16.4 accepts unencrypted network traffic from clients (such as the QBee Cam application through 1.0.5 for Android and the Swisscom Home application up to 10.7.2 … CWE-319
Cleartext Transmission of Sensitive Information 		CVE-2018-16225 2024-11-21 12:52 2018-09-19 Show GitHub Exploit DB Packet Storm
246895 7.8 HIGH
Local 		jhead_project jhead The ProcessGpsInfo function of the gpsinfo.c file of jhead 3.00 may allow a remote attacker to cause a denial-of-service attack or unspecified other impact via a malicious JPEG file, because of incon… CWE-134
Use of Externally-Controlled Format String 		CVE-2018-16554 2024-11-21 12:52 2018-09-16 Show GitHub Exploit DB Packet Storm
246896 8.6 HIGH
Network 		lg supersign_cms LG SuperSign CMS allows reading of arbitrary files via signEzUI/playlist/edit/upload/..%2f URIs. CWE-200
Information Exposure 		CVE-2018-16288 2024-11-21 12:52 2018-09-15 Show GitHub Exploit DB Packet Storm
246897 9.8 CRITICAL
Network 		lg supersign_cms LG SuperSign CMS allows file upload via signEzUI/playlist/edit/upload/..%2f URIs. CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2018-16287 2024-11-21 12:52 2018-09-15 Show GitHub Exploit DB Packet Storm
246898 9.8 CRITICAL
Network 		lg supersign_cms LG SuperSign CMS allows authentication bypass because the CAPTCHA requirement is skipped if a captcha:pass cookie is sent, and because the PIN is limited to four digits. CWE-287
Improper Authentication 		CVE-2018-16286 2024-11-21 12:52 2018-09-15 Show GitHub Exploit DB Packet Storm
246899 5.3 MEDIUM
Adjacent 		o.bike smart_locker_firmware
obike-stationless_bike_sharing 		oBike relies on Hangzhou Luoping Smart Locker to lock bicycles, which allows attackers to bypass the locking mechanism by using Bluetooth Low Energy (BLE) to replay ciphertext based on a predictable … CWE-294
Authentication Bypass by Capture-replay  		CVE-2018-16242 2024-11-21 12:52 2018-09-15 Show GitHub Exploit DB Packet Storm
246900 6.5 MEDIUM
Network 		e107 e107 e107_admin/banlist.php in e107 2.1.8 allows SQL injection via the old_ip parameter. CWE-89
SQL Injection 		CVE-2018-16389 2024-11-21 12:52 2018-09-13 Show GitHub Exploit DB Packet Storm