Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 15, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
258791 10 危険 アップル - Apple Mac OS X 上で稼働する Safari における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2010-1120 2010-05-18 16:39 2010-03-25 Show GitHub Exploit DB Packet Storm
258792 6.9 警告 KDE project
サイバートラスト株式会社
レッドハット		 - KDE の KDM における制御ソケットの処理に関する権限昇格の脆弱性 CWE-362
競合状態 		CVE-2010-0436 2010-05-18 16:39 2010-04-13 Show GitHub Exploit DB Packet Storm
258793 1.9 注意 レッドハット - Free Software Foundation Berkeley DB の NSS モジュールにおける情報漏えいの脆弱性 CWE-200
情報漏えい 		CVE-2010-0826 2010-05-18 16:38 2010-04-5 Show GitHub Exploit DB Packet Storm
258794 7.8 危険 日本電気 - CapsSuite Small Edition PatchMeister におけるサービス運用妨害 (DoS) の脆弱性 CWE-DesignError
CVE-2010-1943 2010-05-17 12:03 2010-05-17 Show GitHub Exploit DB Packet Storm
258795 7.8 危険 日本電気 - WebSAM DeploymentManager におけるサービス運用妨害 (DoS) の脆弱性 CWE-DesignError
CVE-2010-1941 2010-05-17 12:02 2010-05-17 Show GitHub Exploit DB Packet Storm
258796 6.4 警告 富士通 - Interstage Application Server におけるリクエスト処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2010-1942 2010-05-17 12:01 2010-05-17 Show GitHub Exploit DB Packet Storm
258797 2.1 注意 オラクル - Oracle Sun Product Suite の Sun Cluster コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-0884 2010-05-14 18:43 2010-04-13 Show GitHub Exploit DB Packet Storm
258798 2.1 注意 オラクル - Oracle Sun Product Suite の Sun Cluster コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-0883 2010-05-14 18:43 2010-04-13 Show GitHub Exploit DB Packet Storm
258799 2.1 注意 サン・マイクロシステムズ
オラクル		 - Oracle Sun Product Suite の Solaris コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-0890 2010-05-14 18:42 2010-04-13 Show GitHub Exploit DB Packet Storm
258800 3.6 注意 サン・マイクロシステムズ
オラクル		 - Oracle Sun Product Suite の Solaris コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-0895 2010-05-14 18:42 2010-04-13 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 15, 2026, 4:10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
249591 5.5 MEDIUM
Local 		junrar_project junrar Archive.java in Junrar before 1.0.1, as used in Apache Tika and other products, is affected by a denial of service vulnerability due to an infinite loop when handling corrupt RAR files. CWE-835
 Loop with Unreachable Exit Condition ('Infinite Loop') 		CVE-2018-12418 2024-11-21 12:45 2018-06-15 Show GitHub Exploit DB Packet Storm
249592 6.1 MEDIUM
Network 		eng knowage Knowage (formerly SpagoBI) 6.1.1 allows XSS via the name or description field to the "Olap Schemas' Catalogue" catalogue. CWE-79
Cross-site Scripting 		CVE-2018-12355 2024-11-21 12:45 2018-06-14 Show GitHub Exploit DB Packet Storm
249593 8.8 HIGH
Network 		knowage-suite knowage Knowage (formerly SpagoBI) 6.1.1 allows CSRF via every form, as demonstrated by a /knowage/restful-services/2.0/analyticalDrivers/ POST request. CWE-352
 Origin Validation Error 		CVE-2018-12354 2024-11-21 12:45 2018-06-14 Show GitHub Exploit DB Packet Storm
249594 6.1 MEDIUM
Network 		knowage-suite knowage Knowage (formerly SpagoBI) 6.1.1 allows XSS via the name field to the "Business Model's Catalogue" catalogue. CWE-79
Cross-site Scripting 		CVE-2018-12353 2024-11-21 12:45 2018-06-14 Show GitHub Exploit DB Packet Storm
249595 5.4 MEDIUM
Network 		articlecms_project articlecms ArticleCMS through 2017-02-19 has XSS via an "add an article" action. CWE-79
Cross-site Scripting 		CVE-2018-12339 2024-11-21 12:45 2018-06-14 Show GitHub Exploit DB Packet Storm
249596 4.3 MEDIUM
Network 		apache solr In Apache Solr, the cluster can be partitioned into multiple collections and only a subset of nodes actually host any given collection. However, if a node receives a request for a collection it does … CWE-863
 Incorrect Authorization 		CVE-2018-11802 2024-11-21 12:44 2020-04-2 Show GitHub Exploit DB Packet Storm
249597 7.8 HIGH
Local 		qualcomm apq8053_firmware
mdm9640_firmware
sda660_firmware
sdm636_firmware
sdm660_firmware
sdx20_firmware 		Possible double free issue in WLAN due to lack of checking memory free condition. in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdr… CWE-415
 Double Free 		CVE-2018-11838 2024-11-21 12:44 2020-03-5 Show GitHub Exploit DB Packet Storm
249598 7.8 HIGH
Local 		qualcomm apq8009_firmware
apq8017_firmware
apq8053_firmware
apq8064_firmware
apq8096au_firmware
mdm9206_firmware
mdm9207c_firmware
mdm9607_firmware
mdm9640_firmware
mdm9650_firmware… 		When a fake broadcast/multicast 11w rmf without mmie received, since no proper length check in wma_process_bip, buffer overflow will happen in both cds_is_mmie_valid and qdf_nbuf_trim_tail in Snapdra… CWE-120
Classic Buffer Overflow 		CVE-2018-11980 2024-11-21 12:44 2019-12-18 Show GitHub Exploit DB Packet Storm
249599 6.7 MEDIUM
Local 		apache
debian 		spamassassin
debian_linux 		In Apache SpamAssassin before 3.4.3, nefarious CF files can be configured to run system commands without any output or errors. With this, exploits can be injected in a number of scenarios. In additio… CWE-78
OS Command  		CVE-2018-11805 2024-11-21 12:44 2019-12-13 Show GitHub Exploit DB Packet Storm
249600 6.5 MEDIUM
Local 		intel
debian
opensuse
fedoraproject
canonical
f5
redhat
oracle 		core_i3-10110u_firmware
core_i3-10110y_firmware
core_i3-1005g1_firmware
core_i3-9300t_firmware
core_i3-9300_firmware
core_i3-9100_firmware
core_i3-9100t_firmware
core_i3-9350k_fi… 		Improper invalidation for page table updates by a virtual guest operating system for multiple Intel(R) Processors may allow an authenticated user to potentially enable denial of service of the host s… CWE-20
 Improper Input Validation  		CVE-2018-12207 2024-11-21 12:44 2019-11-15 Show GitHub Exploit DB Packet Storm