Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":June 24, 2026, 4:01 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 258641 | 1.9 | 注意 | Linux レッドハット |
- | Linux kernel の ivtvfb_ioctl 関数における重要な情報を取得される脆弱性 |
CWE-200
情報漏えい |
CVE-2010-4079 | 2011-01-31 15:03 | 2010-11-29 | Show | GitHub Exploit DB Packet Storm |
| 258642 | 1.9 | 注意 | Linux レッドハット |
- | Linux kernel の USB サブシステムにおける重要な情報を取得される脆弱性 |
CWE-200
情報漏えい |
CVE-2010-4074 | 2011-01-31 15:01 | 2010-11-29 | Show | GitHub Exploit DB Packet Storm |
| 258643 | 2.1 | 注意 | Linux レッドハット |
- | Linux kernel の ethtool_get_rxnfc 関数における重要な情報を取得される脆弱性 |
CWE-200
情報漏えい |
CVE-2010-3861 | 2011-01-31 14:56 | 2010-12-10 | Show | GitHub Exploit DB Packet Storm |
| 258644 | 4.9 | 警告 | Linux レッドハット |
- | Linux kernel の hso_get_count 関数における重要な情報を取得される脆弱性 |
CWE-200
情報漏えい |
CVE-2010-3298 | 2011-01-28 16:03 | 2010-09-30 | Show | GitHub Exploit DB Packet Storm |
| 258645 | 4.9 | 警告 | Linux レッドハット |
- | Linux kernel の sound/core/seq/oss/seq_oss_init.c 関数におけるサービス運用妨害 (DoS) の脆弱性 |
CWE-399
リソース管理の問題 |
CVE-2010-3080 | 2011-01-28 15:59 | 2010-09-20 | Show | GitHub Exploit DB Packet Storm |
| 258646 | 9.3 | 危険 | マイクロソフト | - | Microsoft Windows Vista の sdclt.exe にて使用される BitLocker Drive Encryption API における権限昇格の脆弱性 |
CWE-Other
その他 |
CVE-2010-3145 | 2011-01-28 15:56 | 2011-01-11 | Show | GitHub Exploit DB Packet Storm |
| 258647 | 9.3 | 危険 | マイクロソフト | - | MDAC および WDAC における任意のコードを実行される脆弱性 |
CWE-20
不適切な入力確認 |
CVE-2011-0027 | 2011-01-28 15:53 | 2011-01-11 | Show | GitHub Exploit DB Packet Storm |
| 258648 | 9.3 | 危険 | マイクロソフト | - | MDAC および WDAC の SQLConnectW 関数における整数符号エラーの脆弱性 |
CWE-189
数値処理の問題 |
CVE-2011-0026 | 2011-01-28 15:50 | 2011-01-11 | Show | GitHub Exploit DB Packet Storm |
| 258649 | 9.3 | 危険 | サイバートラスト株式会社 Wireshark レッドハット |
- | Wireshark の sect_enttec_dmx_da 関数におけるバッファオーバーフローの脆弱性 |
CWE-119
バッファエラー |
CVE-2010-4538 | 2011-01-28 15:46 | 2011-01-7 | Show | GitHub Exploit DB Packet Storm |
| 258650 | 5.8 | 警告 | Mozilla Foundation オラクル |
- | Mozilla Firefox の js_InitRandom 関数におけるシードの値を推測される脆弱性 |
CWE-310
暗号の問題 |
CVE-2010-3399 | 2011-01-28 15:41 | 2010-09-15 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:June 24, 2026, 4 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 248341 | 7.2 |
HIGH
Network |
redhat | satellite | An improper authorization flaw was found in the Smart Class feature of Foreman. An attacker can use it to change configuration of any host registered in Red Hat Satellite, independent of the organiza… |
CWE-863
Incorrect Authorization |
CVE-2018-14666 | 2024-11-21 12:49 | 2019-01-23 | Show | GitHub Exploit DB Packet Storm |
| 248342 | 5.7 |
MEDIUM
Adjacent |
redhat debian opensuse canonical |
ceph debian_linux leap enterprise_linux_server ceph_storage ubuntu_linux |
It was found Ceph versions before 13.2.4 that authenticated ceph users with read only permissions could steal dm-crypt encryption keys used in ceph disk encryption. | - | CVE-2018-14662 | 2024-11-21 12:49 | 2019-01-16 | Show | GitHub Exploit DB Packet Storm |
| 248343 | 6.1 |
MEDIUM
Network |
osclass | osclass | Osclass 3.7.4 has XSS via the query string to index.php, a different vulnerability than CVE-2014-6280. |
CWE-79
Cross-site Scripting |
CVE-2018-14481 | 2024-11-21 12:49 | 2019-01-4 | Show | GitHub Exploit DB Packet Storm |
| 248344 | 10.0 |
CRITICAL
Network |
fasterxml debian oracle redhat |
jackson-databind debian_linux primavera_unifier banking_platform jdeveloper retail_merchandising_system webcenter_portal communications_billing_and_revenue_management financia… |
FasterXML jackson-databind 2.x before 2.9.7 might allow remote attackers to conduct server-side request forgery (SSRF) attacks by leveraging failure to block the axis2-jaxws class from polymorphic de… |
CWE-918
Server-Side Request Forgery (SSRF) |
CVE-2018-14721 | 2024-11-21 12:49 | 2019-01-3 | Show | GitHub Exploit DB Packet Storm |
| 248345 | 9.8 |
CRITICAL
Network |
fasterxml debian oracle redhat |
jackson-databind debian_linux primavera_unifier banking_platform jdeveloper retail_merchandising_system webcenter_portal communications_billing_and_revenue_management financia… |
FasterXML jackson-databind 2.x before 2.9.7 might allow attackers to conduct external XML entity (XXE) attacks by leveraging failure to block unspecified JDK classes from polymorphic deserialization. |
CWE-611 CWE-502 XXE Deserialization of Untrusted Data |
CVE-2018-14720 | 2024-11-21 12:49 | 2019-01-3 | Show | GitHub Exploit DB Packet Storm |
| 248346 | 9.8 |
CRITICAL
Network |
fasterxml debian oracle redhat netapp |
jackson-databind debian_linux primavera_unifier primavera_p6_enterprise_project_portfolio_management database_server banking_platform jdeveloper retail_merchandising_system we… |
FasterXML jackson-databind 2.x before 2.9.7 might allow remote attackers to execute arbitrary code by leveraging failure to block the blaze-ds-opt and blaze-ds-core classes from polymorphic deseriali… |
CWE-502
Deserialization of Untrusted Data |
CVE-2018-14719 | 2024-11-21 12:49 | 2019-01-3 | Show | GitHub Exploit DB Packet Storm |
| 248347 | 9.8 |
CRITICAL
Network |
fasterxml debian oracle netapp redhat |
jackson-databind debian_linux primavera_unifier jd_edwards_enterpriseone_tools primavera_p6_enterprise_project_portfolio_management banking_platform jdeveloper retail_merchandisi… |
FasterXML jackson-databind 2.x before 2.9.7 might allow remote attackers to execute arbitrary code by leveraging failure to block the slf4j-ext class from polymorphic deserialization. |
CWE-502
Deserialization of Untrusted Data |
CVE-2018-14718 | 2024-11-21 12:49 | 2019-01-3 | Show | GitHub Exploit DB Packet Storm |
| 248348 | 5.4 |
MEDIUM
Network |
mondula | multi_step_form | The Mondula Multi Step Form plugin before 1.2.8 for WordPress has multiple stored XSS via wp-admin/admin-ajax.php. |
CWE-79
Cross-site Scripting |
CVE-2018-14846 | 2024-11-21 12:49 | 2018-12-21 | Show | GitHub Exploit DB Packet Storm |
| 248349 | 6.3 |
MEDIUM
Adjacent |
samsung | galaxy_s6_firmware | Buffer overflow in dhd_bus_flow_ring_create_response in drivers/net/wireless/bcmdhd4358/dhd_pcie.c in the bcmdhd4358 Wi-Fi driver on the Samsung Galaxy S6 SM-G920F G920FXXU5EQH7 allow an attacker (wh… |
CWE-119
Incorrect Access of Indexable Resource ('Range Error') |
CVE-2018-14856 | 2024-11-21 12:49 | 2018-12-18 | Show | GitHub Exploit DB Packet Storm |
| 248350 | 6.3 |
MEDIUM
Adjacent |
samsung | galaxy_s6_firmware | Buffer overflow in dhd_bus_flow_ring_flush_response in drivers/net/wireless/bcmdhd4358/dhd_pcie.c in the bcmdhd4358 Wi-Fi driver on the Samsung Galaxy S6 allow an attacker (who has obtained code exec… |
CWE-119
Incorrect Access of Indexable Resource ('Range Error') |
CVE-2018-14855 | 2024-11-21 12:49 | 2018-12-18 | Show | GitHub Exploit DB Packet Storm |