Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":July 1, 2026, 4:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
258801	5	警告	The Perl Foundation レッドハット	-	Perl の lc、lcfirst、uc および ucfirst 関数における汚染 (Taint) 保護メカニズムを回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-1487	2011-05-26 09:55	2011-03-1	Show	GitHub Exploit DB Packet Storm

258802	7.5	危険	IBM サイバートラスト株式会社サン・マイクロシステムズ Sendmail Consortium ターボリナックスヒューレット・パッカードレッドハット	-	sendmail における X.509 証明書の処理に関する任意の SSL-based SMTP サーバになりすまされる脆弱性	CWE-310 暗号の問題	CVE-2009-4565	2011-05-26 09:52	2010-01-4	Show	GitHub Exploit DB Packet Storm

258803	5	警告	シックス・アパート株式会社	-	Movable Type におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-5845	2011-05-25 14:03	2011-05-25	Show	GitHub Exploit DB Packet Storm

258804	9.3	危険	マイクロソフト	-	Microsoft PowerPoint におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2011-1270	2011-05-25 12:24	2011-05-10	Show	GitHub Exploit DB Packet Storm

258805	9.3	危険	マイクロソフト	-	複数の Microsoft 製品における任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2011-1269	2011-05-25 12:22	2011-05-10	Show	GitHub Exploit DB Packet Storm

258806	9.3	危険	マイクロソフト	-	Microsoft Windows の WINS における任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2011-1248	2011-05-25 12:15	2011-05-10	Show	GitHub Exploit DB Packet Storm

258807	7.5	危険	サムスン	-	Samsung Integrated Management System DMS に SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4284	2011-05-25 12:12	2011-05-9	Show	GitHub Exploit DB Packet Storm

258808	5	警告	VMware	-	複数の VMware 製品の self-extracting インストーラにおけるソフトウェアの配布を偽造される脆弱性	CWE-310 暗号の問題	CVE-2011-1789	2011-05-25 12:09	2011-05-5	Show	GitHub Exploit DB Packet Storm

258809	-	-	Proofpoint, Inc.	-	Proofpoint Protection Server に複数の脆弱性	-	-	2011-05-25 12:07	2011-05-6	Show	GitHub Exploit DB Packet Storm

258810	5.1	警告	Aleksey レッドハット	-	WebKit などで利用される xslt.c における任意のファイルを作成される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-1425	2011-05-24 10:03	2011-03-31	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:July 1, 2026, 4:27 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
247291	8.8	HIGH Network	cloudfoundry	cf-release cf-deployment capi-release	In Cloud Controller versions prior to 1.46.0, cf-deployment versions prior to 1.3.0, and cf-release versions prior to 283, Cloud Controller accepts refresh tokens for authentication where access toke…	CWE-613 Insufficient Session Expiration	CVE-2018-1195	2024-11-21 12:59	2018-03-20	Show	GitHub Exploit DB Packet Storm

247292	5.9	MEDIUM Network	vmware	spring_boot	Spring Boot supports an embedded launch script that can be used to easily run the application as a systemd or init.d linux service. The script included with Spring Boot 1.5.9 and earlier and 2.0.0.M1…	CWE-59 Link Following	CVE-2018-1196	2024-11-21 12:59	2018-03-20	Show	GitHub Exploit DB Packet Storm

247293	7.0	HIGH Local	joyent oracle	smartos solaris	This vulnerability allows local attackers to escalate privileges on vulnerable installations of Joyent SmartOS release-20170803-20170803T064301Z. An attacker must first obtain the ability to execute …	CWE-787 Out-of-bounds Write	CVE-2018-1171	2024-11-21 12:59	2018-03-20	Show	GitHub Exploit DB Packet Storm

247294	6.5	MEDIUM Network	pivotal_software	pivotal_application_service	Apps Manager for PCF (Pivotal Application Service 1.11.x before 1.11.26, 1.12.x before 1.12.14, and 2.0.x before 2.0.5) allows unprivileged remote file read in its container via specially-crafted lin…	CWE-200 Information Exposure	CVE-2018-1200	2024-11-21 12:59	2018-03-17	Show	GitHub Exploit DB Packet Storm

247295	5.3	MEDIUM Network	vmware redhat oracle	spring_framework spring_security fuse retail_xstore_point_of_service rapid_planning	Spring Security (Spring Security 4.1.x before 4.1.5, 4.2.x before 4.2.4, and 5.0.x before 5.0.1; and Spring Framework 4.3.x before 4.3.14 and 5.0.x before 5.0.3) does not consider URL path parameters…	CWE-20 Improper Input Validation	CVE-2018-1199	2024-11-21 12:59	2018-03-17	Show	GitHub Exploit DB Packet Storm

247296	9.8	CRITICAL Network	opendaylight	openflow	OpenDayLight version Carbon SR3 and earlier contain a vulnerability during node reconciliation that can result in traffic flows that should be expired or should expire shortly being re-installed and …	NVD-CWE-noinfo	CVE-2018-1078	2024-11-21 12:59	2018-03-17	Show	GitHub Exploit DB Packet Storm

247297	6.7	MEDIUM Local	linux canonical debian redhat	linux_kernel ubuntu_linux debian_linux enterprise_linux_desktop enterprise_linux_workstation enterprise_linux_server virtualization_host enterprise_linux_server_eus enterprise…	A flaw was found in the Linux 4.x kernel's implementation of 32-bit syscall interface for bridging. This allowed a privileged user to arbitrarily write to a limited range of kernel memory.	CWE-787 Out-of-bounds Write	CVE-2018-1068	2024-11-21 12:59	2018-03-17	Show	GitHub Exploit DB Packet Storm

247298	5.5	MEDIUM Local	apache oracle	commons_compress weblogic_server mysql_cluster	A specially crafted ZIP archive can be used to cause an infinite loop inside of Apache Commons Compress' extra field parser used by the ZipFile and ZipArchiveInputStream classes in versions 1.11 to 1…	CWE-835 Loop with Unreachable Exit Condition ('Infinite Loop')	CVE-2018-1324	2024-11-21 12:59	2018-03-16	Show	GitHub Exploit DB Packet Storm

247299	6.1	MEDIUM Network	apache	allura	In Apache Allura prior to 1.8.1, attackers may craft URLs that cause HTTP response splitting. If a victim goes to a maliciously crafted URL, unwanted results may occur including XSS or service denial…	CWE-74 Injection	CVE-2018-1319	2024-11-21 12:59	2018-03-16	Show	GitHub Exploit DB Packet Storm

247300	7.5	HIGH Network	redhat	spacewalk satellite	Spacewalk 2.6 contains an API which has an XXE flaw allowing for the disclosure of potentially sensitive information from the server.	CWE-611 XXE	CVE-2018-1077	2024-11-21 12:59	2018-03-15	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed