Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 14, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
258581 9.3 危険 アドビシステムズ - Adobe Shockwave Player の iml32.dll における任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2010-1281 2010-05-31 18:26 2010-05-11 Show GitHub Exploit DB Packet Storm
258582 9.3 危険 アドビシステムズ - Adobe Shockwave Player における任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2010-1280 2010-05-31 18:26 2010-05-11 Show GitHub Exploit DB Packet Storm
258583 9.3 危険 アドビシステムズ - Adobe Shockwave Player におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2010-0987 2010-05-31 18:26 2010-05-11 Show GitHub Exploit DB Packet Storm
258584 9.3 危険 アドビシステムズ - Adobe Shockwave Player における任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2010-0986 2010-05-31 18:26 2010-05-11 Show GitHub Exploit DB Packet Storm
258585 9.3 危険 アドビシステムズ - Adobe Shockwave Player における整数オーバーフローの脆弱性 CWE-189
数値処理の問題
CVE-2010-0130 2010-05-28 18:44 2010-05-11 Show GitHub Exploit DB Packet Storm
258586 9.3 危険 アドビシステムズ - Adobe Shockwave Player における整数オーバーフローの脆弱性 CWE-189
数値処理の問題
CVE-2010-0129 2010-05-28 18:43 2010-05-11 Show GitHub Exploit DB Packet Storm
258587 9.3 危険 アドビシステムズ - Adobe Shockwave Player および Adobe Director における任意のコードを実行される脆弱性 CWE-189
数値処理の問題
CVE-2010-0128 2010-05-28 18:43 2010-05-11 Show GitHub Exploit DB Packet Storm
258588 9.3 危険 アドビシステムズ - Adobe Shockwave Player における任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2010-0127 2010-05-28 18:43 2010-05-11 Show GitHub Exploit DB Packet Storm
258589 9.3 危険 マイクロソフト - 複数の Microsoft 製品の VBE6.DLL における整数オーバーフローの脆弱性 CWE-94
コード・インジェクション
CVE-2010-0815 2010-05-28 18:43 2010-05-11 Show GitHub Exploit DB Packet Storm
258590 9.3 危険 マイクロソフト - 複数の Microsoft 製品の inetcomm.dll における整数オーバーフローの脆弱性 CWE-189
数値処理の問題
CVE-2010-0816 2010-05-28 18:43 2010-05-11 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 14, 2026, 4:12 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
247241 6.1 MEDIUM
Network
btiteam xbtit The newsfeed (aka /index.php?page=viewnews) in BTITeam XBTIT 2.5.4 has stored XSS via the title of a news item. This is also exploitable via CSRF. CWE-352
CWE-79
 Origin Validation Error
Cross-site Scripting
CVE-2018-15677 2024-11-21 12:51 2018-09-6 Show GitHub Exploit DB Packet Storm
247242 5.3 MEDIUM
Network
btiteam xbtit An issue was discovered in BTITeam XBTIT. By using String.replace and eval, it is possible to bypass the includes/crk_protection.php anti-XSS mechanism that looks for a number of dangerous fingerprin… CWE-79
Cross-site Scripting
CVE-2018-15676 2024-11-21 12:51 2018-09-6 Show GitHub Exploit DB Packet Storm
247243 7.5 HIGH
Network
argussurveillance dvr Argus Surveillance DVR 4.0.0.0 devices allow Unauthenticated Directory Traversal, leading to File Disclosure via a ..%2F in the WEBACCOUNT.CGI RESULTPAGE parameter. CWE-22
Path Traversal
CVE-2018-15745 2024-11-21 12:51 2018-08-31 Show GitHub Exploit DB Packet Storm
247244 9.8 CRITICAL
Network
broadcom release_automation Insecure deserialization of a specially crafted serialized object, in CA Release Automation 6.5 and earlier, allows attackers to potentially execute arbitrary code. CWE-502
 Deserialization of Untrusted Data
CVE-2018-15691 2024-11-21 12:51 2018-08-30 Show GitHub Exploit DB Packet Storm
247245 7.8 HIGH
Local
manjaro manjaro_linux An issue was discovered in manjaro-update-system.sh in manjaro-system 20180716-1 on Manjaro Linux. A local attacker can install or remove arbitrary packages and package repositories potentially conta… CWE-269
 Improper Privilege Management
CVE-2018-15912 2024-11-21 12:51 2018-08-30 Show GitHub Exploit DB Packet Storm
247246 6.5 MEDIUM
Adjacent
technicolor tc8305c_firmware Technicolor (formerly RCA) TC8305C devices allow remote attackers to cause a denial of service (networking outage) via a flood of random MAC addresses, as demonstrated by macof. NOTE: this might over… CWE-400
 Uncontrolled Resource Consumption
CVE-2018-15907 2024-11-21 12:51 2018-08-30 Show GitHub Exploit DB Packet Storm
247247 5.5 MEDIUM
Local
qemu qemu qemu-seccomp.c in QEMU might allow local OS guest users to cause a denial of service (guest crash) by leveraging mishandling of the seccomp policy for threads other than the main thread. NVD-CWE-noinfo
CVE-2018-15746 2024-11-21 12:51 2018-08-30 Show GitHub Exploit DB Packet Storm
247248 6.1 MEDIUM
Network
isweb isweb CMS ISWEB 3.5.3 has XSS via the ordineRis, sezioneRicerca, or oggettiRicerca parameter to index.php. CWE-79
Cross-site Scripting
CVE-2018-15562 2024-11-21 12:51 2018-08-30 Show GitHub Exploit DB Packet Storm
247249 9.8 CRITICAL
Network
grafana
redhat
grafana
ceph_storage
Grafana 2.x, 3.x, and 4.x before 4.6.4 and 5.x before 5.2.3 allows authentication bypass because an attacker can generate a valid "remember me" cookie knowing only a username of an LDAP or OAuth user. CWE-287
Improper Authentication
CVE-2018-15727 2024-11-21 12:51 2018-08-30 Show GitHub Exploit DB Packet Storm
247250 9.8 CRITICAL
Network
joomla joomla\! An issue was discovered in Joomla! before 3.8.12. Inadequate checks in the InputFilter class could allow specifically prepared phar files to pass the upload filter. CWE-434
 Unrestricted Upload of File with Dangerous Type 
CVE-2018-15882 2024-11-21 12:51 2018-08-29 Show GitHub Exploit DB Packet Storm