Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 17, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
259071	9.3	危険	マイクロソフト	-	複数の Microsoft 製品における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-1880	2010-06-30 18:52	2010-06-8	Show	GitHub Exploit DB Packet Storm

259072	9.3	危険	マイクロソフト	-	複数の Microsoft 製品における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-1879	2010-06-30 18:52	2010-06-8	Show	GitHub Exploit DB Packet Storm

259073	8.5	危険	PostgreSQL.org サイバートラスト株式会社レッドハット	-	PostgreSQL における任意の Perl コードを実行される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-1447	2010-06-30 18:17	2010-05-14	Show	GitHub Exploit DB Packet Storm

259074	9.3	危険	アップル	-	Apple Mac OS の ColorSync における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2009-1726	2010-06-30 18:17	2009-08-5	Show	GitHub Exploit DB Packet Storm

259075	6.9	警告	アップルサイバートラスト株式会社 The Perl Foundation レッドハット	-	Perl の rmtree 関数における任意のファイルを削除される脆弱性	CWE-362 競合状態	CVE-2008-5303	2010-06-30 18:16	2008-12-1	Show	GitHub Exploit DB Packet Storm

259076	6.9	警告	アップルサイバートラスト株式会社 The Perl Foundation レッドハット	-	Perl の rmtree 関数における任意の setuid バイナリを作成される脆弱性	CWE-362 競合状態	CVE-2008-5302	2010-06-30 18:16	2008-12-1	Show	GitHub Exploit DB Packet Storm

259077	9.3	危険	アップル	-	Apple Safari の WebKit における任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2010-1419	2010-06-29 16:59	2010-06-10	Show	GitHub Exploit DB Packet Storm

259078	9.3	危険	アップル	-	Apple Safari の WebKit における任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2010-1412	2010-06-25 18:51	2010-06-10	Show	GitHub Exploit DB Packet Storm

259079	9.3	危険	アップル	-	Apple Safari の WebKit における任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2010-1749	2010-06-24 15:38	2010-06-10	Show	GitHub Exploit DB Packet Storm

259080	7.8	危険	日立	-	JP1/ServerConductor/Deployment Manager における不正にシャットダウンまたはリブートを実行する脆弱性	CWE-noinfo 情報不足	-	2010-06-22 17:28	2010-06-4	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 17, 2026, 4:19 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
250061	3.1	LOW Physics	dropbox	dropbox	An issue was discovered in the com.dropbox.android application 98.2.2 for Android. The FingerprintManager class for Biometric validation allows authentication bypass through the callback method from …	CWE-287 Improper Authentication	CVE-2018-12445	2024-11-21 12:45	2018-06-20	Show	GitHub Exploit DB Packet Storm

250062	8.8	HIGH Network	codenx	shopnx	An issue was discovered in ShopNx through 2017-11-17. The vulnerability allows a remote attacker to upload any malicious file to a Node.js application. An attacker can upload a malicious HTML file th…	CWE-434 Unrestricted Upload of File with Dangerous Type	CVE-2018-12519	2024-11-21 12:45	2018-06-20	Show	GitHub Exploit DB Packet Storm

250063	6.5	MEDIUM Network	akcms_project	akcms	An issue was discovered in AKCMS 6.1. CSRF can delete an article via an admincp deleteitem action to index.php.	CWE-352 Origin Validation Error	CVE-2018-12583	2024-11-21 12:45	2018-06-20	Show	GitHub Exploit DB Packet Storm

250064	8.8	HIGH Network	akcms_project	akcms	An issue was discovered in AKCMS 6.1. CSRF can add an admin account via a /index.php?file=account&action=manageaccounts&job=newaccount URI.	CWE-352 Origin Validation Error	CVE-2018-12582	2024-11-21 12:45	2018-06-20	Show	GitHub Exploit DB Packet Storm

250065	6.1	MEDIUM Network	dragonbyte-tech	vbsecurity	library/DBTech/Security/Action/Sessions.php in DragonByte vBSecurity 3.x through 3.3.0 for vBulletin 3 and vBulletin 4 allows self-XSS via $session['user_agent'] in the "Login Sessions" feature.	CWE-79 Cross-site Scripting	CVE-2018-12580	2024-11-21 12:45	2018-06-20	Show	GitHub Exploit DB Packet Storm

250066	9.8	CRITICAL Network	sam2p_project	sam2p	There is a heap-based buffer overflow in bmp_compress1_row in appliers.cpp in sam2p 0.49.4 that leads to a denial of service or possibly unspecified other impact.	CWE-787 Out-of-bounds Write	CVE-2018-12578	2024-11-21 12:45	2018-06-20	Show	GitHub Exploit DB Packet Storm

250067	8.8	HIGH Network	linaro debian	lava debian_linux	An issue was discovered in Linaro LAVA before 2018.5.post1. Because of use of yaml.load() instead of yaml.safe_load() when parsing user data, remote code execution can occur.	CWE-20 Improper Input Validation	CVE-2018-12565	2024-11-21 12:45	2018-06-19	Show	GitHub Exploit DB Packet Storm

250068	6.5	MEDIUM Network	linaro debian	lava debian_linux	An issue was discovered in Linaro LAVA before 2018.5.post1. Because of support for URLs in the submit page, a user can forge an HTTP request that will force lava-server-gunicorn to return any file on…	CWE-20 Improper Input Validation	CVE-2018-12564	2024-11-21 12:45	2018-06-19	Show	GitHub Exploit DB Packet Storm

250069	6.5	MEDIUM Network	linaro	lava	An issue was discovered in Linaro LAVA before 2018.5.post1. Because of support for file: URLs, a user can force lava-server-gunicorn to download any file from the filesystem if it's readable by lavas…	CWE-20 Improper Input Validation	CVE-2018-12563	2024-11-21 12:45	2018-06-19	Show	GitHub Exploit DB Packet Storm

250070	9.8	CRITICAL Network	cantata_project	cantata	An issue was discovered in the cantata-mounter D-Bus service in Cantata through 2.3.1. The wrapper script 'mount.cifs.wrapper' uses the shell to forward the arguments to the actual mount.cifs binary.…	CWE-20 Improper Input Validation	CVE-2018-12562	2024-11-21 12:45	2018-06-19	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed