Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 14, 2026, noon

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
258671 3.5 注意 オラクル - Oracle E-Business Suite の E-Business Intelligence コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-0858 2010-05-13 15:10 2010-04-13 Show GitHub Exploit DB Packet Storm
258672 4.3 警告 オラクル - Oracle E-Business Suite の Oracle Transportation Management コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-0869 2010-05-13 15:10 2010-04-13 Show GitHub Exploit DB Packet Storm
258673 4.3 警告 オラクル - Oracle E-Business Suite の Oracle Agile Engineering Data Management コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-0871 2010-05-13 15:10 2010-04-13 Show GitHub Exploit DB Packet Storm
258674 4.3 警告 オラクル - Oracle E-Business Suite の Oracle Agile Engineering Data Management コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-0865 2010-05-13 15:09 2010-04-13 Show GitHub Exploit DB Packet Storm
258675 5 警告 オラクル - Oracle E-Business Suite の Oracle HRMS (Self Service) コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-0861 2010-05-13 15:09 2010-04-13 Show GitHub Exploit DB Packet Storm
258676 7.6 危険 マイクロソフト - Internet Explorer において VBScript および Windows Help を使用する際に任意のコードが実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2010-0483 2010-05-12 15:20 2010-03-2 Show GitHub Exploit DB Packet Storm
258677 7.1 危険 マイクロソフト - Microsoft Windows の kernel における SMB 応答パケットの処理に関するサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他 		CVE-2009-3676 2010-05-12 15:20 2009-11-13 Show GitHub Exploit DB Packet Storm
258678 5.8 警告 オラクル - Oracle E-Business Suite の Oracle iStore コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-0868 2010-05-12 15:19 2010-04-13 Show GitHub Exploit DB Packet Storm
258679 6.4 警告 オラクル - Oracle E-Business Suite の Oracle Application Object Library コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-0859 2010-05-12 15:19 2010-04-13 Show GitHub Exploit DB Packet Storm
258680 4.3 警告 オラクル - Oracle Collaboration Suite の User Interface コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-0881 2010-05-12 15:19 2010-04-13 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 14, 2026, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
249511 7.2 HIGH
Network 		ui edgeswitch_firmware Ubiquiti Networks EdgeSwitch version 1.7.3 and prior suffer from an externally controlled format-string vulnerability due to lack of protection on the admin CLI, leading to code execution and privile… CWE-134
Use of Externally-Controlled Format String 		CVE-2018-12590 2024-11-21 12:45 2018-06-20 Show GitHub Exploit DB Packet Storm
249512 3.6 LOW
Local 		dropbox dropbox An issue was discovered in the com.dropbox.android application 98.2.2 for Android. The Passcode feature allows authentication bypass via runtime manipulation that forces a certain method's return val… CWE-287
Improper Authentication 		CVE-2018-12446 2024-11-21 12:45 2018-06-20 Show GitHub Exploit DB Packet Storm
249513 6.1 MEDIUM
Network 		public_knowledge_project open_monograph_press Cross-site scripting (XSS) vulnerability in templates/frontend/pages/searchResults.tpl in Public Knowledge Project (PKP) Open Monograph Press (OMP) v1.2.0 through 3.1.1-2 before 3.1.1-3 allows remote… CWE-79
Cross-site Scripting 		CVE-2018-12588 2024-11-21 12:45 2018-06-20 Show GitHub Exploit DB Packet Storm
249514 3.1 LOW
Physics 		dropbox dropbox An issue was discovered in the com.dropbox.android application 98.2.2 for Android. The FingerprintManager class for Biometric validation allows authentication bypass through the callback method from … CWE-287
Improper Authentication 		CVE-2018-12445 2024-11-21 12:45 2018-06-20 Show GitHub Exploit DB Packet Storm
249515 8.8 HIGH
Network 		codenx shopnx An issue was discovered in ShopNx through 2017-11-17. The vulnerability allows a remote attacker to upload any malicious file to a Node.js application. An attacker can upload a malicious HTML file th… CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2018-12519 2024-11-21 12:45 2018-06-20 Show GitHub Exploit DB Packet Storm
249516 6.5 MEDIUM
Network 		akcms_project akcms An issue was discovered in AKCMS 6.1. CSRF can delete an article via an admincp deleteitem action to index.php. CWE-352
 Origin Validation Error 		CVE-2018-12583 2024-11-21 12:45 2018-06-20 Show GitHub Exploit DB Packet Storm
249517 8.8 HIGH
Network 		akcms_project akcms An issue was discovered in AKCMS 6.1. CSRF can add an admin account via a /index.php?file=account&action=manageaccounts&job=newaccount URI. CWE-352
 Origin Validation Error 		CVE-2018-12582 2024-11-21 12:45 2018-06-20 Show GitHub Exploit DB Packet Storm
249518 6.1 MEDIUM
Network 		dragonbyte-tech vbsecurity library/DBTech/Security/Action/Sessions.php in DragonByte vBSecurity 3.x through 3.3.0 for vBulletin 3 and vBulletin 4 allows self-XSS via $session['user_agent'] in the "Login Sessions" feature. CWE-79
Cross-site Scripting 		CVE-2018-12580 2024-11-21 12:45 2018-06-20 Show GitHub Exploit DB Packet Storm
249519 9.8 CRITICAL
Network 		sam2p_project sam2p There is a heap-based buffer overflow in bmp_compress1_row in appliers.cpp in sam2p 0.49.4 that leads to a denial of service or possibly unspecified other impact. CWE-787
 Out-of-bounds Write 		CVE-2018-12578 2024-11-21 12:45 2018-06-20 Show GitHub Exploit DB Packet Storm
249520 8.8 HIGH
Network 		linaro
debian 		lava
debian_linux 		An issue was discovered in Linaro LAVA before 2018.5.post1. Because of use of yaml.load() instead of yaml.safe_load() when parsing user data, remote code execution can occur. CWE-20
 Improper Input Validation  		CVE-2018-12565 2024-11-21 12:45 2018-06-19 Show GitHub Exploit DB Packet Storm