Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 15, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
258951	4.3	警告	アップル Ruby on Rails project	-	Ruby on Rails の strip_tags 関数におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-4214	2010-04-16 16:58	2009-12-7	Show	GitHub Exploit DB Packet Storm

258952	4.3	警告	アップル Ruby on Rails project	-	Ruby on Rails におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-3009	2010-04-16 16:58	2009-09-8	Show	GitHub Exploit DB Packet Storm

258953	7.5	危険	アップル Ruby on Rails project	-	Ruby on Rails のダイジェスト認証における認証を回避される脆弱性	CWE-287 不適切な認証	CVE-2009-2422	2010-04-16 16:57	2009-07-10	Show	GitHub Exploit DB Packet Storm

258954	6.8	警告	アップル	-	Apple Mac OS X の QuickTime におけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-0526	2010-04-16 16:57	2010-03-29	Show	GitHub Exploit DB Packet Storm

258955	6.8	警告	アップル	-	Apple Mac OS X の QuickTime におけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-0520	2010-04-16 16:57	2010-03-29	Show	GitHub Exploit DB Packet Storm

258956	6.8	警告	アップル	-	Apple Mac OS X の QuickTime における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2010-0519	2010-04-16 16:57	2010-03-29	Show	GitHub Exploit DB Packet Storm

258957	6.8	警告	アップル	-	Apple Mac OS X の QuickTime における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-0518	2010-04-16 16:56	2010-03-29	Show	GitHub Exploit DB Packet Storm

258958	6.8	警告	アップル	-	Apple Mac OS X の QuickTime におけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-0517	2010-04-16 16:56	2010-03-29	Show	GitHub Exploit DB Packet Storm

258959	6.8	警告	アップル	-	Apple Mac OS X の QuickTime におけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-0516	2010-04-15 18:39	2010-03-29	Show	GitHub Exploit DB Packet Storm

258960	6.8	警告	アップル	-	Apple Mac OS X の QuickTime における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-0515	2010-04-15 18:39	2010-03-29	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 15, 2026, 4:10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
247131	9.8	CRITICAL Network	nagios	nagios_xi	Snoopy 1.0 in Nagios XI 5.5.6 allows remote unauthenticated attackers to execute arbitrary commands via a crafted HTTP request.	NVD-CWE-noinfo	CVE-2018-15708	2024-11-21 12:51	2018-11-15	Show	GitHub Exploit DB Packet Storm

247132	8.1	HIGH Network	pivotal_software	credhub_service_broker	Pivotal CredHub Service Broker, versions prior to 1.1.0, uses a guessable form of random number generation in creating service broker's UAA client. A remote malicious user may guess the client secret…	CWE-338 Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)	CVE-2018-15795	2024-11-21 12:51	2018-11-13	Show	GitHub Exploit DB Packet Storm

247133	7.1	HIGH Local	dell	emc_recoverpoint emc_recoverpoint_for_virtual_machines	Dell EMC RecoverPoint versions prior to 5.1.2.1 and RecoverPoint for VMs versions prior to 5.2.0.2 contain an uncontrolled resource consumption vulnerability. A malicious boxmgmt user may potentially…	CWE-400 Uncontrolled Resource Consumption	CVE-2018-15772	2024-11-21 12:51	2018-11-13	Show	GitHub Exploit DB Packet Storm

247134	5.5	MEDIUM Local	emc	recoverpoint recoverpoint_for_virtual_machines	Dell EMC RecoverPoint versions prior to 5.1.2.1 and RecoverPoint for VMs versions prior to 5.2.0.2 contain an information disclosure vulnerability. A malicious boxmgmt user may potentially be able to…	CWE-200 Information Exposure	CVE-2018-15771	2024-11-21 12:51	2018-11-13	Show	GitHub Exploit DB Packet Storm

247135	8.1	HIGH Network	pivotal_software	bits_service	Cloud Foundry Bits Service Release, versions prior to 2.14.0, uses an insecure hashing algorithm to sign URLs. A remote malicious user may obtain a signed URL and extract the signing key, allowing th…	CWE-326 Inadequate Encryption Strength	CVE-2018-15796	2024-11-21 12:51	2018-11-10	Show	GitHub Exploit DB Packet Storm

247136	8.8	HIGH Network	pivotal_software	operations_manager	Pivotal Operations Manager, versions 2.0.x prior to 2.0.24, versions 2.1.x prior to 2.1.15, versions 2.2.x prior to 2.2.7, and versions 2.3.x prior to 2.3.1, grants all users a scope which allows for…	CWE-269 Improper Privilege Management	CVE-2018-15762	2024-11-21 12:51	2018-11-3	Show	GitHub Exploit DB Packet Storm

247137	5.4	MEDIUM Network	advantech	webaccess	Advantech WebAccess 8.3.1 and 8.3.2 are vulnerable to cross-site scripting in the Bwmainleft.asp page. An attacker could leverage this vulnerability to disclose credentials amongst other things.	CWE-79 Cross-site Scripting	CVE-2018-15707	2024-11-21 12:51	2018-11-1	Show	GitHub Exploit DB Packet Storm

247138	6.5	MEDIUM Network	advantech	webaccess	WADashboard API in Advantech WebAccess 8.3.1 and 8.3.2 allows remote authenticated attackers to read any file on the filesystem due to a directory traversal vulnerability in the readFile API.	CWE-22 Path Traversal	CVE-2018-15706	2024-11-21 12:51	2018-11-1	Show	GitHub Exploit DB Packet Storm

247139	6.5	MEDIUM Network	advantech	webaccess	WADashboard API in Advantech WebAccess 8.3.1 and 8.3.2 allows remote authenticated attackers to write or overwrite any file on the filesystem due to a directory traversal vulnerability in the writeFi…	CWE-22 Path Traversal	CVE-2018-15705	2024-11-21 12:51	2018-11-1	Show	GitHub Exploit DB Packet Storm

247140	8.8	HIGH Adjacent	systemd_project debian canonical redhat	systemd debian_linux ubuntu_linux enterprise_linux_desktop enterprise_linux_workstation enterprise_linux_server enterprise_linux_server_tus enterprise_linux_server_eus enterpr…	A buffer overflow vulnerability in the dhcp6 client of systemd allows a malicious dhcp6 server to overwrite heap memory in systemd-networkd. Affected releases are systemd: versions up to and includin…	CWE-120 Classic Buffer Overflow	CVE-2018-15688	2024-11-21 12:51	2018-10-26	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed