Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 14, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
258691	7.1	危険	オラクル	-	Oracle Database の Core RDBMS コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0860	2010-05-12 15:16	2010-04-13	Show	GitHub Exploit DB Packet Storm

258692	7.5	危険	オラクル	-	複数の Oracle 製品の Oracle Internet Directory コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0853	2010-05-12 15:16	2010-04-13	Show	GitHub Exploit DB Packet Storm

258693	2.6	注意	シックス・アパート株式会社	-	Movable Type におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-1985	2010-05-12 12:01	2010-05-12	Show	GitHub Exploit DB Packet Storm

258694	10	危険	日立	-	複数の EUR Form 製品および EUR 製品における任意のコードが実行される脆弱性	CWE-noinfo 情報不足	-	2010-05-11 15:16	2010-03-31	Show	GitHub Exploit DB Packet Storm

258695	6.4	警告	マイクロソフト	-	Microsoft Windows における ISATAP パケットの処理に関する IPv4 ソースアドレスの制限を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-0812	2010-05-11 15:16	2010-04-13	Show	GitHub Exploit DB Packet Storm

258696	7.6	危険	マイクロソフト	-	Microsoft Office Visio における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-0256	2010-05-11 15:16	2010-04-13	Show	GitHub Exploit DB Packet Storm

258697	7.6	危険	マイクロソフト	-	Microsoft Office Visio における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-0254	2010-05-11 15:15	2010-04-13	Show	GitHub Exploit DB Packet Storm

258698	5	警告	マイクロソフト	-	Microsoft Windows の SMTP コンポーネントにおける情報漏えいの脆弱性	CWE-200 情報漏えい	CVE-2010-0025	2010-05-11 15:15	2010-04-13	Show	GitHub Exploit DB Packet Storm

258699	5	警告	マイクロソフト	-	Microsoft Windows の SMTP コンポーネントにおけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2010-0024	2010-05-11 15:15	2010-04-13	Show	GitHub Exploit DB Packet Storm

258700	9.3	危険	マイクロソフト	-	Microsoft Office Publisher におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-0479	2010-05-11 15:14	2010-04-13	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 14, 2026, 4:12 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
246231	5.4	MEDIUM Network	modx	evolution_cms	Evolution CMS 1.4.x allows XSS via the page weblink title parameter to the manager/ URI.	CWE-79 Cross-site Scripting	CVE-2018-16637	2024-11-21 12:53	2018-12-29	Show	GitHub Exploit DB Packet Storm

246232	4.8	MEDIUM Network	jupo	mezzanine	Mezzanine CMS v4.3.1 allows XSS via the /admin/blog/blogcategory/add/?_to_field=id&_popup=1 title parameter at admin/blog/blogpost/add/.	CWE-79 Cross-site Scripting	CVE-2018-16632	2024-11-21 12:53	2018-12-29	Show	GitHub Exploit DB Packet Storm

246233	4.8	MEDIUM Network	getkirby	kirby	Kirby v2.5.12 allows XSS by using the "site files" Add option to upload an SVG file.	CWE-79 Cross-site Scripting	CVE-2018-16630	2024-11-21 12:53	2018-12-29	Show	GitHub Exploit DB Packet Storm

246234	6.1	MEDIUM Network	jenzabar	jenzabar	Cross-site scripting (XSS) vulnerability in Jenzabar v8.2.1 through 9.2.0 allows remote attackers to inject arbitrary web script or HTML via the query parameter (aka the Search Field).	CWE-79 Cross-site Scripting	CVE-2018-16778	2024-11-21 12:53	2018-12-22	Show	GitHub Exploit DB Packet Storm

246235	6.1	MEDIUM Network	getkirby	kirby	panel/login in Kirby v2.5.12 allows Host header injection via the "forget password" feature.	CWE-74 Injection	CVE-2018-16627	2024-11-21 12:53	2018-12-21	Show	GitHub Exploit DB Packet Storm

246236	5.5	MEDIUM Local	fedoraproject	sssd	sssd versions from 1.13.0 to before 2.0.0 did not properly restrict access to the infopipe according to the "allowed_uids" configuration parameter. If sensitive information were stored in the user di…	CWE-200 Information Exposure	CVE-2018-16883	2024-11-21 12:53	2018-12-19	Show	GitHub Exploit DB Packet Storm

246237	8.0	HIGH Adjacent	linux redhat debian canonical	linux_kernel enterprise_linux enterprise_mrg debian_linux ubuntu_linux	A flaw was found in the Linux kernel's NFS41+ subsystem. NFS41+ shares mounted in different network namespaces at the same time can make bc_svc_process() use wrong back-channel IDs and cause a use-af…	-	CVE-2018-16884	2024-11-21 12:53	2018-12-19	Show	GitHub Exploit DB Packet Storm

246238	7.5	HIGH Adjacent	swisscom	internet-box_standard_firmware internet-box_light_firmware internet-box_plus_firmware internet-box_2_firmware	A stack-based buffer overflow in the LAN UPnP service running on UDP port 1900 of Swisscom Internet-Box (2, Standard, and Plus) prior to v09.04.00 and Internet-Box light prior to v08.05.02 allows rem…	CWE-787 Out-of-bounds Write	CVE-2018-16596	2024-11-21 12:53	2018-12-18	Show	GitHub Exploit DB Packet Storm

246239	7.5	HIGH Network	golang opensuse	go leap	The crypto/x509 package of Go before 1.10.6 and 1.11.x before 1.11.3 does not limit the amount of work performed for each chain verification, which might allow attackers to craft pathological inputs …	CWE-295 Improper Certificate Validation	CVE-2018-16875	2024-11-21 12:53	2018-12-14	Show	GitHub Exploit DB Packet Storm

246240	8.1	HIGH Network	golang opensuse suse debian	go leap linux_enterprise_server backports_sle debian_linux	In Go before 1.10.6 and 1.11.x before 1.11.3, the "go get" command is vulnerable to directory traversal when executed with the import path of a malicious Go package which contains curly braces (both …	-	CVE-2018-16874	2024-11-21 12:53	2018-12-14	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed