Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 21, 2026, noon

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
258691	6.8	警告	VMware	-	複数の VMware 製品における権限を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2008-1363	2010-09-13 15:56	2008-03-17	Show	GitHub Exploit DB Packet Storm

258692	7.2	危険	VMware	-	複数の VMware 製品における権限を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2008-1362	2010-09-13 15:55	2008-03-17	Show	GitHub Exploit DB Packet Storm

258693	6.8	警告	VMware	-	複数の VMware 製品における権限を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2008-1361	2010-09-13 15:55	2008-03-17	Show	GitHub Exploit DB Packet Storm

258694	7.1	危険	VMware	-	複数の VMware 製品の Virtual Machine Communication Interface (VMCI) におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2008-1340	2010-09-13 15:55	2008-03-17	Show	GitHub Exploit DB Packet Storm

258695	6.9	警告	VMware	-	複数の VMware 製品におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2008-0923	2010-09-13 15:54	2008-02-26	Show	GitHub Exploit DB Packet Storm

258696	9.3	危険	アドビシステムズ	-	Adobe Shockwave Player の DIRAPI.dll における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-2882	2010-09-13 15:46	2010-08-24	Show	GitHub Exploit DB Packet Storm

258697	9.3	危険	アドビシステムズ	-	Adobe Shockwave Player の IML32.dll における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-2881	2010-09-13 15:46	2010-08-24	Show	GitHub Exploit DB Packet Storm

258698	9.3	危険	アドビシステムズ	-	Adobe Shockwave Player の DIRAPI.dll における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-2880	2010-09-13 15:45	2010-08-24	Show	GitHub Exploit DB Packet Storm

258699	9.3	危険	アドビシステムズ	-	Adobe Shockwave Player の TextXtra.x32 モジュールにおける整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2010-2879	2010-09-13 15:45	2010-08-24	Show	GitHub Exploit DB Packet Storm

258700	9.3	危険	アドビシステムズ	-	Adobe Shockwave Player の DIRAPIX.dll における任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2010-2878	2010-09-13 15:45	2010-08-24	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 21, 2026, 4:01 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
251651	5.6	MEDIUM Local	xen debian	xen debian_linux	An issue was discovered in Xen through 4.10.x allowing x86 HVM guest OS users (in certain configurations) to read arbitrary dom0 files via QMP live insertion of a CDROM, in conjunction with specifyin…	CWE-200 Information Exposure	CVE-2018-10472	2024-11-21 12:41	2018-04-28	Show	GitHub Exploit DB Packet Storm

251652	6.5	MEDIUM Local	xen debian	xen debian_linux	An issue was discovered in Xen through 4.10.x allowing x86 PV guest OS users to cause a denial of service (out-of-bounds zero write and hypervisor crash) via unexpected INT 80 processing, because of …	CWE-787 Out-of-bounds Write	CVE-2018-10471	2024-11-21 12:41	2018-04-28	Show	GitHub Exploit DB Packet Storm

251653	9.8	CRITICAL Network	b3log	symphony	b3log Symphony (aka Sym) 2.6.0 allows remote attackers to upload and execute arbitrary JSP files via the name[] parameter to the /upload URI.	CWE-434 Unrestricted Upload of File with Dangerous Type	CVE-2018-10469	2024-11-21 12:41	2018-04-27	Show	GitHub Exploit DB Packet Storm

251654	5.9	MEDIUM Network	google redhat oracle	guava virtualization_host virtualization openshift_container_platform satellite openstack satellite_capsule jboss_enterprise_application_platform flexcube_investor_servicing	Unbounded memory allocation in Google Guava 11.0 through 24.x before 24.1.1 allows remote attackers to conduct denial of service attacks against servers that depend on this library and deserialize at…	CWE-770 Allocation of Resources Without Limits or Throttling	CVE-2018-10237	2024-11-21 12:41	2018-04-27	Show	GitHub Exploit DB Packet Storm

251655	7.2	HIGH Network	d-link	dir-615_firmware	D-Link DIR-615 2.5.17 devices allow Remote Code Execution via shell metacharacters in the Host field of the System / Traceroute screen.	CWE-78 OS Command	CVE-2018-10431	2024-11-21 12:41	2018-04-27	Show	GitHub Exploit DB Packet Storm

251656	4.8	MEDIUM Network	dilicms	dilicms	An issue was discovered in DiliCMS (aka DiligentCMS) 2.4.0. There is a Stored XSS Vulnerability in the fourth textbox of "System setting->site setting" of admin/index.php.	CWE-79 Cross-site Scripting	CVE-2018-10430	2024-11-21 12:41	2018-04-27	Show	GitHub Exploit DB Packet Storm

251657	9.8	CRITICAL Network	cosmocms	cosmo	Cosmo 1.0.0Beta6 allows attackers to execute arbitrary PHP code via the Database Prefix field on the Database Info screen of install.php.	CWE-94 Code Injection	CVE-2018-10429	2024-11-21 12:41	2018-04-27	Show	GitHub Exploit DB Packet Storm

251658	7.8	HIGH Local	hz-soft	security_guard	An issue was discovered in Shanghai 2345 Security Guard 3.7.0. 2345MPCSafe.exe, 2345SafeTray.exe, and 2345Speedup.exe allow local users to bypass intended process protections, and consequently termin…	NVD-CWE-noinfo	CVE-2018-10425	2024-11-21 12:41	2018-04-26	Show	GitHub Exploit DB Packet Storm

251659	2.7	LOW Network	1234n	minicms	mc-admin/post-edit.php in MiniCMS 1.10 allows full path disclosure via a modified id field.	CWE-200 Information Exposure	CVE-2018-10424	2024-11-21 12:41	2018-04-26	Show	GitHub Exploit DB Packet Storm

251660	2.7	LOW Network	1234n	minicms	mc-admin/post.php in MiniCMS 1.10 allows remote attackers to obtain a directory listing of the top-level directory of the web root via a link that becomes available after posting an article.	CWE-200 Information Exposure	CVE-2018-10423	2024-11-21 12:41	2018-04-26	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed