Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":July 1, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
258521 5.8 警告 アップル - Apple Mac OS X の Certificate Trust Policy コンポーネントにおける SSL サーバーを偽造される脆弱性 CWE-20
不適切な入力確認
CVE-2011-0199 2011-07-5 09:07 2011-06-24 Show GitHub Exploit DB Packet Storm
258522 6.8 警告 アップル - Apple Mac OS X の Apple Type Services におけるヒープベースのバッファーオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2011-0198 2011-07-5 09:03 2011-06-24 Show GitHub Exploit DB Packet Storm
258523 2.1 注意 アップル - Apple Mac OS X の App Store における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2011-0197 2011-07-5 09:02 2011-06-24 Show GitHub Exploit DB Packet Storm
258524 7.8 危険 アップル - Apple Mac OS X の AirPort におけるサービス運用妨害 (out-of-bounds read および、リブート) の脆弱性 CWE-399
リソース管理の問題
CVE-2011-0196 2011-07-5 09:01 2011-06-24 Show GitHub Exploit DB Packet Storm
258525 7.8 危険 Linux - Linux kernel の dccp_parse_options 関数における整数アンダーフローの脆弱性 CWE-189
数値処理の問題
CVE-2011-1770 2011-07-4 08:39 2011-05-18 Show GitHub Exploit DB Packet Storm
258526 3.5 注意 ターボリナックス
Timo Sirainen
- Dovecot におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2010-3779 2011-07-4 08:36 2010-10-2 Show GitHub Exploit DB Packet Storm
258527 5.5 警告 ターボリナックス
Timo Sirainen
- Dovecot の plugins/acl/acl-backend-vfile.c におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2010-3706 2011-07-4 08:33 2010-10-2 Show GitHub Exploit DB Packet Storm
258528 6.4 警告 ターボリナックス
Timo Sirainen
- Dovecot の ACL プラグインにおけるメールボックスを読まれる脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2010-3304 2011-07-4 08:32 2010-07-24 Show GitHub Exploit DB Packet Storm
258529 5.8 警告 レッドハット - TigerVNC の vncviewer コンポネント内にある CSecurityTLS::processMsg 関数における TLS VNC サーバを偽造される脆弱性 CWE-20
不適切な入力確認
CVE-2011-1775 2011-07-4 08:30 2011-05-26 Show GitHub Exploit DB Packet Storm
258530 9.3 危険 アドビシステムズ - Adobe Shockwave Player における任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2011-2128 2011-07-1 15:32 2011-06-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:July 1, 2026, 4:27 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
254681 8.8 HIGH
Network
digitalguardian management_console Digital Guardian Management Console 7.1.2.0015 allows authenticated remote code execution because of Arbitrary File Upload functionality. CWE-434
 Unrestricted Upload of File with Dangerous Type 
CVE-2018-10173 2024-11-21 12:40 2018-04-21 Show GitHub Exploit DB Packet Storm
254682 7.8 HIGH
Local
vertiv watchdog_console Geist WatchDog Console 3.2.2 uses a weak ACL for the C:\ProgramData\WatchDog Console directory, which allows local users to modify configuration data by updating (1) config.xml or (2) servers.xml. CWE-269
 Improper Privilege Management
CVE-2018-10079 2024-11-21 12:40 2018-04-21 Show GitHub Exploit DB Packet Storm
254683 4.8 MEDIUM
Network
vertiv watchdog_console Cross-site scripting (XSS) vulnerability in Geist WatchDog Console 3.2.2 allows remote authenticated administrators to inject arbitrary web script or HTML via a server description. CWE-79
Cross-site Scripting
CVE-2018-10078 2024-11-21 12:40 2018-04-21 Show GitHub Exploit DB Packet Storm
254684 4.9 MEDIUM
Network
vertiv watchdog_console XML external entity (XXE) vulnerability in Geist WatchDog Console 3.2.2 allows remote authenticated administrators to read arbitrary files via crafted XML data. CWE-611
XXE
CVE-2018-10077 2024-11-21 12:40 2018-04-21 Show GitHub Exploit DB Packet Storm
254685 8.8 HIGH
Network
phpmyadmin phpmyadmin phpMyAdmin 4.8.0 before 4.8.0-1 has CSRF, allowing an attacker to execute arbitrary SQL statements, related to js/db_operations.js, js/tbl_operations.js, libraries/classes/Operations.php, and sql.php. CWE-352
 Origin Validation Error
CVE-2018-10188 2024-11-21 12:40 2018-04-19 Show GitHub Exploit DB Packet Storm
254686 4.8 MEDIUM
Network
d-link dir-615_t1_firmware D-Link DIR-615 T1 devices allow XSS via the Add User feature. CWE-79
Cross-site Scripting
CVE-2018-10110 2024-11-21 12:40 2018-04-19 Show GitHub Exploit DB Packet Storm
254687 7.5 HIGH
Network
logmein lastpass LogMeIn LastPass through 4.15.0 allows remote attackers to cause a denial of service (browser hang) via an HTML document because the resource consumption of onloadwff.js grows with the number of INPU… CWE-400
 Uncontrolled Resource Consumption
CVE-2018-10193 2024-11-21 12:40 2018-04-18 Show GitHub Exploit DB Packet Storm
254688 9.8 CRITICAL
Network
mruby
debian
mruby
debian_linux
In versions of mruby up to and including 1.4.0, an integer overflow exists in src/vm.c::mrb_vm_exec() when handling OP_GETUPVAR in the presence of deep scope nesting, resulting in a use-after-free. A… CWE-190
 Integer Overflow or Wraparound
CVE-2018-10191 2024-11-21 12:40 2018-04-18 Show GitHub Exploit DB Packet Storm
254689 7.5 HIGH
Network
mautic mautic An issue was discovered in Mautic 1.x and 2.x before 2.13.0. It is possible to systematically emulate tracking cookies per contact due to tracking the contact by their auto-incremented ID. Thus, a th… CWE-200
Information Exposure
CVE-2018-10189 2024-11-21 12:40 2018-04-18 Show GitHub Exploit DB Packet Storm
254690 5.5 MEDIUM
Local
radare radare2 In radare2 2.5.0, there is a heap-based buffer over-read in the dalvik_op function (libr/anal/p/anal_dalvik.c). Remote attackers could leverage this vulnerability to cause a denial of service via a c… CWE-125
Out-of-bounds Read
CVE-2018-10187 2024-11-21 12:40 2018-04-18 Show GitHub Exploit DB Packet Storm