Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 9, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
258561 9.3 危険 マイクロソフト - Microsoft Windows の kernel における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2009-2514 2010-01-4 15:24 2009-11-10 Show GitHub Exploit DB Packet Storm
258562 6.8 警告 マイクロソフト - Microsoft Windows の kernel の Graphics Device Interface (GDI) における権限を取得される脆弱性 CWE-20
不適切な入力確認 		CVE-2009-2513 2010-01-4 15:24 2009-11-10 Show GitHub Exploit DB Packet Storm
258563 6.8 警告 マイクロソフト - Microsoft Windows の kernel における権限を取得される脆弱性 CWE-20
不適切な入力確認 		CVE-2009-1127 2010-01-4 15:24 2009-11-10 Show GitHub Exploit DB Packet Storm
258564 10 危険 マイクロソフト - Microsoft Windows の License Logging Server (llssrv.exe) における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2009-2523 2010-01-4 15:24 2009-11-10 Show GitHub Exploit DB Packet Storm
258565 9.3 危険 マイクロソフト - Microsoft Windows の Web Services on Devices API (WSDAPI) における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2009-2512 2010-01-4 15:23 2009-11-10 Show GitHub Exploit DB Packet Storm
258566 10 危険 アップル
VMware
サン・マイクロシステムズ		 - Sun Java SE の Provider クラスにおける詳細不明な脆弱性 CWE-noinfo
情報不足 		CVE-2009-2722 2010-01-4 14:56 2009-08-10 Show GitHub Exploit DB Packet Storm
258567 10 危険 アップル
VMware
サン・マイクロシステムズ		 - Sun Java SE の Provider クラスにおける詳細不明な脆弱性 CWE-noinfo
情報不足 		CVE-2009-2723 2010-01-4 14:55 2009-08-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 9, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
246881 6.1 MEDIUM
Adjacent 		atlassian cloudtoken Unauthenticated access to cloudtoken daemon on Linux via network from version 0.1.1 before version 0.1.24 allows attackers on the same subnet to gain temporary AWS credentials for the users' roles. NVD-CWE-noinfo
CVE-2018-13390 2024-11-21 12:47 2018-08-11 Show GitHub Exploit DB Packet Storm
246882 9.8 CRITICAL
Network 		spirton universal_media_server In Universal Media Server (UMS) 7.1.0, the XML parsing engine for SSDP/UPnP functionality is vulnerable to an XML External Entity Processing (XXE) attack. Remote, unauthenticated attackers can use th… CWE-611
XXE 		CVE-2018-13416 2024-11-21 12:47 2018-08-4 Show GitHub Exploit DB Packet Storm
246883 8.1 HIGH
Network 		atlassian sourcetree There was an argument injection vulnerability in Sourcetree for Windows via filenames in Mercurial repositories. An attacker with permission to commit to a Mercurial repository linked in Sourcetree f… CWE-88
Argument Injection 		CVE-2018-13386 2024-11-21 12:47 2018-07-24 Show GitHub Exploit DB Packet Storm
246884 9.8 CRITICAL
Network 		atlassian sourcetree There was an argument injection vulnerability in Sourcetree for macOS via filenames in Mercurial repositories. An attacker with permission to commit to a Mercurial repository linked in Sourcetree for… CWE-88
Argument Injection 		CVE-2018-13385 2024-11-21 12:47 2018-07-24 Show GitHub Exploit DB Packet Storm
246885 6.1 MEDIUM
Network 		atlassian jira
jira_server 		The IncomingMailServers resource in Atlassian JIRA Server before version 7.6.7, from version 7.7.0 before version 7.7.5, from version 7.8.0 before version 7.8.5, from version 7.9.0 before version 7.9… CWE-79
Cross-site Scripting 		CVE-2018-13387 2024-11-21 12:47 2018-07-16 Show GitHub Exploit DB Packet Storm
246886 5.5 MEDIUM
Local 		nagios nagios_core qh_core in Nagios Core 4.4.1 and earlier is prone to a NULL pointer dereference vulnerability, which allows attackers to cause a local denial-of-service condition by sending a crafted payload to the … CWE-476
 NULL Pointer Dereference 		CVE-2018-13458 2024-11-21 12:47 2018-07-13 Show GitHub Exploit DB Packet Storm
246887 5.5 MEDIUM
Local 		nagios nagios_core qh_echo in Nagios Core 4.4.1 and earlier is prone to a NULL pointer dereference vulnerability, which allows attackers to cause a local denial-of-service condition by sending a crafted payload to the … CWE-476
 NULL Pointer Dereference 		CVE-2018-13457 2024-11-21 12:47 2018-07-13 Show GitHub Exploit DB Packet Storm
246888 5.5 MEDIUM
Local 		nagios nagios qh_help in Nagios Core version 4.4.1 and earlier is prone to a NULL pointer dereference vulnerability, which allows attacker to cause a local denial-of-service condition by sending a crafted payload … CWE-476
 NULL Pointer Dereference 		CVE-2018-13441 2024-11-21 12:47 2018-07-13 Show GitHub Exploit DB Packet Storm
246889 4.7 MEDIUM
Network 		atlassian confluence The attachment resource in Atlassian Confluence before version 6.6.1 allows remote attackers to spoof web content in the Mozilla Firefox Browser through attachments that have a content-type of applic… CWE-20
 Improper Input Validation  		CVE-2018-13389 2024-11-21 12:47 2018-07-10 Show GitHub Exploit DB Packet Storm
246890 5.4 MEDIUM
Network 		atlassian fisheye
crucible 		The review attachment resource in Atlassian Fisheye and Crucible before version 4.5.3 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in … CWE-79
Cross-site Scripting 		CVE-2018-13388 2024-11-21 12:47 2018-07-10 Show GitHub Exploit DB Packet Storm