Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 15, 2026, 2 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
258511	3.5	注意	オラクル	-	Oracle Fusion Middleware の Application Server Control コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-2381	2010-07-30 17:43	2010-07-13	Show	GitHub Exploit DB Packet Storm

258512	3.5	注意	オラクル	-	Oracle Fusion Middleware の Application Server Control コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0081	2010-07-30 17:42	2010-07-13	Show	GitHub Exploit DB Packet Storm

258513	4.3	警告	オラクル	-	Oracle Fusion Middleware の Wireless コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0835	2010-07-30 17:42	2010-07-13	Show	GitHub Exploit DB Packet Storm

258514	6.4	警告	オラクル	-	Oracle Fusion Middleware の WebLogic Server コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-2375	2010-07-30 17:42	2010-07-13	Show	GitHub Exploit DB Packet Storm

258515	9.3	危険	マイクロソフト	-	Microsoft Office Outlook における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-0266	2010-07-30 17:42	2010-07-13	Show	GitHub Exploit DB Packet Storm

258516	9.3	危険	マイクロソフト	-	Microsoft Office Access の FieldList の ActiveX コントロールにおける任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-1881	2010-07-30 17:41	2010-07-13	Show	GitHub Exploit DB Packet Storm

258517	9.3	危険	マイクロソフト	-	Microsoft Office Access の Microsoft Access Wizard Controls における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-0814	2010-07-30 17:41	2010-07-13	Show	GitHub Exploit DB Packet Storm

258518	2.1	注意	日立 CA Technologies	-	Windows 上で稼働する CA ARCserve Backup における重要な情報を取得される脆弱性	CWE-noinfo 情報不足	CVE-2010-2157	2010-07-29 18:57	2010-06-3	Show	GitHub Exploit DB Packet Storm

258519	3.5	注意	ターボリナックス Samba Project	-	Samba の smbd におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2010-0926	2010-07-29 18:57	2010-02-24	Show	GitHub Exploit DB Packet Storm

258520	4.3	警告	サイバートラスト株式会社 LibTIFF レッドハット	-	LibTIFF の TIFFVStripSize 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2010-2597	2010-07-28 19:31	2010-07-2	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 15, 2026, 4:10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
248811	9.8	CRITICAL Network	info-zip_project	zip	Info-ZIP Zip 3.0, when the -T and -TT command-line options are used, allows attackers to cause a denial of service (invalid free and application crash) or possibly have unspecified other impact becau…	CWE-416 Use After Free	CVE-2018-13410	2024-11-21 12:47	2018-07-7	Show	GitHub Exploit DB Packet Storm

248812	6.1	MEDIUM Network	jirafeau	jirafeau	An issue was discovered in Jirafeau before 3.4.1. The "search file by hash" form is affected by reflected XSS that could allow, by targeting an administrator, stealing a session and gaining administr…	CWE-79 Cross-site Scripting	CVE-2018-13409	2024-11-21 12:47	2018-07-7	Show	GitHub Exploit DB Packet Storm

248813	6.1	MEDIUM Network	jirafeau	jirafeau	An issue was discovered in Jirafeau before 3.4.1. The "search file by link" form is affected by reflected XSS that could allow, by targeting an administrator, stealing a session and gaining administr…	CWE-79 Cross-site Scripting	CVE-2018-13408	2024-11-21 12:47	2018-07-7	Show	GitHub Exploit DB Packet Storm

248814	4.9	MEDIUM Network	jirafeau	jirafeau	A CSRF issue was discovered in Jirafeau before 3.4.1. The "delete file" feature on the admin panel is not protected against automated requests and could be abused.	CWE-352 Origin Validation Error	CVE-2018-13407	2024-11-21 12:47	2018-07-7	Show	GitHub Exploit DB Packet Storm

248815	7.8	HIGH Local	linux canonical debian	linux_kernel ubuntu_linux debian_linux	An integer overflow in the uvesafb_setcmap function in drivers/video/fbdev/uvesafb.c in the Linux kernel before 4.17.4 could result in local attackers being able to crash the kernel or potentially el…	CWE-190 Integer Overflow or Wraparound	CVE-2018-13406	2024-11-21 12:47	2018-07-6	Show	GitHub Exploit DB Packet Storm

248816	7.8	HIGH Local	linux debian canonical fedoraproject redhat f5	linux_kernel debian_linux ubuntu_linux fedora enterprise_linux_desktop enterprise_linux_server_aus enterprise_linux_workstation enterprise_linux_server_tus enterprise_linux_se…	The inode_init_owner function in fs/inode.c in the Linux kernel through 3.16 allows local users to create files with an unintended group ownership, in a scenario where a directory is SGID to a certai…	CWE-269 Improper Privilege Management	CVE-2018-13405	2024-11-21 12:47	2018-07-6	Show	GitHub Exploit DB Packet Storm

248817	8.8	HIGH Network	fortinet	fortios	An external control of system vulnerability in FortiOS may allow an authenticated, regular user to change the routing settings of the device via connecting to the ZebOS component.	CWE-20 Improper Input Validation	CVE-2018-13371	2024-11-21 12:46	2020-04-2	Show	GitHub Exploit DB Packet Storm

248818	7.5	HIGH Network	easyappointments	easy\!appointments	Easy!Appointments 1.3.0 has a Missing Authorization issue allowing retrieval of hashed passwords and salts.	CWE-862 Missing Authorization	CVE-2018-13063	2024-11-21 12:46	2020-03-17	Show	GitHub Exploit DB Packet Storm

248819	6.5	MEDIUM Network	easyappointments	easy\!appointments	Easy!Appointments 1.3.0 has a Guessable CAPTCHA issue.	CWE-287 Improper Authentication	CVE-2018-13060	2024-11-21 12:46	2020-03-17	Show	GitHub Exploit DB Packet Storm

248820	6.5	MEDIUM Network	totolink	a3002ru_firmware	In TOTOLINK A3002RU 1.0.8, the router provides a page that allows the user to change their account name and password. This page, password.htm, contains JavaScript which is used to confirm the user kn…	CWE-922 Insecure Storage of Sensitive Information	CVE-2018-13313	2024-11-21 12:46	2020-02-25	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed