Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 30, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
258931 1.9 注意 IBM - IBM WebSphere Application Server の Administrative Scripting Tools における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2011-1310 2011-04-8 13:32 2010-07-19 Show GitHub Exploit DB Packet Storm
258932 4 警告 Cyber-Ark Software - Password Vault Web Access におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2011-0459 2011-04-8 12:01 2011-04-8 Show GitHub Exploit DB Packet Storm
258933 4.6 警告 Linux
レッドハット
- Linux kernel の KVM 実装におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2010-3698 2011-04-8 11:23 2010-10-20 Show GitHub Exploit DB Packet Storm
258934 5 警告 IBM - IBM WebSphere Application Server の SOAP with Attachments API for Java (SAAJ) 実装におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2011-1322 2011-04-7 15:40 2010-07-29 Show GitHub Exploit DB Packet Storm
258935 6.5 警告 IBM - IBM WebSphere Application Server の AuthCache パージ実装における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2011-1321 2011-04-7 15:38 2010-10-18 Show GitHub Exploit DB Packet Storm
258936 5 警告 IBM - IBM WebSphere Application Server の com.ibm.ws.jsp.runtime.WASJSPStrBufferImpl におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2011-1317 2011-04-7 15:35 2010-07-29 Show GitHub Exploit DB Packet Storm
258937 5 警告 IBM - IBM WebSphere Application Server の org.apache.jasper.runtime.JspWriterImpl.response におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2011-1318 2011-04-7 15:25 2010-09-22 Show GitHub Exploit DB Packet Storm
258938 5 警告 IBM - IBM WebSphere Application Server の Session Initiation Protocol におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2011-1316 2011-04-7 15:23 2010-09-23 Show GitHub Exploit DB Packet Storm
258939 5 警告 IBM - IBM WebSphere Application Server のメッセージングエンジンにおけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2011-1315 2011-04-7 15:21 2010-09-30 Show GitHub Exploit DB Packet Storm
258940 5 警告 IBM - IBM WebSphere Application Server の Service Integration Bus メッセージングエンジンにおけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2011-1314 2011-04-7 15:19 2010-08-4 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 30, 2026, 4:22 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
246271 6.1 MEDIUM
Network
nagios nagios_xi An issue was discovered in Nagios XI before 5.5.8. The rss_url parameter of rss_dashlet/magpierss/scripts/magpie_slashbox.php is not filtered, resulting in an XSS vulnerability. CWE-79
Cross-site Scripting
CVE-2018-20172 2024-11-21 13:01 2018-12-18 Show GitHub Exploit DB Packet Storm
246272 6.1 MEDIUM
Network
nagios nagios_xi An issue was discovered in Nagios XI before 5.5.8. The url parameter of rss_dashlet/magpierss/scripts/magpie_simple.php is not filtered, resulting in an XSS vulnerability. CWE-79
Cross-site Scripting
CVE-2018-20171 2024-11-21 13:01 2018-12-18 Show GitHub Exploit DB Packet Storm
246273 9.8 CRITICAL
Network
zohocorp manageengine_opmanager Zoho ManageEngine OpManager 12.3 before 123238 allows SQL injection via the getGraphData API. CWE-89
SQL Injection
CVE-2018-20173 2024-11-21 13:01 2018-12-17 Show GitHub Exploit DB Packet Storm
246274 5.3 MEDIUM
Network
openstack keystone OpenStack Keystone through 14.0.1 has a user enumeration vulnerability because invalid usernames have much faster responses than valid ones for a POST /v3/auth/tokens request. NOTE: the vendor's posi… CWE-200
Information Exposure
CVE-2018-20170 2024-11-21 13:01 2018-12-17 Show GitHub Exploit DB Packet Storm
246275 6.8 MEDIUM
Physics
linux
canonical
debian
linux_kernel
ubuntu_linux
debian_linux
An issue was discovered in the Linux kernel before 4.19.9. The USB subsystem mishandles size checks during the reading of an extra descriptor, related to __usb_get_extra_descriptor in drivers/usb/cor… CWE-400
 Uncontrolled Resource Consumption
CVE-2018-20169 2024-11-21 13:01 2018-12-17 Show GitHub Exploit DB Packet Storm
246276 2.3 LOW
Local
ibm qradar_security_information_and_event_manager IBM QRadar SIEM 7.3 and 7.4 n a multi tenant configuration could be vulnerable to information disclosure. IBM X-Force ID: 147440. NVD-CWE-noinfo
CVE-2018-1725 2024-11-21 13:00 2020-11-6 Show GitHub Exploit DB Packet Storm
246277 4.4 MEDIUM
Local
ibm security_rapport IBM Trusteer Rapport/Apex 3.6.1908.22 contains an unused legacy driver which could allow a user with administrator privileges to cause a buffer overflow that would result in a kernel panic. IBM X-For… CWE-120
Classic Buffer Overflow
CVE-2018-1985 2024-11-21 13:00 2020-08-25 Show GitHub Exploit DB Packet Storm
246278 5.5 MEDIUM
Local
yast2-rmt_project
opensuse
suse
yast2-rmt
leap
suse_linux_enterprise_server
A Inclusion of Sensitive Information in Log Files vulnerability in yast2-rmt of SUSE Linux Enterprise Server 15; openSUSE Leap allows local attackers to learn the password if they can access the log … CWE-532
 Inclusion of Sensitive Information in Log Files
CVE-2018-20105 2024-11-21 13:00 2020-01-27 Show GitHub Exploit DB Packet Storm
246279 5.3 MEDIUM
Network
ibm watston_studio_local IBM Watson Studio Local 1.2.3 could disclose sensitive information over the network that an attacked could use in further attacks against the system. IBM X-Force ID: 145238. CWE-200
Information Exposure
CVE-2018-1682 2024-11-21 13:00 2019-12-31 Show GitHub Exploit DB Packet Storm
246280 8.8 HIGH
Network
ibm cognos_business_intelligence IBM Cognos Business Intelligence 10.2.2 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the websit… CWE-352
 Origin Validation Error
CVE-2018-1934 2024-11-21 13:00 2019-12-21 Show GitHub Exploit DB Packet Storm