Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 9, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
258561	9.3	危険	マイクロソフト	-	Microsoft Windows の kernel における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2009-2514	2010-01-4 15:24	2009-11-10	Show	GitHub Exploit DB Packet Storm

258562	6.8	警告	マイクロソフト	-	Microsoft Windows の kernel の Graphics Device Interface (GDI) における権限を取得される脆弱性	CWE-20 不適切な入力確認	CVE-2009-2513	2010-01-4 15:24	2009-11-10	Show	GitHub Exploit DB Packet Storm

258563	6.8	警告	マイクロソフト	-	Microsoft Windows の kernel における権限を取得される脆弱性	CWE-20 不適切な入力確認	CVE-2009-1127	2010-01-4 15:24	2009-11-10	Show	GitHub Exploit DB Packet Storm

258564	10	危険	マイクロソフト	-	Microsoft Windows の License Logging Server (llssrv.exe) における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2009-2523	2010-01-4 15:24	2009-11-10	Show	GitHub Exploit DB Packet Storm

258565	9.3	危険	マイクロソフト	-	Microsoft Windows の Web Services on Devices API (WSDAPI) における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2009-2512	2010-01-4 15:23	2009-11-10	Show	GitHub Exploit DB Packet Storm

258566	10	危険	アップル VMware サン・マイクロシステムズ	-	Sun Java SE の Provider クラスにおける詳細不明な脆弱性	CWE-noinfo 情報不足	CVE-2009-2722	2010-01-4 14:56	2009-08-10	Show	GitHub Exploit DB Packet Storm

258567	10	危険	アップル VMware サン・マイクロシステムズ	-	Sun Java SE の Provider クラスにおける詳細不明な脆弱性	CWE-noinfo 情報不足	CVE-2009-2723	2010-01-4 14:55	2009-08-10	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 9, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
248541	8.8	HIGH Network	foxitsoftware	foxit_reader phantompdf	This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.0.29935. User interaction is required to exploit this vulnerability in that the ta…	CWE-416 Use After Free	CVE-2018-11618	2024-11-21 12:43	2018-08-1	Show	GitHub Exploit DB Packet Storm

248542	8.8	HIGH Network	foxitsoftware	foxit_reader phantompdf	This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.0.29935. User interaction is required to exploit this vulnerability in that the ta…	CWE-416 Use After Free	CVE-2018-11617	2024-11-21 12:43	2018-08-1	Show	GitHub Exploit DB Packet Storm

248543	7.5	HIGH Network	intuit	lacerte	Intuit Lacerte 2017 for Windows in a client/server environment transfers the entire customer list in cleartext over SMB, which allows attackers to (1) obtain sensitive information by sniffing the net…	CWE-319 Cleartext Transmission of Sensitive Information	CVE-2018-11338	2024-11-21 12:43	2018-07-31	Show	GitHub Exploit DB Packet Storm

248544	9.8	CRITICAL Network	asus	hg100_firmware	ASUS HG100 devices with firmware before 1.05.12 allow unauthenticated access, leading to remote command execution.	CWE-287 Improper Authentication	CVE-2018-11491	2024-11-21 12:43	2018-07-25	Show	GitHub Exploit DB Packet Storm

248545	7.5	HIGH Network	siemens	dnp3_tcp_firmware iec_61850_firmware iec104_firmware modbus_tcp_firmware profinet_io_firmware cp100_firmware cp200_firmware cp300_firmware	A vulnerability has been identified in Firmware variant IEC 61850 for EN100 Ethernet module (All versions < V4.33), Firmware variant PROFINET IO for EN100 Ethernet module (All versions), Firmware var…	CWE-20 Improper Input Validation	CVE-2018-11452	2024-11-21 12:43	2018-07-24	Show	GitHub Exploit DB Packet Storm

248546	7.5	HIGH Network	siemens	dnp3_tcp_firmware iec_61850_firmware iec104_firmware modbus_tcp_firmware profinet_io_firmware cp100_firmware cp200_firmware cp300_firmware	A vulnerability has been identified in Firmware variant IEC 61850 for EN100 Ethernet module (All versions < V4.33), Firmware variant PROFINET IO for EN100 Ethernet module (All versions), Firmware var…	CWE-20 Improper Input Validation	CVE-2018-11451	2024-11-21 12:43	2018-07-24	Show	GitHub Exploit DB Packet Storm

248547	9.8	CRITICAL Network	apache	openwhisk	In Docker Skeleton Runtime for Apache OpenWhisk, a Docker action inheriting the Docker tag openwhisk/dockerskeleton:1.3.0 (or earlier) may allow an attacker to replace the user function inside the co…	NVD-CWE-noinfo	CVE-2018-11757	2024-11-21 12:43	2018-07-24	Show	GitHub Exploit DB Packet Storm

248548	9.8	CRITICAL Network	apache	openwhisk	In PHP Runtime for Apache OpenWhisk, a Docker action inheriting one of the Docker tags openwhisk/action-php-v7.2:1.0.0 or openwhisk/action-php-v7.1:1.0.1 (or earlier) may allow an attacker to replace…	NVD-CWE-noinfo	CVE-2018-11756	2024-11-21 12:43	2018-07-24	Show	GitHub Exploit DB Packet Storm

248549	9.8	CRITICAL Network	zohocorp	manageengine_desktop_central	An issue was discovered in Zoho ManageEngine Desktop Central before 100230. There is unauthenticated remote access to all log files of a Desktop Central instance containing critical information (priv…	CWE-532 Inclusion of Sensitive Information in Log Files	CVE-2018-11716	2024-11-21 12:43	2018-07-16	Show	GitHub Exploit DB Packet Storm

248550	9.8	CRITICAL Network	zohocorp	manageengine_desktop_central	An issue was discovered in Zoho ManageEngine Desktop Central before 100251. By leveraging access to a log file, a context-dependent attacker can obtain (depending on the modules configured) the Base6…	CWE-532 Inclusion of Sensitive Information in Log Files	CVE-2018-11717	2024-11-21 12:43	2018-07-16	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed