Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 21, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
259101 4.3 警告 日立 - Hitachi Web Server の SSL クライアント認証における CRL 失効確認不可の脆弱性 CWE-287
不適切な認証
- 2010-06-14 16:24 2010-05-17 Show GitHub Exploit DB Packet Storm
259102 5 警告 日立 - TP1/Message Control におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
- 2010-06-14 16:23 2010-05-17 Show GitHub Exploit DB Packet Storm
259103 10 危険 日立
CA Technologies
- CA XOsoft におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2010-1223 2010-06-14 16:23 2010-04-6 Show GitHub Exploit DB Packet Storm
259104 5 警告 日立
CA Technologies
- CA XOsoft における重要な情報を取得される脆弱性 CWE-287
不適切な認証
CVE-2010-1222 2010-06-14 16:23 2010-04-6 Show GitHub Exploit DB Packet Storm
259105 5 警告 日立
CA Technologies
- CA XOsoft におけるユーザ名を列挙される脆弱性 CWE-287
不適切な認証
CVE-2010-1221 2010-06-14 16:23 2010-04-6 Show GitHub Exploit DB Packet Storm
259106 6.8 警告 フェンリル株式会社 - ActiveGeckoBrowser における複数の脆弱性 CWE-Other
その他
CVE-2010-2420 2010-06-14 12:01 2010-06-14 Show GitHub Exploit DB Packet Storm
259107 6.8 警告 サン・マイクロシステムズ
GNU Project
ターボリナックス
サイバートラスト株式会社
レッドハット
- GNU tar および GNU cpio の rmt_read__ 関数におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2010-0624 2010-06-11 18:45 2010-03-15 Show GitHub Exploit DB Packet Storm
259108 3.5 注意 PostgreSQL.org
サイバートラスト株式会社
レッドハット
- PostgreSQL における整数オーバーフローの脆弱性 CWE-189
数値処理の問題
CVE-2010-0733 2010-06-9 16:54 2010-03-19 Show GitHub Exploit DB Packet Storm
259109 6.5 警告 PostgreSQL.org
サイバートラスト株式会社
レッドハット
- PostgreSQL の bitsubstr 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-189
数値処理の問題
CVE-2010-0442 2010-06-9 16:54 2010-02-2 Show GitHub Exploit DB Packet Storm
259110 6.8 警告 アップル - Java の window drawing 実装における任意のコードを実行される脆弱性 CWE-189
数値処理の問題
CVE-2010-0539 2010-06-7 17:58 2010-05-18 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 21, 2026, 4:01 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
249001 6.1 MEDIUM
Network
atlassian jira
jira_server
The IncomingMailServers resource in Atlassian JIRA Server before version 7.6.7, from version 7.7.0 before version 7.7.5, from version 7.8.0 before version 7.8.5, from version 7.9.0 before version 7.9… CWE-79
Cross-site Scripting
CVE-2018-13387 2024-11-21 12:47 2018-07-16 Show GitHub Exploit DB Packet Storm
249002 5.5 MEDIUM
Local
nagios nagios_core qh_core in Nagios Core 4.4.1 and earlier is prone to a NULL pointer dereference vulnerability, which allows attackers to cause a local denial-of-service condition by sending a crafted payload to the … CWE-476
 NULL Pointer Dereference
CVE-2018-13458 2024-11-21 12:47 2018-07-13 Show GitHub Exploit DB Packet Storm
249003 5.5 MEDIUM
Local
nagios nagios_core qh_echo in Nagios Core 4.4.1 and earlier is prone to a NULL pointer dereference vulnerability, which allows attackers to cause a local denial-of-service condition by sending a crafted payload to the … CWE-476
 NULL Pointer Dereference
CVE-2018-13457 2024-11-21 12:47 2018-07-13 Show GitHub Exploit DB Packet Storm
249004 5.5 MEDIUM
Local
nagios nagios qh_help in Nagios Core version 4.4.1 and earlier is prone to a NULL pointer dereference vulnerability, which allows attacker to cause a local denial-of-service condition by sending a crafted payload … CWE-476
 NULL Pointer Dereference
CVE-2018-13441 2024-11-21 12:47 2018-07-13 Show GitHub Exploit DB Packet Storm
249005 4.7 MEDIUM
Network
atlassian confluence The attachment resource in Atlassian Confluence before version 6.6.1 allows remote attackers to spoof web content in the Mozilla Firefox Browser through attachments that have a content-type of applic… CWE-20
 Improper Input Validation 
CVE-2018-13389 2024-11-21 12:47 2018-07-10 Show GitHub Exploit DB Packet Storm
249006 5.4 MEDIUM
Network
atlassian fisheye
crucible
The review attachment resource in Atlassian Fisheye and Crucible before version 4.5.3 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in … CWE-79
Cross-site Scripting
CVE-2018-13388 2024-11-21 12:47 2018-07-10 Show GitHub Exploit DB Packet Storm
249007 6.7 MEDIUM
Local
supermicro x11ssz_firmware
x11ssv_firmware
x11ssql_firmware
x11ssq_firmware
x11ssn_firmware
x11srm_firmware
x11sra_firmware
x11sba_firmware
x11sat_firmware
x11sae_m_firmware
x11sae…
Certain Supermicro X11S, X10, X9, X8SI, K1SP, C9X299, C7, B1, A2, and A1 products have a misconfigured Descriptor Region, allowing OS programs to modify firmware. NVD-CWE-noinfo
CVE-2018-13787 2024-11-21 12:47 2018-07-10 Show GitHub Exploit DB Packet Storm
249008 6.5 MEDIUM
Network
libpng
canonical
oracle
redhat
libpng
ubuntu_linux
jdk
jre
enterprise_linux_desktop
enterprise_linux_workstation
enterprise_linux_server
In libpng 1.6.34, a wrong calculation of row_factor in the png_check_chunk_length function (pngrutil.c) may trigger an integer overflow and resultant divide-by-zero while processing a crafted PNG fil… CWE-369
CWE-190
 Divide By Zero
 Integer Overflow or Wraparound
CVE-2018-13785 2024-11-21 12:47 2018-07-9 Show GitHub Exploit DB Packet Storm
249009 9.1 CRITICAL
Network
prestashop prestashop PrestaShop before 1.6.1.20 and 1.7.x before 1.7.3.4 mishandles cookie encryption in Cookie.php, Rinjdael.php, and Blowfish.php. NVD-CWE-noinfo
CVE-2018-13784 2024-11-21 12:47 2018-07-9 Show GitHub Exploit DB Packet Storm
249010 7.5 HIGH
Network
jiucaitoken_project jiucaitoken The mintToken function of a smart contract implementation for JiucaiToken, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to … CWE-190
 Integer Overflow or Wraparound
CVE-2018-13783 2024-11-21 12:47 2018-07-9 Show GitHub Exploit DB Packet Storm