Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 15, 2026, 4:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
259091	7.2	危険	IBM	-	IBM AIX および VIOS の qosmod におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-0960	2010-03-18 12:09	2010-03-5	Show	GitHub Exploit DB Packet Storm

259092	7.2	危険	IBM	-	IBM AIX および VIOS の qoslist におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-0961	2010-03-18 12:09	2010-03-5	Show	GitHub Exploit DB Packet Storm

259093	9	危険	マイクロソフト	-	Microsoft Virtual PC の VMM におけるゲスト OS 内で任意のカーネルモードコードを実行される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2009-1542	2010-03-17 12:18	2009-07-14	Show	GitHub Exploit DB Packet Storm

259094	6.8	警告	IBM	-	IBM Lotus Domino Web Access におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2010-0921	2010-03-16 11:15	2010-03-3	Show	GitHub Exploit DB Packet Storm

259095	4.3	警告	IBM	-	IBM Lotus Domino Web Access におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-0920	2010-03-16 11:14	2010-03-3	Show	GitHub Exploit DB Packet Storm

259096	10	危険	IBM	-	IBM Lotus Domino Web Access の UltraLite 機能における脆弱性	CWE-noinfo 情報不足	CVE-2010-0918	2010-03-16 11:14	2010-03-3	Show	GitHub Exploit DB Packet Storm

259097	4.9	警告	サイバートラスト株式会社レッドハット SystemTap	-	SystemTap の _get_argv および _get_compat_argv 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-189 数値処理の問題	CVE-2010-0411	2010-03-16 11:14	2010-02-8	Show	GitHub Exploit DB Packet Storm

259098	10	危険	サイバートラスト株式会社レッドハット SystemTap	-	SystemTap の stap-server における任意のコマンドを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2009-4273	2010-03-16 11:14	2010-01-26	Show	GitHub Exploit DB Packet Storm

259099	6.5	警告	サイバートラスト株式会社 Linux レッドハット	-	KVM の x86 エミュレータにおける権限昇格の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-0298	2010-03-16 11:13	2010-02-9	Show	GitHub Exploit DB Packet Storm

259100	4.4	警告	サイバートラスト株式会社 Fabrice Bellard レッドハット	-	QEMU の usb_host_handle_control 関数におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-0297	2010-03-16 11:13	2010-02-9	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 15, 2026, 4:10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
247671	8.8	HIGH Network	gxlcms	gxlcms	In Gxlcms 2.0, a news/index.php?s=Admin-Admin-Insert CSRF attack can add an administrator account.	CWE-352 Origin Validation Error	CVE-2018-15177	2024-11-21 12:50	2018-08-8	Show	GitHub Exploit DB Packet Storm

247672	7.8	HIGH Local	xnview	xnview	XnView 2.45 allows remote attackers to cause a denial of service (User Mode Write AV starting at MSVCR120!memcpy+0x0000000000000074 and application crash) or possibly have unspecified other impact vi…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2018-15176	2024-11-21 12:50	2018-08-8	Show	GitHub Exploit DB Packet Storm

247673	7.8	HIGH Local	xnview	xnview	XnView 2.45 allows remote attackers to cause a denial of service (User Mode Write AV starting at Qt5Core!QVariant::~QVariant+0x0000000000000014 and application crash) or possibly have unspecified oth…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2018-15175	2024-11-21 12:50	2018-08-8	Show	GitHub Exploit DB Packet Storm

247674	7.8	HIGH Local	xnview	xnview	XnView 2.45 allows remote attackers to cause a denial of service (Read Access Violation at the Instruction Pointer and application crash) or possibly have unspecified other impact via a crafted ICO f…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2018-15174	2024-11-21 12:50	2018-08-8	Show	GitHub Exploit DB Packet Storm

247675	7.5	HIGH Network	nmap	nmap	Nmap through 7.70, when the -sV option is used, allows remote attackers to cause a denial of service (stack consumption and application crash) via a crafted TCP-based service.	NVD-CWE-noinfo	CVE-2018-15173	2024-11-21 12:50	2018-08-8	Show	GitHub Exploit DB Packet Storm

247676	6.1	MEDIUM Network	zohocorp	manageengine_applications_manager	A reflected Cross-site scripting (XSS) vulnerability in Zoho ManageEngine Applications Manager 13 before build 13820 allows remote attackers to inject arbitrary web script or HTML via the /deleteMO.d…	CWE-79 Cross-site Scripting	CVE-2018-15169	2024-11-21 12:50	2018-08-8	Show	GitHub Exploit DB Packet Storm

247677	9.8	CRITICAL Network	zohocorp	manageengine_applications_manager	A SQL Injection vulnerability exists in the Zoho ManageEngine Applications Manager 13 before build 13820 via the resids parameter in a /editDisplaynames.do?method=editDisplaynames GET request.	CWE-89 SQL Injection	CVE-2018-15168	2024-11-21 12:50	2018-08-8	Show	GitHub Exploit DB Packet Storm

247678	9.8	CRITICAL Network	cela_link	clr-m20_firmware	CeLa Link CLR-M20 devices allow unauthorized users to upload any file (e.g., asp, aspx, cfm, html, jhtml, jsp, or shtml), which causes remote code execution as well. Because of the WebDAV feature, it…	CWE-434 Unrestricted Upload of File with Dangerous Type	CVE-2018-15137	2024-11-21 12:50	2018-08-8	Show	GitHub Exploit DB Packet Storm

247679	7.5	HIGH Network	php netapp	php storage_automation_store	An issue was discovered in ext/standard/link_win32.c in PHP before 5.6.37, 7.0.x before 7.0.31, 7.1.x before 7.1.20, and 7.2.x before 7.2.8. The linkinfo function on Windows doesn't implement the ope…	CWE-200 Information Exposure	CVE-2018-15132	2024-11-21 12:50	2018-08-8	Show	GitHub Exploit DB Packet Storm

247680	5.4	MEDIUM Network	thinksaas	thinksaas	ThinkSAAS through 2018-07-25 has XSS via the index.php?app=group&ac=create&ts=do groupdesc parameter.	CWE-79 Cross-site Scripting	CVE-2018-15130	2024-11-21 12:50	2018-08-7	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed