Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":June 16, 2026, 10:01 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 258461 | 5 | 警告 | The PHP Group | - | PHP の phar 拡張における重要な情報を取得される脆弱性 |
CWE-134
書式文字列の問題 |
CVE-2010-2094 | 2010-08-18 18:26 | 2010-05-14 | Show | GitHub Exploit DB Packet Storm |
| 258462 | 7.5 | 危険 | The PHP Group | - | PHP の sqlite_single_query および sqlite_array_query 関数における任意のコードを実行される脆弱性 |
CWE-94
コード・インジェクション |
CVE-2010-1868 | 2010-08-18 18:26 | 2010-05-7 | Show | GitHub Exploit DB Packet Storm |
| 258463 | 7.5 | 危険 | The PHP Group | - | PHP の dechunk フィルタにおけるサービス運用妨害 (DoS) の脆弱性 |
CWE-189
数値処理の問題 |
CVE-2010-1866 | 2010-08-18 18:26 | 2010-05-2 | Show | GitHub Exploit DB Packet Storm |
| 258464 | 5 | 警告 | The PHP Group | - | PHP の chunk_split 関数における重要な情報を取得される脆弱性 |
CWE-200
情報漏えい |
CVE-2010-1862 | 2010-08-18 18:25 | 2010-05-4 | Show | GitHub Exploit DB Packet Storm |
| 258465 | 5 | 警告 | The PHP Group | - | PHP の addcslashes 関数における重要な情報を取得される脆弱性 |
CWE-200
情報漏えい |
CVE-2010-1864 | 2010-08-17 17:37 | 2010-05-3 | Show | GitHub Exploit DB Packet Storm |
| 258466 | 5 | 警告 | The PHP Group | - | PHP における重要な情報を取得される脆弱性 |
CWE-200
情報漏えい |
CVE-2010-2190 | 2010-08-17 17:36 | 2010-05-30 | Show | GitHub Exploit DB Packet Storm |
| 258467 | 6.4 | 警告 | The PHP Group | - | PHP における重要な情報を取得される脆弱性 |
CWE-119
バッファエラー |
CVE-2010-2191 | 2010-08-17 17:35 | 2010-05-31 | Show | GitHub Exploit DB Packet Storm |
| 258468 | 5 | 警告 | The PHP Group | - | PHP の Zend Engine における重要な情報を取得される脆弱性 |
CWE-200
情報漏えい |
CVE-2010-1914 | 2010-08-17 17:34 | 2010-05-8 | Show | GitHub Exploit DB Packet Storm |
| 258469 | 6.4 | 警告 | The PHP Group | - | PHP の sysvshm 拡張における任意のメモリアドレスを書かれる脆弱性 |
CWE-399
リソース管理の問題 |
CVE-2010-1861 | 2010-08-17 17:33 | 2010-05-5 | Show | GitHub Exploit DB Packet Storm |
| 258470 | 4.3 | 警告 | サイバートラスト株式会社 Mozilla Foundation レッドハット |
- | 複数の Mozilla 製品における重要な情報を取得される脆弱性 |
CWE-200
情報漏えい |
CVE-2010-0654 | 2010-08-16 18:57 | 2010-02-18 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:June 16, 2026, 4:13 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 247911 | 6.1 |
MEDIUM
Network |
osclass | osclass | Osclass 3.7.4 has XSS via the query string to index.php, a different vulnerability than CVE-2014-6280. |
CWE-79
Cross-site Scripting |
CVE-2018-14481 | 2024-11-21 12:49 | 2019-01-4 | Show | GitHub Exploit DB Packet Storm |
| 247912 | 10.0 |
CRITICAL
Network |
fasterxml debian oracle redhat |
jackson-databind debian_linux primavera_unifier banking_platform jdeveloper retail_merchandising_system webcenter_portal communications_billing_and_revenue_management financia… |
FasterXML jackson-databind 2.x before 2.9.7 might allow remote attackers to conduct server-side request forgery (SSRF) attacks by leveraging failure to block the axis2-jaxws class from polymorphic de… |
CWE-918
Server-Side Request Forgery (SSRF) |
CVE-2018-14721 | 2024-11-21 12:49 | 2019-01-3 | Show | GitHub Exploit DB Packet Storm |
| 247913 | 9.8 |
CRITICAL
Network |
fasterxml debian oracle redhat |
jackson-databind debian_linux primavera_unifier banking_platform jdeveloper retail_merchandising_system webcenter_portal communications_billing_and_revenue_management financia… |
FasterXML jackson-databind 2.x before 2.9.7 might allow attackers to conduct external XML entity (XXE) attacks by leveraging failure to block unspecified JDK classes from polymorphic deserialization. |
CWE-611 CWE-502 XXE Deserialization of Untrusted Data |
CVE-2018-14720 | 2024-11-21 12:49 | 2019-01-3 | Show | GitHub Exploit DB Packet Storm |
| 247914 | 9.8 |
CRITICAL
Network |
fasterxml debian oracle redhat netapp |
jackson-databind debian_linux primavera_unifier primavera_p6_enterprise_project_portfolio_management database_server banking_platform jdeveloper retail_merchandising_system we… |
FasterXML jackson-databind 2.x before 2.9.7 might allow remote attackers to execute arbitrary code by leveraging failure to block the blaze-ds-opt and blaze-ds-core classes from polymorphic deseriali… |
CWE-502
Deserialization of Untrusted Data |
CVE-2018-14719 | 2024-11-21 12:49 | 2019-01-3 | Show | GitHub Exploit DB Packet Storm |
| 247915 | 9.8 |
CRITICAL
Network |
fasterxml debian oracle netapp redhat |
jackson-databind debian_linux primavera_unifier jd_edwards_enterpriseone_tools primavera_p6_enterprise_project_portfolio_management banking_platform jdeveloper retail_merchandisi… |
FasterXML jackson-databind 2.x before 2.9.7 might allow remote attackers to execute arbitrary code by leveraging failure to block the slf4j-ext class from polymorphic deserialization. |
CWE-502
Deserialization of Untrusted Data |
CVE-2018-14718 | 2024-11-21 12:49 | 2019-01-3 | Show | GitHub Exploit DB Packet Storm |
| 247916 | 5.4 |
MEDIUM
Network |
mondula | multi_step_form | The Mondula Multi Step Form plugin before 1.2.8 for WordPress has multiple stored XSS via wp-admin/admin-ajax.php. |
CWE-79
Cross-site Scripting |
CVE-2018-14846 | 2024-11-21 12:49 | 2018-12-21 | Show | GitHub Exploit DB Packet Storm |
| 247917 | 6.3 |
MEDIUM
Adjacent |
samsung | galaxy_s6_firmware | Buffer overflow in dhd_bus_flow_ring_create_response in drivers/net/wireless/bcmdhd4358/dhd_pcie.c in the bcmdhd4358 Wi-Fi driver on the Samsung Galaxy S6 SM-G920F G920FXXU5EQH7 allow an attacker (wh… |
CWE-119
Incorrect Access of Indexable Resource ('Range Error') |
CVE-2018-14856 | 2024-11-21 12:49 | 2018-12-18 | Show | GitHub Exploit DB Packet Storm |
| 247918 | 6.3 |
MEDIUM
Adjacent |
samsung | galaxy_s6_firmware | Buffer overflow in dhd_bus_flow_ring_flush_response in drivers/net/wireless/bcmdhd4358/dhd_pcie.c in the bcmdhd4358 Wi-Fi driver on the Samsung Galaxy S6 allow an attacker (who has obtained code exec… |
CWE-119
Incorrect Access of Indexable Resource ('Range Error') |
CVE-2018-14855 | 2024-11-21 12:49 | 2018-12-18 | Show | GitHub Exploit DB Packet Storm |
| 247919 | 6.3 |
MEDIUM
Adjacent |
samsung | galaxy_s6_firmware | Buffer overflow in dhd_bus_flow_ring_delete_response in drivers/net/wireless/bcmdhd4358/dhd_pcie.c in the bcmdhd4358 Wi-Fi driver on the Samsung Galaxy S6 SM-G920F G920FXXU5EQH7 allow an attacker (wh… |
CWE-119
Incorrect Access of Indexable Resource ('Range Error') |
CVE-2018-14854 | 2024-11-21 12:49 | 2018-12-18 | Show | GitHub Exploit DB Packet Storm |
| 247920 | 4.3 |
MEDIUM
Adjacent |
samsung | galaxy_s6_firmware | A NULL pointer dereference in dhd_prot_txdata_write_flush in drivers/net/wireless/bcmdhd4358/dhd_msgbuf.c in the bcmdhd4358 Wi-Fi driver on the Samsung Galaxy S6 SM-G920F G920FXXU5EQH7 allows an atta… |
CWE-476
NULL Pointer Dereference |
CVE-2018-14853 | 2024-11-21 12:49 | 2018-12-18 | Show | GitHub Exploit DB Packet Storm |