Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 18, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
258911	3.5	注意	オラクル	-	Oracle Fusion Middleware の Application Server Control コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-2381	2010-07-30 17:43	2010-07-13	Show	GitHub Exploit DB Packet Storm

258912	3.5	注意	オラクル	-	Oracle Fusion Middleware の Application Server Control コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0081	2010-07-30 17:42	2010-07-13	Show	GitHub Exploit DB Packet Storm

258913	4.3	警告	オラクル	-	Oracle Fusion Middleware の Wireless コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0835	2010-07-30 17:42	2010-07-13	Show	GitHub Exploit DB Packet Storm

258914	6.4	警告	オラクル	-	Oracle Fusion Middleware の WebLogic Server コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-2375	2010-07-30 17:42	2010-07-13	Show	GitHub Exploit DB Packet Storm

258915	9.3	危険	マイクロソフト	-	Microsoft Office Outlook における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-0266	2010-07-30 17:42	2010-07-13	Show	GitHub Exploit DB Packet Storm

258916	9.3	危険	マイクロソフト	-	Microsoft Office Access の FieldList の ActiveX コントロールにおける任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-1881	2010-07-30 17:41	2010-07-13	Show	GitHub Exploit DB Packet Storm

258917	9.3	危険	マイクロソフト	-	Microsoft Office Access の Microsoft Access Wizard Controls における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-0814	2010-07-30 17:41	2010-07-13	Show	GitHub Exploit DB Packet Storm

258918	2.1	注意	日立 CA Technologies	-	Windows 上で稼働する CA ARCserve Backup における重要な情報を取得される脆弱性	CWE-noinfo 情報不足	CVE-2010-2157	2010-07-29 18:57	2010-06-3	Show	GitHub Exploit DB Packet Storm

258919	3.5	注意	ターボリナックス Samba Project	-	Samba の smbd におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2010-0926	2010-07-29 18:57	2010-02-24	Show	GitHub Exploit DB Packet Storm

258920	4.3	警告	サイバートラスト株式会社 LibTIFF レッドハット	-	LibTIFF の TIFFVStripSize 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2010-2597	2010-07-28 19:31	2010-07-2	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 18, 2026, 4 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
250131	4.3	MEDIUM Network	apache	solr	In Apache Solr, the cluster can be partitioned into multiple collections and only a subset of nodes actually host any given collection. However, if a node receives a request for a collection it does …	CWE-863 Incorrect Authorization	CVE-2018-11802	2024-11-21 12:44	2020-04-2	Show	GitHub Exploit DB Packet Storm

250132	7.8	HIGH Local	qualcomm	apq8053_firmware mdm9640_firmware sda660_firmware sdm636_firmware sdm660_firmware sdx20_firmware	Possible double free issue in WLAN due to lack of checking memory free condition. in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdr…	CWE-415 Double Free	CVE-2018-11838	2024-11-21 12:44	2020-03-5	Show	GitHub Exploit DB Packet Storm

250133	7.8	HIGH Local	qualcomm	apq8009_firmware apq8017_firmware apq8053_firmware apq8064_firmware apq8096au_firmware mdm9206_firmware mdm9207c_firmware mdm9607_firmware mdm9640_firmware mdm9650_firmware…	When a fake broadcast/multicast 11w rmf without mmie received, since no proper length check in wma_process_bip, buffer overflow will happen in both cds_is_mmie_valid and qdf_nbuf_trim_tail in Snapdra…	CWE-120 Classic Buffer Overflow	CVE-2018-11980	2024-11-21 12:44	2019-12-18	Show	GitHub Exploit DB Packet Storm

250134	6.7	MEDIUM Local	apache debian	spamassassin debian_linux	In Apache SpamAssassin before 3.4.3, nefarious CF files can be configured to run system commands without any output or errors. With this, exploits can be injected in a number of scenarios. In additio…	CWE-78 OS Command	CVE-2018-11805	2024-11-21 12:44	2019-12-13	Show	GitHub Exploit DB Packet Storm

250135	6.5	MEDIUM Local	intel debian opensuse fedoraproject canonical f5 redhat oracle	core_i3-10110u_firmware core_i3-10110y_firmware core_i3-1005g1_firmware core_i3-9300t_firmware core_i3-9300_firmware core_i3-9100_firmware core_i3-9100t_firmware core_i3-9350k_fi…	Improper invalidation for page table updates by a virtual guest operating system for multiple Intel(R) Processors may allow an authenticated user to potentially enable denial of service of the host s…	CWE-20 Improper Input Validation	CVE-2018-12207	2024-11-21 12:44	2019-11-15	Show	GitHub Exploit DB Packet Storm

250136	6.5	MEDIUM Network	apache	subversion	In Apache Subversion versions up to and including 1.9.10, 1.10.4, 1.12.0, Subversion's svnserve server process may exit when a well-formed read-only request produces a particular answer. This can lea…	CWE-20 Improper Input Validation	CVE-2018-11782	2024-11-21 12:44	2019-09-27	Show	GitHub Exploit DB Packet Storm

250137	5.4	MEDIUM Network	clippercms	clippercms	CMS Clipper 1.3.3 has XSS in the Security tab search, User Groups, Resource Groups, and User/Resource Group Links fields.	CWE-79 Cross-site Scripting	CVE-2018-12101	2024-11-21 12:44	2019-08-16	Show	GitHub Exploit DB Packet Storm

250138	7.2	HIGH Network	apache	virtual_computing_lab	Apache VCL versions 2.1 through 2.5 do not properly validate form input when adding and removing VMs to and from hosts. The form data is then used in SQL statements. This allows for an SQL injection …	CWE-89 SQL Injection	CVE-2018-11774	2024-11-21 12:44	2019-07-30	Show	GitHub Exploit DB Packet Storm

250139	9.8	CRITICAL Network	apache	virtual_computing_lab	Apache VCL versions 2.1 through 2.5 do not properly validate form input when processing a submitted block allocation. The form data is then used as an argument to the php built in function strtotime.…	CWE-20 Improper Input Validation	CVE-2018-11773	2024-11-21 12:44	2019-07-30	Show	GitHub Exploit DB Packet Storm

250140	7.2	HIGH Network	apache	virtual_computing_lab	Apache VCL versions 2.1 through 2.5 do not properly validate cookie input when determining what node (if any) was previously selected in the privilege tree. The cookie data is then used in an SQL sta…	CWE-89 SQL Injection	CVE-2018-11772	2024-11-21 12:44	2019-07-30	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed