Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":July 1, 2026, 10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
259011	7.6	危険	アップル	-	複数の Apple 製品の WebKit における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2011-0135	2011-03-31 14:22	2011-03-3	Show	GitHub Exploit DB Packet Storm

259012	7.6	危険	アップル	-	複数の Apple 製品の WebKit における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2011-0134	2011-03-31 14:20	2011-03-3	Show	GitHub Exploit DB Packet Storm

259013	7.6	危険	アップル	-	複数の Apple 製品の WebKit における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2011-0133	2011-03-31 14:19	2011-03-3	Show	GitHub Exploit DB Packet Storm

259014	7.6	危険	アップル	-	複数の Apple 製品の WebKit における任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2011-0132	2011-03-31 14:17	2011-03-3	Show	GitHub Exploit DB Packet Storm

259015	7.6	危険	アップル	-	複数の Apple 製品の WebKit における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2011-0131	2011-03-31 14:01	2011-03-3	Show	GitHub Exploit DB Packet Storm

259016	9.3	危険	BlackBerry	-	BlackBerry Enterprise Server の PDF Distiller におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-2604	2011-03-31 13:59	2011-01-11	Show	GitHub Exploit DB Packet Storm

259017	6.8	警告	BlackBerry	-	BlackBerry Device Software のブラウザにおける同一生成元ポリシーを回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-3934	2011-03-31 13:57	2010-10-14	Show	GitHub Exploit DB Packet Storm

259018	6	警告	アップルサイバートラスト株式会社 CUPS ターボリナックスオラクルレッドハット	-	Apple Mac OS X 上で稼働する CUPS におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2010-0540	2011-03-31 13:55	2010-06-15	Show	GitHub Exploit DB Packet Storm

259019	6.9	警告	レッドハットサイバートラスト株式会社ターボリナックスオラクル CUPS	-	CUPS の cupsFileOpen 関数における任意のファイルを上書きされる脆弱性	CWE-59 リンク解釈の問題	CVE-2010-2431	2011-03-31 13:54	2010-06-17	Show	GitHub Exploit DB Packet Storm

259020	6.8	警告	レッドハットサイバートラスト株式会社ターボリナックスオラクル CUPS	-	CUPS のテキストフィルタサブシステムにおける任意のコードを実行される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-0542	2011-03-31 13:53	2010-06-17	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:July 1, 2026, 4:27 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
249971	9.8	CRITICAL Network	lg	supersign_cms	LG SuperSign CMS allows authentication bypass because the CAPTCHA requirement is skipped if a captcha:pass cookie is sent, and because the PIN is limited to four digits.	CWE-287 Improper Authentication	CVE-2018-16286	2024-11-21 12:52	2018-09-15	Show	GitHub Exploit DB Packet Storm

249972	5.3	MEDIUM Adjacent	o.bike	smart_locker_firmware obike-stationless_bike_sharing	oBike relies on Hangzhou Luoping Smart Locker to lock bicycles, which allows attackers to bypass the locking mechanism by using Bluetooth Low Energy (BLE) to replay ciphertext based on a predictable …	CWE-294 Authentication Bypass by Capture-replay	CVE-2018-16242	2024-11-21 12:52	2018-09-15	Show	GitHub Exploit DB Packet Storm

249973	6.5	MEDIUM Network	e107	e107	e107_admin/banlist.php in e107 2.1.8 allows SQL injection via the old_ip parameter.	CWE-89 SQL Injection	CVE-2018-16389	2024-11-21 12:52	2018-09-13	Show	GitHub Exploit DB Packet Storm

249974	7.2	HIGH Network	e107	e107	e107_web/js/plupload/upload.php in e107 2.1.8 allows remote attackers to execute arbitrary PHP code by uploading a .php filename with the image/jpeg content type.	CWE-434 Unrestricted Upload of File with Dangerous Type	CVE-2018-16388	2024-11-21 12:52	2018-09-13	Show	GitHub Exploit DB Packet Storm

249975	7.5	HIGH Network	currency_converter_script_project	currency_converter_script	PHP Scripts Mall Currency Converter Script 2.0.5 allows remote attackers to cause a denial of service (web-interface change) via an inverted comma.	CWE-20 Improper Input Validation	CVE-2018-16454	2024-11-21 12:52	2018-09-8	Show	GitHub Exploit DB Packet Storm

249976	5.4	MEDIUM Network	filemanagerpro	file_manager	The mndpsingh287 File Manager plugin V2.9 for WordPress has XSS via the lang parameter in a wp-admin/admin.php?page=wp_file_manager request because set_transient is used in file_folder_manager.php an…	CWE-79 Cross-site Scripting	CVE-2018-16363	2024-11-21 12:52	2018-09-8	Show	GitHub Exploit DB Packet Storm

249977	5.3	MEDIUM Network	endress	wirelesshart_fieldgate_swg70_firmware	Endress+Hauser WirelessHART Fieldgate SWG70 3.x devices allow Directory Traversal via the fcgi-bin/wgsetcgi filename parameter.	CWE-22 Path Traversal	CVE-2018-16059	2024-11-21 12:52	2018-09-8	Show	GitHub Exploit DB Packet Storm

249978	9.8	CRITICAL Network	umbraengineering	ps	A command Injection in ps package versions <1.0.0 for Node.js allowed arbitrary commands to be executed when attacker controls the PID.	CWE-78 OS Command	CVE-2018-16460	2024-11-21 12:52	2018-09-8	Show	GitHub Exploit DB Packet Storm

249979	5.5	MEDIUM Local	nasm	netwide_assembler	asm/labels.c in Netwide Assembler (NASM) is prone to NULL Pointer Dereference, which allows the attacker to cause a denial of service via a crafted file.	CWE-476 NULL Pointer Dereference	CVE-2018-16517	2024-11-21 12:52	2018-09-7	Show	GitHub Exploit DB Packet Storm

249980	6.5	MEDIUM Adjacent	technicolor	tg588v_firmware	Technicolor TG588V V2 devices allow remote attackers to cause a denial of service (networking outage) via a flood of random MAC addresses, as demonstrated by macof. NOTE: this might overlap CVE-2018-…	CWE-400 Uncontrolled Resource Consumption	CVE-2018-16310	2024-11-21 12:52	2018-09-7	Show	GitHub Exploit DB Packet Storm