Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 30, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
258561 7.8 危険 シスコシステムズ - Cisco Wireless LAN Controller におけるメモリリークの脆弱性 CWE-399
リソース管理の問題 		CVE-2009-1165 2011-06-9 10:26 2009-07-27 Show GitHub Exploit DB Packet Storm
258562 7.8 危険 シスコシステムズ - Cisco Wireless LAN Controller の管理用 Web インターフェースにおけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2009-1164 2011-06-9 10:26 2009-07-27 Show GitHub Exploit DB Packet Storm
258563 7.8 危険 シスコシステムズ - Cisco Physical Access Gateway におけるメモリリークの脆弱性 CWE-399
リソース管理の問題 		CVE-2009-1163 2011-06-9 10:25 2009-06-24 Show GitHub Exploit DB Packet Storm
258564 6.8 警告 Apache Software Foundation - Apache Archiva における権限を取得される脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-4408 2011-06-9 10:23 2010-12-15 Show GitHub Exploit DB Packet Storm
258565 7.2 危険 Apache Software Foundation - Apache mod_fcgid の apr_status_t fcgid_header_bucket_read 関数における脆弱性 CWE-189
数値処理の問題 		CVE-2010-3872 2011-06-9 10:22 2010-06-8 Show GitHub Exploit DB Packet Storm
258566 4.3 警告 Apache Software Foundation - Apache Struts における複数のクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-6682 2011-06-9 10:21 2009-04-9 Show GitHub Exploit DB Packet Storm
258567 4.3 警告 Apache Software Foundation - Apache Struts におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-2025 2011-06-9 10:20 2009-04-9 Show GitHub Exploit DB Packet Storm
258568 4.3 警告 Stichting NLnet Labs - Unbound DNS リゾルバにサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2011-1922 2011-06-8 11:55 2011-05-26 Show GitHub Exploit DB Packet Storm
258569 7.8 危険 ERLANG - Erlang/OTP SSH ライブラリで生成される乱数が推測可能な問題 CWE-310
暗号の問題 		CVE-2011-0766 2011-06-8 11:54 2011-05-26 Show GitHub Exploit DB Packet Storm
258570 10 危険 Google - Google Chrome におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2010-3415 2011-06-8 11:52 2010-09-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:July 1, 2026, 4:27 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
252701 6.1 MEDIUM
Network 		public_knowledge_project open_monograph_press Cross-site scripting (XSS) vulnerability in templates/frontend/pages/searchResults.tpl in Public Knowledge Project (PKP) Open Monograph Press (OMP) v1.2.0 through 3.1.1-2 before 3.1.1-3 allows remote… CWE-79
Cross-site Scripting 		CVE-2018-12588 2024-11-21 12:45 2018-06-20 Show GitHub Exploit DB Packet Storm
252702 3.1 LOW
Physics 		dropbox dropbox An issue was discovered in the com.dropbox.android application 98.2.2 for Android. The FingerprintManager class for Biometric validation allows authentication bypass through the callback method from … CWE-287
Improper Authentication 		CVE-2018-12445 2024-11-21 12:45 2018-06-20 Show GitHub Exploit DB Packet Storm
252703 8.8 HIGH
Network 		codenx shopnx An issue was discovered in ShopNx through 2017-11-17. The vulnerability allows a remote attacker to upload any malicious file to a Node.js application. An attacker can upload a malicious HTML file th… CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2018-12519 2024-11-21 12:45 2018-06-20 Show GitHub Exploit DB Packet Storm
252704 6.5 MEDIUM
Network 		akcms_project akcms An issue was discovered in AKCMS 6.1. CSRF can delete an article via an admincp deleteitem action to index.php. CWE-352
 Origin Validation Error 		CVE-2018-12583 2024-11-21 12:45 2018-06-20 Show GitHub Exploit DB Packet Storm
252705 8.8 HIGH
Network 		akcms_project akcms An issue was discovered in AKCMS 6.1. CSRF can add an admin account via a /index.php?file=account&action=manageaccounts&job=newaccount URI. CWE-352
 Origin Validation Error 		CVE-2018-12582 2024-11-21 12:45 2018-06-20 Show GitHub Exploit DB Packet Storm
252706 6.1 MEDIUM
Network 		dragonbyte-tech vbsecurity library/DBTech/Security/Action/Sessions.php in DragonByte vBSecurity 3.x through 3.3.0 for vBulletin 3 and vBulletin 4 allows self-XSS via $session['user_agent'] in the "Login Sessions" feature. CWE-79
Cross-site Scripting 		CVE-2018-12580 2024-11-21 12:45 2018-06-20 Show GitHub Exploit DB Packet Storm
252707 9.8 CRITICAL
Network 		sam2p_project sam2p There is a heap-based buffer overflow in bmp_compress1_row in appliers.cpp in sam2p 0.49.4 that leads to a denial of service or possibly unspecified other impact. CWE-787
 Out-of-bounds Write 		CVE-2018-12578 2024-11-21 12:45 2018-06-20 Show GitHub Exploit DB Packet Storm
252708 8.8 HIGH
Network 		linaro
debian 		lava
debian_linux 		An issue was discovered in Linaro LAVA before 2018.5.post1. Because of use of yaml.load() instead of yaml.safe_load() when parsing user data, remote code execution can occur. CWE-20
 Improper Input Validation  		CVE-2018-12565 2024-11-21 12:45 2018-06-19 Show GitHub Exploit DB Packet Storm
252709 6.5 MEDIUM
Network 		linaro
debian 		lava
debian_linux 		An issue was discovered in Linaro LAVA before 2018.5.post1. Because of support for URLs in the submit page, a user can forge an HTTP request that will force lava-server-gunicorn to return any file on… CWE-20
 Improper Input Validation  		CVE-2018-12564 2024-11-21 12:45 2018-06-19 Show GitHub Exploit DB Packet Storm
252710 6.5 MEDIUM
Network 		linaro lava An issue was discovered in Linaro LAVA before 2018.5.post1. Because of support for file: URLs, a user can force lava-server-gunicorn to download any file from the filesystem if it's readable by lavas… CWE-20
 Improper Input Validation  		CVE-2018-12563 2024-11-21 12:45 2018-06-19 Show GitHub Exploit DB Packet Storm