Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 16, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
258491	7.5	危険	The PHP Group アップル	-	PHP の safe_mode 実装におけるアクセス制限を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-1129	2010-09-8 15:49	2010-03-26	Show	GitHub Exploit DB Packet Storm

258492	4.4	警告	サイバートラスト株式会社 Todd C. Miller ターボリナックスレッドハット	-	sudo における権限昇格の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-0427	2010-09-8 15:49	2010-02-25	Show	GitHub Exploit DB Packet Storm

258493	6.6	警告	サイバートラスト株式会社レッドハット	-	QEMU-KVM の subpage MMIO initialization 機能における権限を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-2784	2010-09-7 15:51	2010-08-19	Show	GitHub Exploit DB Packet Storm

258494	6.6	警告	サイバートラスト株式会社レッドハット	-	QEMU-KVM のゲスト QXL ドライバポインタにおける権限を取得される脆弱性	CWE-20 不適切な入力確認	CVE-2010-0431	2010-09-7 15:50	2010-08-19	Show	GitHub Exploit DB Packet Storm

258495	6.6	警告	サイバートラスト株式会社レッドハット	-	複数のレッドハット製品などで利用される libspice のメモリ管理操作における権限を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-0429	2010-09-7 15:49	2010-08-19	Show	GitHub Exploit DB Packet Storm

258496	6.6	警告	サイバートラスト株式会社レッドハット	-	複数のレッドハット製品などで利用される libspice のゲスト QXL ドライバポインタにおける権限を取得される脆弱性	CWE-20 不適切な入力確認	CVE-2010-0428	2010-09-7 15:48	2010-08-19	Show	GitHub Exploit DB Packet Storm

258497	-	-	ワイズテクノロジー	-	Wyse ThinOS LPD サービスにバッファオーバーフローの脆弱性	-	-	2010-09-7 15:47	2010-08-17	Show	GitHub Exploit DB Packet Storm

258498	7.8	危険	日立	-	Hitachi Storage Command Suite 製品の組み込みデータベースにおけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	-	2010-09-7 15:45	2010-08-16	Show	GitHub Exploit DB Packet Storm

258499	7.8	危険	日立	-	JP1/Desktop Navigation 組み込みデータベースにおけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	-	2010-09-7 15:44	2010-08-16	Show	GitHub Exploit DB Packet Storm

258500	4.3	警告	Zabbix	-	Zabbix の formatQuery 関数におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-2790	2010-09-7 15:42	2010-06-9	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 16, 2026, 4:13 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
249051	6.1	MEDIUM Network	chartered_accountant_\	_auditor_website_project	PHP Scripts Mall Auditor Website 2.0.1 has XSS via the lastname or firstname parameter.	CWE-79 Cross-site Scripting	CVE-2018-13256	2024-11-21 12:46	2018-07-9	Show	GitHub Exploit DB Packet Storm

249052	7.5	HIGH Network	adbglobal	dv2210_firmware vv2220_firmware vv5522_firmware prg_av4202n_firmware	All ADB broadband gateways / routers based on the Epicentro platform are affected by a privilege escalation vulnerability where attackers can gain access to the command line interface (CLI) if previo…	CWE-732 Incorrect Permission Assignment for Critical Resource	CVE-2018-13110	2024-11-21 12:46	2018-07-6	Show	GitHub Exploit DB Packet Storm

249053	7.5	HIGH Network	adbglobal	dv2210_firmware vv2220_firmware vv5522_firmware prg_av4202n_firmware	All ADB broadband gateways / routers based on the Epicentro platform are affected by an authorization bypass vulnerability where attackers are able to access and manipulate settings within the web in…	CWE-863 Incorrect Authorization	CVE-2018-13109	2024-11-21 12:46	2018-07-6	Show	GitHub Exploit DB Packet Storm

249054	7.8	HIGH Local	adbglobal	dv2210_firmware vv2220_firmware vv5522_firmware prg_av4202n_firmware	All ADB broadband gateways / routers based on the Epicentro platform are affected by a local root jailbreak vulnerability where attackers are able to gain root access on the device, and extract furth…	NVD-CWE-noinfo	CVE-2018-13108	2024-11-21 12:46	2018-07-6	Show	GitHub Exploit DB Packet Storm

249055	7.5	HIGH Network	mercurial	mercurial	The mpatch_decode function in mpatch.c in Mercurial before 4.6.1 mishandles certain situations where there should be at least 12 bytes remaining after the current position in the patch data, but actu…	CWE-20 Improper Input Validation	CVE-2018-13348	2024-11-21 12:46	2018-07-6	Show	GitHub Exploit DB Packet Storm

249056	9.8	CRITICAL Network	mercurial	mercurial	mpatch.c in Mercurial before 4.6.1 mishandles integer addition and subtraction, aka OVE-20180430-0002.	CWE-190 Integer Overflow or Wraparound	CVE-2018-13347	2024-11-21 12:46	2018-07-6	Show	GitHub Exploit DB Packet Storm

249057	7.5	HIGH Network	mercurial	mercurial	The mpatch_apply function in mpatch.c in Mercurial before 4.6.1 incorrectly proceeds in cases where the fragment start is past the end of the original data, aka OVE-20180430-0004.	CWE-20 Improper Input Validation	CVE-2018-13346	2024-11-21 12:46	2018-07-6	Show	GitHub Exploit DB Packet Storm

249058	8.8	HIGH Network	gleeztech	gleez_cms	Gleez CMS 1.2.0 has CSRF, as demonstrated by a /page/add request.	CWE-352 Origin Validation Error	CVE-2018-13340	2024-11-21 12:46	2018-07-6	Show	GitHub Exploit DB Packet Storm

249059	6.1	MEDIUM Network	angular_redactor_project	angular_redactor	Imperavi Redactor 3 in Angular Redactor 1.1.6, when HTML content mode is used, allows stored XSS, as demonstrated by an onerror attribute of an IMG element, a related issue to CVE-2018-7035.	CWE-79 Cross-site Scripting	CVE-2018-13339	2024-11-21 12:46	2018-07-6	Show	GitHub Exploit DB Packet Storm

249060	9.8	CRITICAL Network	cyberark	endpoint_privilege_manager	In CyberArk Endpoint Privilege Manager (formerly Viewfinity), Privilege Escalation is possible if the attacker has one process that executes as Admin.	NVD-CWE-noinfo	CVE-2018-13052	2024-11-21 12:46	2018-07-6	Show	GitHub Exploit DB Packet Storm