Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 15, 2026, 2 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
258591	9.3	危険	アップル	-	Apple Safari の WebKit における任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2010-1396	2010-07-14 16:32	2010-06-10	Show	GitHub Exploit DB Packet Storm

258592	4.3	警告	アップル	-	Apple Safari の WebKit におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-1395	2010-07-14 16:32	2010-06-10	Show	GitHub Exploit DB Packet Storm

258593	4.3	警告	アップル	-	Apple Safari の Cascading Style Sheet 実装における重要な URL の情報を見破られる脆弱性	CWE-200 情報漏えい	CVE-2010-1393	2010-07-14 16:31	2010-06-10	Show	GitHub Exploit DB Packet Storm

258594	5	警告	IBM	-	IBM WebSphere Application Server の HTTP Channel におけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2010-2328	2010-07-13 17:56	2010-03-2	Show	GitHub Exploit DB Packet Storm

258595	4.3	警告	IBM	-	IBM WebSphere Application Server における重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2010-2326	2010-07-13 17:55	2010-03-23	Show	GitHub Exploit DB Packet Storm

258596	10	危険	アップル	-	Apple iTunes の WebKit における任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2010-1769	2010-07-13 17:55	2010-06-18	Show	GitHub Exploit DB Packet Storm

258597	10	危険	アップル	-	Apple iTunes の WebKit における脆弱性	CWE-noinfo 情報不足	CVE-2010-1763	2010-07-13 17:54	2010-06-18	Show	GitHub Exploit DB Packet Storm

258598	5	警告	アップル	-	Apple Safari の WebKit における任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2010-1119	2010-07-13 16:39	2010-06-10	Show	GitHub Exploit DB Packet Storm

258599	4.3	警告	アップル	-	Apple Safari の WebKit におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2010-1391	2010-07-13 16:38	2010-06-10	Show	GitHub Exploit DB Packet Storm

258600	4.3	警告	アップル	-	Apple Safari の WebKit におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-1390	2010-07-13 16:37	2010-06-10	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 15, 2026, 4:10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
250321	4.8	MEDIUM Network	creatiwity	witycms	Stored cross-site scripting (XSS) vulnerability in the "Website's name" field found in the "Settings" page under the "General" menu in Creatiwity wityCMS 0.6.1 allows remote attackers to inject arbit…	CWE-79 Cross-site Scripting	CVE-2018-11512	2024-11-21 12:43	2018-05-28	Show	GitHub Exploit DB Packet Storm

250322	5.5	MEDIUM Local	linux canonical	linux_kernel ubuntu_linux	The compat_get_timex function in kernel/compat.c in the Linux kernel before 4.16.9 allows local users to obtain sensitive information from kernel memory via adjtimex.	CWE-200 Information Exposure	CVE-2018-11508	2024-11-21 12:43	2018-05-28	Show	GitHub Exploit DB Packet Storm

250323	6.5	MEDIUM Network	flif	flif	An issue was discovered in Free Lossless Image Format (FLIF) 0.3. An attacker can trigger a long loop in image_load_pnm in image/image-pnm.cpp.	CWE-834 Excessive Iteration	CVE-2018-11507	2024-11-21 12:43	2018-05-28	Show	GitHub Exploit DB Packet Storm

250324	7.8	HIGH Local	linux canonical debian	linux_kernel ubuntu_linux debian_linux	The sr_do_ioctl function in drivers/scsi/sr_ioctl.c in the Linux kernel through 4.16.12 allows local users to cause a denial of service (stack-based buffer overflow) or possibly have unspecified othe…	CWE-787 Out-of-bounds Write	CVE-2018-11506	2024-11-21 12:43	2018-05-28	Show	GitHub Exploit DB Packet Storm

250325	7.5	HIGH Network	werewolf_online_project	werewolf_online	The Werewolf Online application 0.8.8 for Android allows attackers to discover the Firebase token by reading logcat output.	CWE-200 Information Exposure	CVE-2018-11505	2024-11-21 12:43	2018-05-27	Show	GitHub Exploit DB Packet Storm

250326	5.5	MEDIUM Local	discount_project debian	discount debian_linux	The islist function in markdown.c in libmarkdown.a in DISCOUNT 2.2.3a allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted file, as demonstrated by mkd2htm…	CWE-125 Out-of-bounds Read	CVE-2018-11504	2024-11-21 12:43	2018-05-27	Show	GitHub Exploit DB Packet Storm

250327	5.5	MEDIUM Local	discount_project debian	discount debian_linux	The isfootnote function in markdown.c in libmarkdown.a in DISCOUNT 2.2.3a allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted file, as demonstrated by mkd…	CWE-125 Out-of-bounds Read	CVE-2018-11503	2024-11-21 12:43	2018-05-27	Show	GitHub Exploit DB Packet Storm

250328	8.8	HIGH Network	website_seller_script_project	website_seller_script	PHP Scripts Mall Website Seller Script 2.0.3 has CSRF via user_submit.php?upd=2, with resultant XSS.	CWE-352 CWE-79 Origin Validation Error Cross-site Scripting	CVE-2018-11501	2024-11-21 12:43	2018-05-27	Show	GitHub Exploit DB Packet Storm

250329	8.8	HIGH Network	publiccms	publiccms	An issue was discovered in PublicCMS V4.0.20180210. There is a CSRF vulnerability in "admin/sysUser/save.do?callbackType=closeCurrent&navTabId=sysUser/list" that can add an admin account.	CWE-352 Origin Validation Error	CVE-2018-11500	2024-11-21 12:43	2018-05-27	Show	GitHub Exploit DB Packet Storm

250330	9.8	CRITICAL Network	sass-lang	libsass	A use-after-free vulnerability exists in handle_error() in sass_context.cpp in LibSass 3.4.x and 3.5.x through 3.5.4 that could be leveraged to cause a denial of service (application crash) or possib…	CWE-416 Use After Free	CVE-2018-11499	2024-11-21 12:43	2018-05-27	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed