Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":July 1, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
258801 5 警告 The Perl Foundation
レッドハット		 - Perl の lc、lcfirst、uc および ucfirst 関数における汚染 (Taint) 保護メカニズムを回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2011-1487 2011-05-26 09:55 2011-03-1 Show GitHub Exploit DB Packet Storm
258802 7.5 危険 IBM
サイバートラスト株式会社
サン・マイクロシステムズ
Sendmail Consortium
ターボリナックス
ヒューレット・パッカード
レッドハット		 - sendmail における X.509 証明書の処理に関する任意の SSL-based SMTP サーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2009-4565 2011-05-26 09:52 2010-01-4 Show GitHub Exploit DB Packet Storm
258803 5 警告 シックス・アパート株式会社 - Movable Type におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-5845 2011-05-25 14:03 2011-05-25 Show GitHub Exploit DB Packet Storm
258804 9.3 危険 マイクロソフト - Microsoft PowerPoint におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2011-1270 2011-05-25 12:24 2011-05-10 Show GitHub Exploit DB Packet Storm
258805 9.3 危険 マイクロソフト - 複数の Microsoft 製品における任意のコードを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2011-1269 2011-05-25 12:22 2011-05-10 Show GitHub Exploit DB Packet Storm
258806 9.3 危険 マイクロソフト - Microsoft Windows の WINS における任意のコードを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2011-1248 2011-05-25 12:15 2011-05-10 Show GitHub Exploit DB Packet Storm
258807 7.5 危険 サムスン - Samsung Integrated Management System DMS に SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-4284 2011-05-25 12:12 2011-05-9 Show GitHub Exploit DB Packet Storm
258808 5 警告 VMware - 複数の VMware 製品の self-extracting インストーラにおけるソフトウェアの配布を偽造される脆弱性 CWE-310
暗号の問題 		CVE-2011-1789 2011-05-25 12:09 2011-05-5 Show GitHub Exploit DB Packet Storm
258809 - - Proofpoint, Inc. - Proofpoint Protection Server に複数の脆弱性 - - 2011-05-25 12:07 2011-05-6 Show GitHub Exploit DB Packet Storm
258810 5.1 警告 Aleksey
レッドハット		 - WebKit などで利用される xslt.c における任意のファイルを作成される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2011-1425 2011-05-24 10:03 2011-03-31 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:July 1, 2026, 4:27 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
255061 5.4 MEDIUM
Network 		microsoft sharepoint_enterprise_server SharePoint Server 2016 allows an elevation of privilege vulnerability due to how web requests are handled, aka "Microsoft SharePoint Elevation of Privilege Vulnerability". CWE-79
Cross-site Scripting 		CVE-2018-0869 2024-11-21 12:39 2018-02-15 Show GitHub Exploit DB Packet Storm
255062 5.4 MEDIUM
Network 		microsoft sharepoint_server SharePoint Project Server 2013 and SharePoint Enterprise Server 2016 allow an information disclosure vulnerability due to how web requests are handled, aka "Microsoft SharePoint Information Disclosur… CWE-79
Cross-site Scripting 		CVE-2018-0864 2024-11-21 12:39 2018-02-15 Show GitHub Exploit DB Packet Storm
255063 7.5 HIGH
Network 		microsoft edge Microsoft Edge in Microsoft Windows 10 1607, 1703, and Windows Server 2016 allows remote code execution, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corrup… CWE-787
 Out-of-bounds Write 		CVE-2018-0861 2024-11-21 12:39 2018-02-15 Show GitHub Exploit DB Packet Storm
255064 7.5 HIGH
Network 		microsoft edge Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the scripting engine handles objects in memory, ak… CWE-787
 Out-of-bounds Write 		CVE-2018-0860 2024-11-21 12:39 2018-02-15 Show GitHub Exploit DB Packet Storm
255065 7.5 HIGH
Network 		microsoft chakracore
edge 		Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the scripting engine handles objects in memory, ak… CWE-787
 Out-of-bounds Write 		CVE-2018-0859 2024-11-21 12:39 2018-02-15 Show GitHub Exploit DB Packet Storm
255066 7.5 HIGH
Network 		microsoft chakracore ChakraCore allows remote code execution, due to how the ChakraCore scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2… CWE-787
 Out-of-bounds Write 		CVE-2018-0858 2024-11-21 12:39 2018-02-15 Show GitHub Exploit DB Packet Storm
255067 7.5 HIGH
Network 		microsoft chakracore
edge 		Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the scripting engine handles objects in memory, ak… CWE-787
 Out-of-bounds Write 		CVE-2018-0857 2024-11-21 12:39 2018-02-15 Show GitHub Exploit DB Packet Storm
255068 7.5 HIGH
Network 		microsoft chakracore
edge 		Microsoft Edge and ChakraCore in Microsoft Windows 10 1703 and 1709 allows remote code execution, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vu… CWE-787
 Out-of-bounds Write 		CVE-2018-0856 2024-11-21 12:39 2018-02-15 Show GitHub Exploit DB Packet Storm
255069 4.3 MEDIUM
Network 		microsoft windows_server_2008
windows_7 		The Microsoft Windows Embedded OpenType (EOT) font engine in Microsoft Windows 7 SP1 and Windows Server 2008 R2 allows information disclosure, due to how the Windows EOT font engine handles embedded … CWE-200
Information Exposure 		CVE-2018-0855 2024-11-21 12:39 2018-02-15 Show GitHub Exploit DB Packet Storm
255070 3.3 LOW
Local 		microsoft office Microsoft Office 2010 SP2, Microsoft Office 2013 SP1 and RT SP1, Microsoft Office 2016, and Microsoft Office 2016 Click-to-Run (C2R) allow an information disclosure vulnerability, due to how Office i… CWE-665
 Improper Initialization 		CVE-2018-0853 2024-11-21 12:39 2018-02-15 Show GitHub Exploit DB Packet Storm