Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":June 12, 2026, 6 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 258951 | 6.6 | 警告 | 日立 | - | JP1/Cm2/Network Node Manager のリモートコンソールにおけるファイルパーミッションの脆弱性 |
CWE-264
認可・権限・アクセス制御 |
- | 2010-03-12 15:12 | 2010-02-26 | Show | GitHub Exploit DB Packet Storm |
| 258952 | 9.3 | 危険 | Panda Security | - | Panda Security ActiveScan におけるコンポーネントのデジタル署名を検証しない問題 |
CWE-94
コード・インジェクション |
CVE-2009-3735 | 2010-03-12 15:12 | 2010-02-12 | Show | GitHub Exploit DB Packet Storm |
| 258953 | 5 | 警告 | サイバートラスト株式会社 OpenSSL Project IBM レッドハット |
- | OpenSSL の dtls1_retrieve_buffered_fragment 関数におけるサービス運用妨害 (DoS) の脆弱性 |
CWE-399
リソース管理の問題 |
CVE-2009-1379 | 2010-03-12 14:44 | 2009-05-19 | Show | GitHub Exploit DB Packet Storm |
| 258954 | 5 | 警告 | サイバートラスト株式会社 OpenSSL Project IBM レッドハット |
- | OpenSSL の dtls1_process_out_of_seq_message 関数におけるサービス運用妨害 (DoS) の脆弱性 |
CWE-399
リソース管理の問題 |
CVE-2009-1378 | 2010-03-12 14:44 | 2009-05-19 | Show | GitHub Exploit DB Packet Storm |
| 258955 | 5 | 警告 | サイバートラスト株式会社 OpenSSL Project IBM レッドハット |
- | OpenSSL の dtls1_buffer_record 関数におけるサービス運用妨害 (DoS) の脆弱性 |
CWE-119
バッファエラー |
CVE-2009-1377 | 2010-03-12 14:43 | 2009-05-19 | Show | GitHub Exploit DB Packet Storm |
| 258956 | 5 | 警告 | アップル サイバートラスト株式会社 OpenSSL Project Apache Software Foundation レッドハット |
- | OpenSSL の zlib_stateful_init 関数におけるサービス運用妨害 (DoS) の脆弱性 |
CWE-399
リソース管理の問題 |
CVE-2008-1678 | 2010-03-12 14:43 | 2008-07-10 | Show | GitHub Exploit DB Packet Storm |
| 258957 | 5.8 | 警告 | OpenPNEプロジェクト | - | OpenPNE におけるアクセス制限回避の脆弱性 |
CWE-264
認可・権限・アクセス制御 |
CVE-2010-1040 | 2010-03-11 12:39 | 2010-03-5 | Show | GitHub Exploit DB Packet Storm |
| 258958 | 10 | 危険 | アドビシステムズ | - | Adobe Download Manager における任意のプログラムをダウンロードおよびインストールされる脆弱性 |
CWE-noinfo
情報不足 |
CVE-2010-0189 | 2010-03-11 12:07 | 2010-02-23 | Show | GitHub Exploit DB Packet Storm |
| 258959 | 7.2 | 危険 | サイバートラスト株式会社 Linux レッドハット |
- | Linux kernel の collect_rx_frame 関数における脆弱性 |
CWE-119
バッファエラー |
CVE-2009-4005 | 2010-03-11 12:05 | 2009-11-20 | Show | GitHub Exploit DB Packet Storm |
| 258960 | 7.8 | 危険 | サイバートラスト株式会社 Linux レッドハット |
- | Linux kernel の RTL8169 NIC ドライバにおけるバッファオーバーフローの脆弱性 |
CWE-119
バッファエラー |
CVE-2009-1389 | 2010-03-11 12:04 | 2009-06-16 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:June 12, 2026, 4:20 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 249631 | 6.5 |
MEDIUM
Network |
puppet | cisco_ios_module | Previous releases of the Puppet cisco_ios module did not validate a host's identity before starting a SSH connection. As of the 0.4.0 release of cisco_ios, host key checking is enabled by default. |
CWE-20
Improper Input Validation |
CVE-2018-11750 | 2024-11-21 12:43 | 2018-10-3 | Show | GitHub Exploit DB Packet Storm |
| 249632 | 7.8 |
HIGH
Local |
puppet | device_manager | Previous releases of the Puppet device_manager module creates configuration files containing credentials that are world readable. This issue has been resolved as of device_manager 2.7.0. |
CWE-522
Insufficiently Protected Credentials |
CVE-2018-11748 | 2024-11-21 12:43 | 2018-10-3 | Show | GitHub Exploit DB Packet Storm |
| 249633 | 5.9 |
MEDIUM
Network |
apache canonical redhat oracle netapp |
http_server ubuntu_linux enterprise_linux retail_xstore_point_of_service hospitality_guest_access enterprise_manager_ops_center secure_global_desktop instantis_enterprisetrack
In Apache HTTP Server 2.4.17 to 2.4.34, by sending continuous, large SETTINGS frames a client can occupy a connection, server thread and CPU time without any connection timeout coming to effect. This…
|
NVD-CWE-noinfo
|
CVE-2018-11763
|
2024-11-21 12:43 |
2018-09-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 249634 | 8.8 |
HIGH
Network |
samsung | samsung_members | This vulnerability allows remote attackers to escalate privileges on vulnerable installations of Samsung Members Fixed in version 2.4.25. An attacker must first obtain the ability to execute low-priv… |
NVD-CWE-noinfo
|
CVE-2018-11614 | 2024-11-21 12:43 | 2018-09-25 | Show | GitHub Exploit DB Packet Storm |
| 249635 | 4.0 |
MEDIUM
Network |
wallabag | wallabag | The Wallabag application 2.2.3 to 2.3.2 is affected by one cross-site scripting (XSS) vulnerability that is stored within the configuration page. This vulnerability enables the execution of a JavaScr… |
CWE-79
Cross-site Scripting |
CVE-2018-11352 | 2024-11-21 12:43 | 2018-09-22 | Show | GitHub Exploit DB Packet Storm |
| 249636 | 7.8 |
HIGH
Local |
qualcomm |
mdm9206_firmware mdm9607_firmware mdm9640_firmware mdm9650_firmware msm8909w_firmware msm8996au_firmware qca6574au_firmware qca6584_firmware sd210_firmware sd212_firmware
In Snapdragon (Automobile, Mobile, Wear) in version MDM9206, MDM9607, MDM9640, MDM9650, MSM8909W, MSM8996AU, QCA6574AU, QCA6584, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 45…
|
CWE-787 |
CWE-190 Out-of-bounds Write Integer Overflow or Wraparound
CVE-2018-11292
|
2024-11-21 12:43 |
2018-09-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 249637 | 7.5 |
HIGH
Network |
qualcomm |
ipq8074_firmware mdm9206_firmware mdm9607_firmware mdm9640_firmware mdm9650_firmware msm8996au_firmware qca4531_firmware qca6174a_firmware qca6564_firmware qca6574_firmware… |
In Snapdragon (Automobile, Mobile, Wear) in version IPQ8074, MDM9206, MDM9607, MDM9640, MDM9650, MSM8996AU, QCA4531, QCA6174A, QCA6564, QCA6574, QCA6574AU, QCA6584, QCA6584AU, QCA9377, QCA9378, QCA93… |
CWE-338
Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) |
CVE-2018-11291 | 2024-11-21 12:43 | 2018-09-20 | Show | GitHub Exploit DB Packet Storm |
| 249638 | 7.5 |
HIGH
Network |
qualcomm |
mdm9206_firmware mdm9607_firmware mdm9640_firmware mdm9650_firmware msm8996au_firmware qca6574au_firmware sd210_firmware sd212_firmware sd205_firmware sd425_firmware sd4… |
In Snapdragon (Automobile, Mobile, Wear) in version MDM9206, MDM9607, MDM9640, MDM9650, MSM8996AU, QCA6574AU, QCA6584, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 650/52,… |
CWE-338
Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) |
CVE-2018-11290 | 2024-11-21 12:43 | 2018-09-20 | Show | GitHub Exploit DB Packet Storm |
| 249639 | 9.8 |
CRITICAL
Network |
qualcomm |
mdm9206_firmware mdm9607_firmware mdm9650_firmware msm8909w_firmware msm8996au_firmware sd210_firmware sd212_firmware sd205_firmware sd425_firmware sd427_firmware sd430_… |
In Snapdragon (Automobile, Mobile, Wear) in version MDM9206, MDM9607, MDM9650, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 650/52, SD 820, SD 820A, S… |
CWE-20
Improper Input Validation |
CVE-2018-11287 | 2024-11-21 12:43 | 2018-09-20 | Show | GitHub Exploit DB Packet Storm |
| 249640 | 7.8 |
HIGH
Local |
qualcomm |
mdm9206_firmware mdm9607_firmware mdm9650_firmware msm8909w_firmware msm8996au_firmware sd210_firmware sd212_firmware sd205_firmware sd425_firmware sd427_firmware sd430_… |
In Snapdragon (Automobile, Mobile, Wear) in version MDM9206, MDM9607, MDM9650, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, … |
CWE-125
Out-of-bounds Read |
CVE-2018-11285 | 2024-11-21 12:43 | 2018-09-20 | Show | GitHub Exploit DB Packet Storm |