Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 15, 2026, 2 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
258741	9.3	危険	アドビシステムズ	-	Adobe Shockwave Player における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2010-0130	2010-05-28 18:44	2010-05-11	Show	GitHub Exploit DB Packet Storm

258742	9.3	危険	アドビシステムズ	-	Adobe Shockwave Player における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2010-0129	2010-05-28 18:43	2010-05-11	Show	GitHub Exploit DB Packet Storm

258743	9.3	危険	アドビシステムズ	-	Adobe Shockwave Player および Adobe Director における任意のコードを実行される脆弱性	CWE-189 数値処理の問題	CVE-2010-0128	2010-05-28 18:43	2010-05-11	Show	GitHub Exploit DB Packet Storm

258744	9.3	危険	アドビシステムズ	-	Adobe Shockwave Player における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-0127	2010-05-28 18:43	2010-05-11	Show	GitHub Exploit DB Packet Storm

258745	9.3	危険	マイクロソフト	-	複数の Microsoft 製品の VBE6.DLL における整数オーバーフローの脆弱性	CWE-94 コード・インジェクション	CVE-2010-0815	2010-05-28 18:43	2010-05-11	Show	GitHub Exploit DB Packet Storm

258746	9.3	危険	マイクロソフト	-	複数の Microsoft 製品の inetcomm.dll における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2010-0816	2010-05-28 18:43	2010-05-11	Show	GitHub Exploit DB Packet Storm

258747	9.3	危険	日立	-	複数の日立製品におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2009-4776	2010-05-28 18:42	2009-07-21	Show	GitHub Exploit DB Packet Storm

258748	6.8	警告	サイバートラスト株式会社レッドハット	-	TeX Live 2009 および teTeX の dvips における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2010-0827	2010-05-27 17:40	2010-05-6	Show	GitHub Exploit DB Packet Storm

258749	6.8	警告	サイバートラスト株式会社レッドハット	-	teTeX および TeXlive 2007 の hpc.c における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2007-5935	2010-05-27 17:40	2007-11-13	Show	GitHub Exploit DB Packet Storm

258750	4.3	警告	サイバートラスト株式会社レッドハット	-	dvipng および teTeX の set.c における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-0829	2010-05-27 17:40	2010-05-6	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 15, 2026, 4:10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
246641	7.5	HIGH Network	mpath_project	mpath	A prototype pollution vulnerability was found in module mpath <0.5.1 that allows an attacker to inject arbitrary properties onto Object.prototype.	CWE-74 Injection	CVE-2018-16490	2024-11-21 12:52	2019-02-2	Show	GitHub Exploit DB Packet Storm

246642	9.8	CRITICAL Network	just-extend_project	just-extend	A prototype pollution vulnerability was found in just-extend <4.0.0 that allows attack to inject properties onto Object.prototype through its functions.	CWE-74 Injection	CVE-2018-16489	2024-11-21 12:52	2019-02-2	Show	GitHub Exploit DB Packet Storm

246643	5.6	MEDIUM Network	lodash	lodash	A prototype pollution vulnerability was found in lodash <4.17.11 where the functions merge, mergeWith, and defaultsDeep can be tricked into adding or modifying properties of Object.prototype.	NVD-CWE-noinfo	CVE-2018-16487	2024-11-21 12:52	2019-02-2	Show	GitHub Exploit DB Packet Storm

246644	9.8	CRITICAL Network	defaults-deep_project	defaults-deep	A prototype pollution vulnerability was found in defaults-deep <=0.2.4 that would allow a malicious user to inject properties onto Object.prototype.	CWE-74 Injection	CVE-2018-16486	2024-11-21 12:52	2019-02-2	Show	GitHub Exploit DB Packet Storm

246645	6.5	MEDIUM Network	m-server_project	m-server	Path Traversal vulnerability in module m-server <1.4.1 allows malicious user to access unauthorized content of any file in the directory tree e.g. /etc/passwd by appending slashes to the URL request.	CWE-22 Path Traversal	CVE-2018-16485	2024-11-21 12:52	2019-02-2	Show	GitHub Exploit DB Packet Storm

246646	5.4	MEDIUM Network	m-server_project	m-server	A XSS vulnerability was found in module m-server <1.4.2 that allows malicious Javascript code or HTML to be executed, due to the lack of escaping for special characters in folder names.	CWE-79 Cross-site Scripting	CVE-2018-16484	2024-11-21 12:52	2019-02-2	Show	GitHub Exploit DB Packet Storm

246647	8.8	HIGH Network	express-cart_project	express-cart	A deficiency in the access control in module express-cart <=1.1.5 allows unprivileged users to add new users to the application as administrators.	CWE-290 Authentication Bypass by Spoofing	CVE-2018-16483	2024-11-21 12:52	2019-02-2	Show	GitHub Exploit DB Packet Storm

246648	7.5	HIGH Network	mcstatic_project	mcstatic	A server directory traversal vulnerability was found on node module mcstatic <=0.0.20 that would allow an attack to access sensitive information in the file system by appending slashes in the URL pat…	CWE-22 Path Traversal	CVE-2018-16482	2024-11-21 12:52	2019-02-2	Show	GitHub Exploit DB Packet Storm

246649	6.1	MEDIUM Network	html-pages_project	html-pages	A XSS vulnerability was found in html-page <=2.1.1 that allows malicious Javascript code to be executed in the user's browser due to the absence of sanitization of the paths before rendering.	CWE-79 Cross-site Scripting	CVE-2018-16481	2024-11-21 12:52	2019-02-2	Show	GitHub Exploit DB Packet Storm

246650	6.1	MEDIUM Network	public_project	public	A XSS vulnerability was found in module public <0.1.4 that allows malicious Javascript code to run in the browser, due to the absence of sanitization of the file/folder names before rendering.	CWE-79 Cross-site Scripting	CVE-2018-16480	2024-11-21 12:52	2019-02-2	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed