Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 15, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
258651 10 危険 オラクル - Oracle Sun Product Suite の Sun Ray Server Software コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-0888 2010-05-14 18:40 2010-04-13 Show GitHub Exploit DB Packet Storm
258652 5 警告 サン・マイクロシステムズ
Pidgin
レッドハット		 - Pidgin の gtkimhtml.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2010-0423 2010-05-14 18:39 2010-02-18 Show GitHub Exploit DB Packet Storm
258653 4.3 警告 サン・マイクロシステムズ
Pidgin
レッドハット		 - Pidgin の libpurple におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2010-0420 2010-05-14 18:38 2010-02-18 Show GitHub Exploit DB Packet Storm
258654 7.5 危険 Carnegie Mellon University (Project Cyrus)
アップル
サイバートラスト株式会社
サン・マイクロシステムズ
オラクル
レッドハット		 - Cyrus SASL ライブラリにおけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2009-0688 2010-05-14 18:37 2009-05-15 Show GitHub Exploit DB Packet Storm
258655 7.5 危険 サン・マイクロシステムズ
GNOME Project
レッドハット		 - Evolution Data Server (別名 evolution-data-server) における複数の整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2009-0587 2010-05-14 18:37 2009-03-14 Show GitHub Exploit DB Packet Storm
258656 5.8 警告 サン・マイクロシステムズ
GNOME Project
レッドハット		 - Evolution Data Server (別名 evolution-data-server) の ntlm_challenge 関数におけるプロセスメモリ情報の漏洩またはサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2009-0582 2010-05-14 18:37 2009-03-14 Show GitHub Exploit DB Packet Storm
258657 1.2 注意 日本電気
サイバートラスト株式会社
サン・マイクロシステムズ
ターボリナックス
OpenSSL Project
レッドハット		 - RSA key reconstruction vulnerability - CVE-2007-3108 2010-05-14 18:37 2007-08-16 Show GitHub Exploit DB Packet Storm
258658 5 警告 ヒューレット・パッカード
サイバートラスト株式会社
OpenSSL Project
ターボリナックス
レッドハット		 - OpenSSL の zlib_stateful_finish 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2009-4355 2010-05-13 17:21 2010-01-13 Show GitHub Exploit DB Packet Storm
258659 9.3 危険 日立 - XMAP3 における任意のコードが実行される脆弱性 CWE-noinfo
情報不足 		- 2010-05-13 15:14 2010-04-12 Show GitHub Exploit DB Packet Storm
258660 4.3 警告 オラクル - Oracle Industry Product Suite の Retail - Oracle Retail Plan In-Season コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-0863 2010-05-13 15:13 2010-04-13 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 15, 2026, 4:10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
248811 9.8 CRITICAL
Network 		info-zip_project zip Info-ZIP Zip 3.0, when the -T and -TT command-line options are used, allows attackers to cause a denial of service (invalid free and application crash) or possibly have unspecified other impact becau… CWE-416
 Use After Free 		CVE-2018-13410 2024-11-21 12:47 2018-07-7 Show GitHub Exploit DB Packet Storm
248812 6.1 MEDIUM
Network 		jirafeau jirafeau An issue was discovered in Jirafeau before 3.4.1. The "search file by hash" form is affected by reflected XSS that could allow, by targeting an administrator, stealing a session and gaining administr… CWE-79
Cross-site Scripting 		CVE-2018-13409 2024-11-21 12:47 2018-07-7 Show GitHub Exploit DB Packet Storm
248813 6.1 MEDIUM
Network 		jirafeau jirafeau An issue was discovered in Jirafeau before 3.4.1. The "search file by link" form is affected by reflected XSS that could allow, by targeting an administrator, stealing a session and gaining administr… CWE-79
Cross-site Scripting 		CVE-2018-13408 2024-11-21 12:47 2018-07-7 Show GitHub Exploit DB Packet Storm
248814 4.9 MEDIUM
Network 		jirafeau jirafeau A CSRF issue was discovered in Jirafeau before 3.4.1. The "delete file" feature on the admin panel is not protected against automated requests and could be abused. CWE-352
 Origin Validation Error 		CVE-2018-13407 2024-11-21 12:47 2018-07-7 Show GitHub Exploit DB Packet Storm
248815 7.8 HIGH
Local 		linux
canonical
debian 		linux_kernel
ubuntu_linux
debian_linux 		An integer overflow in the uvesafb_setcmap function in drivers/video/fbdev/uvesafb.c in the Linux kernel before 4.17.4 could result in local attackers being able to crash the kernel or potentially el… CWE-190
 Integer Overflow or Wraparound 		CVE-2018-13406 2024-11-21 12:47 2018-07-6 Show GitHub Exploit DB Packet Storm
248816 7.8 HIGH
Local 		linux
debian
canonical
fedoraproject
redhat
f5 		linux_kernel
debian_linux
ubuntu_linux
fedora
enterprise_linux_desktop
enterprise_linux_server_aus
enterprise_linux_workstation
enterprise_linux_server_tus
enterprise_linux_se… 		The inode_init_owner function in fs/inode.c in the Linux kernel through 3.16 allows local users to create files with an unintended group ownership, in a scenario where a directory is SGID to a certai… CWE-269
 Improper Privilege Management 		CVE-2018-13405 2024-11-21 12:47 2018-07-6 Show GitHub Exploit DB Packet Storm
248817 8.8 HIGH
Network 		fortinet fortios An external control of system vulnerability in FortiOS may allow an authenticated, regular user to change the routing settings of the device via connecting to the ZebOS component. CWE-20
 Improper Input Validation  		CVE-2018-13371 2024-11-21 12:46 2020-04-2 Show GitHub Exploit DB Packet Storm
248818 7.5 HIGH
Network 		easyappointments easy\!appointments Easy!Appointments 1.3.0 has a Missing Authorization issue allowing retrieval of hashed passwords and salts. CWE-862
 Missing Authorization 		CVE-2018-13063 2024-11-21 12:46 2020-03-17 Show GitHub Exploit DB Packet Storm
248819 6.5 MEDIUM
Network 		easyappointments easy\!appointments Easy!Appointments 1.3.0 has a Guessable CAPTCHA issue. CWE-287
Improper Authentication 		CVE-2018-13060 2024-11-21 12:46 2020-03-17 Show GitHub Exploit DB Packet Storm
248820 6.5 MEDIUM
Network 		totolink a3002ru_firmware In TOTOLINK A3002RU 1.0.8, the router provides a page that allows the user to change their account name and password. This page, password.htm, contains JavaScript which is used to confirm the user kn… CWE-922
 Insecure Storage of Sensitive Information 		CVE-2018-13313 2024-11-21 12:46 2020-02-25 Show GitHub Exploit DB Packet Storm