Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 10, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
258761 9.3 危険 マイクロソフト - Microsoft Windows の Web Services on Devices API (WSDAPI) における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2009-2512 2010-01-4 15:23 2009-11-10 Show GitHub Exploit DB Packet Storm
258762 10 危険 アップル
VMware
サン・マイクロシステムズ
- Sun Java SE の Provider クラスにおける詳細不明な脆弱性 CWE-noinfo
情報不足
CVE-2009-2722 2010-01-4 14:56 2009-08-10 Show GitHub Exploit DB Packet Storm
258763 10 危険 アップル
VMware
サン・マイクロシステムズ
- Sun Java SE の Provider クラスにおける詳細不明な脆弱性 CWE-noinfo
情報不足
CVE-2009-2723 2010-01-4 14:55 2009-08-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 10, 2026, 5 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
246821 9.8 CRITICAL
Network
invoxia nvx220_firmware Invoxia NVX220 devices allow TELNET access as admin with a default password. CWE-798
 Use of Hard-coded Credentials
CVE-2018-14528 2024-11-21 12:49 2019-07-6 Show GitHub Exploit DB Packet Storm
246822 9.1 CRITICAL
Network
odoo odoo Improper sanitization of dynamic user expressions in Odoo Community 11.0 and earlier and Odoo Enterprise 11.0 and earlier allows authenticated privileged users to escape from the dynamic expression s… CWE-78
OS Command 
CVE-2018-14860 2024-11-21 12:49 2019-07-4 Show GitHub Exploit DB Packet Storm
246823 8.1 HIGH
Network
odoo odoo Incorrect access control in the password reset component in Odoo Community 11.0 and earlier and Odoo Enterprise 11.0 and earlier allows authenticated users to reset the password of other users by bei… CWE-284
Improper Access Control
CVE-2018-14859 2024-11-21 12:49 2019-07-4 Show GitHub Exploit DB Packet Storm
246824 6.5 MEDIUM
Network
odoo odoo Report engine in Odoo Community 9.0 through 11.0 and earlier and Odoo Enterprise 9.0 through 11.0 and earlier does not use secure options when passing documents to wkhtmltopdf, which allows remote at… CWE-200
Information Exposure
CVE-2018-14865 2024-11-21 12:49 2019-07-4 Show GitHub Exploit DB Packet Storm
246825 6.5 MEDIUM
Network
odoo odoo Incorrect access control in asset bundles in Odoo Community 9.0 through 11.0 and earlier and Odoo Enterprise 9.0 through 11.0 and earlier allows remote authenticated users to inject arbitrary web scr… CWE-284
Improper Access Control
CVE-2018-14864 2024-11-21 12:49 2019-07-4 Show GitHub Exploit DB Packet Storm
246826 8.1 HIGH
Network
odoo odoo Incorrect access control in the RPC framework in Odoo Community 8.0 through 11.0 and Odoo Enterprise 9.0 through 11.0 allows authenticated users to call private functions via RPC. CWE-284
Improper Access Control
CVE-2018-14863 2024-11-21 12:49 2019-07-4 Show GitHub Exploit DB Packet Storm
246827 6.5 MEDIUM
Network
odoo odoo Incorrect access control in the mail templating system in Odoo Community 11.0 and earlier and Odoo Enterprise 11.0 and earlier allows authenticated internal users to delete arbitrary menuitems via a … CWE-732
 Incorrect Permission Assignment for Critical Resource
CVE-2018-14862 2024-11-21 12:49 2019-07-4 Show GitHub Exploit DB Packet Storm
246828 6.5 MEDIUM
Network
odoo odoo Improper data access control in Odoo Community 10.0 and 11.0 and Odoo Enterprise 10.0 and 11.0 allows authenticated users to perform a CSV export of the secure hashed passwords of other users. CWE-732
 Incorrect Permission Assignment for Critical Resource
CVE-2018-14861 2024-11-21 12:49 2019-07-4 Show GitHub Exploit DB Packet Storm
246829 4.3 MEDIUM
Network
odoo odoo Incorrect access control in the TransientModel framework in Odoo Community 11.0 and earlier and Odoo Enterprise 11.0 and earlier allows authenticated attackers to access data in transient records tha… CWE-732
 Incorrect Permission Assignment for Critical Resource
CVE-2018-14866 2024-11-21 12:49 2019-07-4 Show GitHub Exploit DB Packet Storm
246830 6.5 MEDIUM
Network
odoo odoo Incorrect access control in the Password Encryption module in Odoo Community 9.0 and Odoo Enterprise 9.0 allows authenticated users to change the password of other users without knowing their current… CWE-287
Improper Authentication
CVE-2018-14868 2024-11-21 12:49 2019-06-29 Show GitHub Exploit DB Packet Storm