Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 14, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
258791 5 警告 アップル - Apple Mac OS X のサーバ管理における重要な情報を取得される脆弱性 CWE-287
不適切な認証 		CVE-2010-0521 2010-04-16 16:58 2010-03-29 Show GitHub Exploit DB Packet Storm
258792 4.3 警告 アップル
Ruby on Rails project		 - Ruby on Rails の strip_tags 関数におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4214 2010-04-16 16:58 2009-12-7 Show GitHub Exploit DB Packet Storm
258793 4.3 警告 アップル
Ruby on Rails project		 - Ruby on Rails におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-3009 2010-04-16 16:58 2009-09-8 Show GitHub Exploit DB Packet Storm
258794 7.5 危険 アップル
Ruby on Rails project		 - Ruby on Rails のダイジェスト認証における認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2009-2422 2010-04-16 16:57 2009-07-10 Show GitHub Exploit DB Packet Storm
258795 6.8 警告 アップル - Apple Mac OS X の QuickTime におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2010-0526 2010-04-16 16:57 2010-03-29 Show GitHub Exploit DB Packet Storm
258796 6.8 警告 アップル - Apple Mac OS X の QuickTime におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2010-0520 2010-04-16 16:57 2010-03-29 Show GitHub Exploit DB Packet Storm
258797 6.8 警告 アップル - Apple Mac OS X の QuickTime における整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2010-0519 2010-04-16 16:57 2010-03-29 Show GitHub Exploit DB Packet Storm
258798 6.8 警告 アップル - Apple Mac OS X の QuickTime における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2010-0518 2010-04-16 16:56 2010-03-29 Show GitHub Exploit DB Packet Storm
258799 6.8 警告 アップル - Apple Mac OS X の QuickTime におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2010-0517 2010-04-16 16:56 2010-03-29 Show GitHub Exploit DB Packet Storm
258800 6.8 警告 アップル - Apple Mac OS X の QuickTime におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2010-0516 2010-04-15 18:39 2010-03-29 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 15, 2026, 4:10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
246791 6.5 MEDIUM
Adjacent 		qbeecam
swisscom 		qbee_multi-sensor_camera_firmware
swisscom_home_app
qbeecam 		The QBee MultiSensor Camera through 4.16.4 accepts unencrypted network traffic from clients (such as the QBee Cam application through 1.0.5 for Android and the Swisscom Home application up to 10.7.2 … CWE-319
Cleartext Transmission of Sensitive Information 		CVE-2018-16225 2024-11-21 12:52 2018-09-19 Show GitHub Exploit DB Packet Storm
246792 7.8 HIGH
Local 		jhead_project jhead The ProcessGpsInfo function of the gpsinfo.c file of jhead 3.00 may allow a remote attacker to cause a denial-of-service attack or unspecified other impact via a malicious JPEG file, because of incon… CWE-134
Use of Externally-Controlled Format String 		CVE-2018-16554 2024-11-21 12:52 2018-09-16 Show GitHub Exploit DB Packet Storm
246793 8.6 HIGH
Network 		lg supersign_cms LG SuperSign CMS allows reading of arbitrary files via signEzUI/playlist/edit/upload/..%2f URIs. CWE-200
Information Exposure 		CVE-2018-16288 2024-11-21 12:52 2018-09-15 Show GitHub Exploit DB Packet Storm
246794 9.8 CRITICAL
Network 		lg supersign_cms LG SuperSign CMS allows file upload via signEzUI/playlist/edit/upload/..%2f URIs. CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2018-16287 2024-11-21 12:52 2018-09-15 Show GitHub Exploit DB Packet Storm
246795 9.8 CRITICAL
Network 		lg supersign_cms LG SuperSign CMS allows authentication bypass because the CAPTCHA requirement is skipped if a captcha:pass cookie is sent, and because the PIN is limited to four digits. CWE-287
Improper Authentication 		CVE-2018-16286 2024-11-21 12:52 2018-09-15 Show GitHub Exploit DB Packet Storm
246796 5.3 MEDIUM
Adjacent 		o.bike smart_locker_firmware
obike-stationless_bike_sharing 		oBike relies on Hangzhou Luoping Smart Locker to lock bicycles, which allows attackers to bypass the locking mechanism by using Bluetooth Low Energy (BLE) to replay ciphertext based on a predictable … CWE-294
Authentication Bypass by Capture-replay  		CVE-2018-16242 2024-11-21 12:52 2018-09-15 Show GitHub Exploit DB Packet Storm
246797 6.5 MEDIUM
Network 		e107 e107 e107_admin/banlist.php in e107 2.1.8 allows SQL injection via the old_ip parameter. CWE-89
SQL Injection 		CVE-2018-16389 2024-11-21 12:52 2018-09-13 Show GitHub Exploit DB Packet Storm
246798 7.2 HIGH
Network 		e107 e107 e107_web/js/plupload/upload.php in e107 2.1.8 allows remote attackers to execute arbitrary PHP code by uploading a .php filename with the image/jpeg content type. CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2018-16388 2024-11-21 12:52 2018-09-13 Show GitHub Exploit DB Packet Storm
246799 7.5 HIGH
Network 		currency_converter_script_project currency_converter_script PHP Scripts Mall Currency Converter Script 2.0.5 allows remote attackers to cause a denial of service (web-interface change) via an inverted comma. CWE-20
 Improper Input Validation  		CVE-2018-16454 2024-11-21 12:52 2018-09-8 Show GitHub Exploit DB Packet Storm
246800 5.4 MEDIUM
Network 		filemanagerpro file_manager The mndpsingh287 File Manager plugin V2.9 for WordPress has XSS via the lang parameter in a wp-admin/admin.php?page=wp_file_manager request because set_transient is used in file_folder_manager.php an… CWE-79
Cross-site Scripting 		CVE-2018-16363 2024-11-21 12:52 2018-09-8 Show GitHub Exploit DB Packet Storm