Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 16, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
258581	9.3	危険	シマンテック IBM	-	Autonomy KeyView の library におけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-0126	2010-08-24 18:41	2010-08-4	Show	GitHub Exploit DB Packet Storm

258582	9.3	危険	シマンテック IBM	-	Lotus 1-2-3 reader (wkssr.dll) の SpreadSheet における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-1524	2010-08-24 18:41	2010-08-4	Show	GitHub Exploit DB Packet Storm

258583	9.3	危険	シマンテック IBM	-	Lotus 1-2-3 reader (wkssr.dll) の SpreadSheet における任意のコードを実行される脆弱性	CWE-189 数値処理の問題	CVE-2010-1525	2010-08-24 18:41	2010-08-4	Show	GitHub Exploit DB Packet Storm

258584	9.3	危険	シマンテック IBM	-	Lotus 1-2-3 reader (wkssr.dll) の SpreadSheet におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-0133	2010-08-24 18:40	2010-08-4	Show	GitHub Exploit DB Packet Storm

258585	9.3	危険	シマンテック IBM	-	Lotus 1-2-3 reader (wkssr.dll) の SpreadSheet におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-0131	2010-08-24 18:40	2010-08-4	Show	GitHub Exploit DB Packet Storm

258586	4.3	警告	サイバートラスト株式会社 LibTIFF レッドハット	-	x86_64 プラットフォーム上で稼動する RHEL の LibTIFF におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2010-2598	2010-08-24 13:44	2010-07-8	Show	GitHub Exploit DB Packet Storm

258587	6.8	警告	アップルサイバートラスト株式会社 LibTIFF レッドハット	-	LibTIFF の FAX3 デコーダの Fax3SetupState 関数における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2010-1411	2010-08-24 13:44	2010-06-10	Show	GitHub Exploit DB Packet Storm

258588	2.6	注意	アップル	-	Apple Safari の AutoFill 機能におけるアドレスブックカードの情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2010-1796	2010-08-20 18:24	2010-07-30	Show	GitHub Exploit DB Packet Storm

258589	4.3	警告	アップル	-	Apple Safari におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-1778	2010-08-20 18:24	2010-07-30	Show	GitHub Exploit DB Packet Storm

258590	7.5	危険	金子勇	-	Winny におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-2360	2010-08-20 12:02	2010-08-20	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 16, 2026, 4:13 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
248911	9.8	CRITICAL Network	fast-cpp-csv-parser_project	fast-cpp-csv-parser	Fast C++ CSV Parser (aka fast-cpp-csv-parser) before 2018-07-06 has a heap-based buffer over-read in io::trim_chars in csv.h.	CWE-125 Out-of-bounds Read	CVE-2018-13421	2024-11-21 12:47	2018-07-8	Show	GitHub Exploit DB Packet Storm

248912	7.5	HIGH Network	gperftools_project	gperftools	Google gperftools 2.7 has a memory leak in malloc_extension.cc, related to MallocExtension::Register and InitModule. NOTE: the software maintainer indicates that this is not a bug; it is only a false…	CWE-772 Missing Release of Resource after Effective Lifetime	CVE-2018-13420	2024-11-21 12:47	2018-07-8	Show	GitHub Exploit DB Packet Storm

248913	6.5	MEDIUM Network	libsndfile_project	libsndfile	An issue has been found in libsndfile 1.0.28. There is a memory leak in psf_allocate in common.c, as demonstrated by sndfile-convert. NOTE: The maintainer and third parties were unable to reproduce a…	CWE-772 Missing Release of Resource after Effective Lifetime	CVE-2018-13419	2024-11-21 12:47	2018-07-8	Show	GitHub Exploit DB Packet Storm

248914	9.8	CRITICAL Network	info-zip_project	zip	Info-ZIP Zip 3.0, when the -T and -TT command-line options are used, allows attackers to cause a denial of service (invalid free and application crash) or possibly have unspecified other impact becau…	CWE-416 Use After Free	CVE-2018-13410	2024-11-21 12:47	2018-07-7	Show	GitHub Exploit DB Packet Storm

248915	6.1	MEDIUM Network	jirafeau	jirafeau	An issue was discovered in Jirafeau before 3.4.1. The "search file by hash" form is affected by reflected XSS that could allow, by targeting an administrator, stealing a session and gaining administr…	CWE-79 Cross-site Scripting	CVE-2018-13409	2024-11-21 12:47	2018-07-7	Show	GitHub Exploit DB Packet Storm

248916	6.1	MEDIUM Network	jirafeau	jirafeau	An issue was discovered in Jirafeau before 3.4.1. The "search file by link" form is affected by reflected XSS that could allow, by targeting an administrator, stealing a session and gaining administr…	CWE-79 Cross-site Scripting	CVE-2018-13408	2024-11-21 12:47	2018-07-7	Show	GitHub Exploit DB Packet Storm

248917	4.9	MEDIUM Network	jirafeau	jirafeau	A CSRF issue was discovered in Jirafeau before 3.4.1. The "delete file" feature on the admin panel is not protected against automated requests and could be abused.	CWE-352 Origin Validation Error	CVE-2018-13407	2024-11-21 12:47	2018-07-7	Show	GitHub Exploit DB Packet Storm

248918	7.8	HIGH Local	linux canonical debian	linux_kernel ubuntu_linux debian_linux	An integer overflow in the uvesafb_setcmap function in drivers/video/fbdev/uvesafb.c in the Linux kernel before 4.17.4 could result in local attackers being able to crash the kernel or potentially el…	CWE-190 Integer Overflow or Wraparound	CVE-2018-13406	2024-11-21 12:47	2018-07-6	Show	GitHub Exploit DB Packet Storm

248919	7.8	HIGH Local	linux debian canonical fedoraproject redhat f5	linux_kernel debian_linux ubuntu_linux fedora enterprise_linux_desktop enterprise_linux_server_aus enterprise_linux_workstation enterprise_linux_server_tus enterprise_linux_se…	The inode_init_owner function in fs/inode.c in the Linux kernel through 3.16 allows local users to create files with an unintended group ownership, in a scenario where a directory is SGID to a certai…	CWE-269 Improper Privilege Management	CVE-2018-13405	2024-11-21 12:47	2018-07-6	Show	GitHub Exploit DB Packet Storm

248920	8.8	HIGH Network	fortinet	fortios	An external control of system vulnerability in FortiOS may allow an authenticated, regular user to change the routing settings of the device via connecting to the ZebOS component.	CWE-20 Improper Input Validation	CVE-2018-13371	2024-11-21 12:46	2020-04-2	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed