Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 14, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
258781 4.3 警告 マイクロソフト - Microsoft Internet Explorer における同一生成元ポリシーを回避される脆弱性 CWE-200
情報漏えい 		CVE-2010-0494 2010-04-19 19:19 2010-03-30 Show GitHub Exploit DB Packet Storm
258782 9.3 危険 マイクロソフト - Microsoft Internet Explorer の mstime.dll における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2010-0492 2010-04-19 19:19 2010-03-30 Show GitHub Exploit DB Packet Storm
258783 9.3 危険 マイクロソフト - Microsoft Internet Explorer における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2010-0490 2010-04-19 19:18 2010-03-30 Show GitHub Exploit DB Packet Storm
258784 9.3 危険 マイクロソフト - Microsoft Internet Explorer における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2010-0807 2010-04-19 19:18 2010-03-30 Show GitHub Exploit DB Packet Storm
258785 9.3 危険 マイクロソフト - Microsoft Internet Explorer における任意のコードを実行される脆弱性 CWE-362
競合状態 		CVE-2010-0489 2010-04-19 19:18 2010-03-30 Show GitHub Exploit DB Packet Storm
258786 9.3 危険 マイクロソフト - Microsoft Internet Explorer における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2010-0267 2010-04-19 19:18 2010-03-30 Show GitHub Exploit DB Packet Storm
258787 10 危険 アップル - Apple Mac OS X の xar におけるパッケージ署名の検証処理に関する脆弱性 CWE-DesignError
CVE-2010-0055 2010-04-16 16:59 2010-03-29 Show GitHub Exploit DB Packet Storm
258788 0 注意 アップル - Apple Mac OS X の Wiki サーバにおけるコンテンツを公開される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-0534 2010-04-16 16:58 2010-03-29 Show GitHub Exploit DB Packet Storm
258789 5 警告 アップル - Apple Mac OS X の Wiki サーバにおける重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2010-0523 2010-04-16 16:58 2010-03-29 Show GitHub Exploit DB Packet Storm
258790 9 危険 アップル - Apple Mac OS X のサーバ管理における管理者権限の処理に関する脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-0522 2010-04-16 16:58 2010-03-29 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 14, 2026, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
246331 7.5 HIGH
Network 		lucky9 lucky9io The fallback function of a simple lottery smart contract implementation for Lucky9io, an Ethereum gambling game, generates a random value with the publicly readable variable entry_number. This variab… CWE-338
 Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) 		CVE-2018-17071 2024-11-21 12:53 2018-09-19 Show GitHub Exploit DB Packet Storm
246332 7.5 HIGH
Network 		monstra monstra admin/index.php in Monstra CMS 3.0.4 allows arbitrary directory listing via id=filesmanager&path=uploads/.......//./.......//./ requests. CWE-22
Path Traversal 		CVE-2018-16820 2024-11-21 12:53 2018-09-19 Show GitHub Exploit DB Packet Storm
246333 4.9 MEDIUM
Network 		monstra monstra admin/index.php in Monstra CMS 3.0.4 allows arbitrary file deletion via id=filesmanager&path=uploads/.......//./.......//./&delete_file= requests. CWE-22
Path Traversal 		CVE-2018-16819 2024-11-21 12:53 2018-09-19 Show GitHub Exploit DB Packet Storm
246334 8.6 HIGH
Network 		microsoft active_directory_federation_services Microsoft ADFS 4.0 Windows Server 2016 and previous (Active Directory Federation Services) has an SSRF vulnerability via the txtBoxEmail parameter in /adfs/ls. CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2018-16794 2024-11-21 12:53 2018-09-19 Show GitHub Exploit DB Packet Storm
246335 5.3 MEDIUM
Network 		circontrol circarlife_scada An issue was discovered in CIRCONTROL CirCarLife before 4.3. There is system software information disclosure due to lack of authentication for /html/device-id. CWE-200
Information Exposure 		CVE-2018-16671 2024-11-21 12:53 2018-09-19 Show GitHub Exploit DB Packet Storm
246336 5.3 MEDIUM
Network 		circontrol circarlife_scada An issue was discovered in CIRCONTROL CirCarLife before 4.3. There is PLC status disclosure due to lack of authentication for /html/devstat.html. CWE-287
Improper Authentication 		CVE-2018-16670 2024-11-21 12:53 2018-09-19 Show GitHub Exploit DB Packet Storm
246337 9.8 CRITICAL
Network 		circontrol open_charge_point_protocol An issue was discovered in CIRCONTROL Open Charge Point Protocol (OCPP) before 1.5.0, as used in CirCarLife, PowerStudio, and other products. Due to storage of credentials in XML files, an unprivileg… CWE-522
 Insufficiently Protected Credentials 		CVE-2018-16669 2024-11-21 12:53 2018-09-19 Show GitHub Exploit DB Packet Storm
246338 5.3 MEDIUM
Network 		circontrol circarlife_scada An issue was discovered in CIRCONTROL CirCarLife before 4.3. There is internal installation path disclosure due to the lack of authentication for /html/repository. CWE-287
Improper Authentication 		CVE-2018-16668 2024-11-21 12:53 2018-09-19 Show GitHub Exploit DB Packet Storm
246339 9.8 CRITICAL
Network 		western_digital my_cloud_wdbctl0020hwt_firmware
my_cloud_pr4100
my_cloud_pr2100_firmware
my_cloud_mirror_gen_2_firmware
my_cloud_mirror_firmware
my_cloud_ex4100
my_cloud_ex4_firmware
my_cloud_ex… 		It was discovered that the Western Digital My Cloud device before 2.30.196 is affected by an authentication bypass vulnerability. An unauthenticated attacker can exploit this vulnerability to authent… CWE-287
Improper Authentication 		CVE-2018-17153 2024-11-21 12:53 2018-09-19 Show GitHub Exploit DB Packet Storm
246340 6.1 MEDIUM
Network 		oracle webcenter_interaction The login function of Oracle WebCenter Interaction Portal 10.3.3 is vulnerable to reflected cross-site scripting (XSS). The content of the in_hi_redirect parameter, when prefixed with the https:// sc… CWE-79
Cross-site Scripting 		CVE-2018-16955 2024-11-21 12:53 2018-09-18 Show GitHub Exploit DB Packet Storm