Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":July 1, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
259211	7.6	危険	アップル	-	複数の Apple 製品の WebKit における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2011-0112	2011-03-29 15:06	2011-03-3	Show	GitHub Exploit DB Packet Storm

259212	7.6	危険	アップル	-	複数の Apple 製品の WebKit における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2011-0111	2011-03-29 15:04	2011-03-3	Show	GitHub Exploit DB Packet Storm

259213	9.3	危険	BlackBerry	-	BlackBerry Desktop Software における任意のコードを実行される脆弱性	CWE-Other その他	CVE-2010-2600	2011-03-29 14:42	2010-09-9	Show	GitHub Exploit DB Packet Storm

259214	4.3	警告	BlackBerry	-	BlackBerry Device Software におけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2010-2599	2011-03-29 14:33	2011-01-11	Show	GitHub Exploit DB Packet Storm

259215	4.7	警告	Linux レッドハット	-	Linux kernel の blk_rq_map_user_iov 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2010-4668	2011-03-29 14:27	2011-01-3	Show	GitHub Exploit DB Packet Storm

259216	4.7	警告	Linux レッドハット	-	Linux kernel の blk_rq_map_user_iov 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2010-4163	2011-03-29 14:24	2011-01-3	Show	GitHub Exploit DB Packet Storm

259217	4.7	警告	Linux レッドハット	-	Linux kernel の fs/bio.c における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2010-4162	2011-03-29 14:23	2011-01-3	Show	GitHub Exploit DB Packet Storm

259218	6.9	警告	Linux レッドハット	-	Linux kernel の PPPoL2TP および IPoL2TP 実装における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2010-4160	2011-03-29 14:22	2011-01-7	Show	GitHub Exploit DB Packet Storm

259219	9.3	危険	アップルレッドハット	-	Apple Safari の WebKit における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-1792	2011-03-29 14:05	2010-07-30	Show	GitHub Exploit DB Packet Storm

259220	9.3	危険	サイバートラスト株式会社 Mozilla Foundation レッドハット	-	複数の Mozilla 製品の nsIScriptableUnescapeHTML.parseFragment メソッドにおける任意の JavaScript を実行される脆弱性	CWE-20 不適切な入力確認	CVE-2010-1585	2011-03-28 16:05	2011-03-1	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:July 1, 2026, 4:27 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
249221	5.4	MEDIUM Network	ptc	thingworx_platform	An issue was discovered in PTC ThingWorx Platform 6.5 through 8.2. There is reflected XSS in the SQUEAL search function.	CWE-79 Cross-site Scripting	CVE-2018-17218	2024-11-21 12:54	2018-10-1	Show	GitHub Exploit DB Packet Storm

249222	7.5	HIGH Network	ptc	thingworx_platform	An issue was discovered in PTC ThingWorx Platform 6.5 through 8.2. There is a hardcoded encryption key.	CWE-798 Use of Hard-coded Credentials	CVE-2018-17217	2024-11-21 12:54	2018-10-1	Show	GitHub Exploit DB Packet Storm

249223	6.5	MEDIUM Network	ptc	thingworx_platform	An issue was discovered in PTC ThingWorx Platform 6.5 through 8.2. There is password hash exposure to privileged users.	CWE-200 Information Exposure	CVE-2018-17216	2024-11-21 12:54	2018-10-1	Show	GitHub Exploit DB Packet Storm

249224	6.5	MEDIUM Network	zzcms	zzcms	An issue was discovered in zzcms 8.3. user/zssave.php allows remote attackers to delete arbitrary files via directory traversal sequences in the oldimg parameter in an action=modify request. This can…	CWE-22 Path Traversal	CVE-2018-17797	2024-11-21 12:54	2018-10-1	Show	GitHub Exploit DB Packet Storm

249225	9.8	CRITICAL Network	mushroom_content_management_system_project	mushroom_content_management_system	An issue was discovered in MRCMS (aka mushroom) through 3.1.2. The WebParam.java file directly accepts the FIELD_T parameter in a request and uses it as a hash of SQL statements without filtering, re…	CWE-89 SQL Injection	CVE-2018-17796	2024-11-21 12:54	2018-10-1	Show	GitHub Exploit DB Packet Storm

249226	8.8	HIGH Network	libtiff	libtiff	The function t2p_write_pdf in tiff2pdf.c in LibTIFF 4.0.9 and earlier allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecif…	CWE-787 Out-of-bounds Write	CVE-2018-17795	2024-11-21 12:54	2018-10-1	Show	GitHub Exploit DB Packet Storm

249227	6.5	MEDIUM Network	gnu	binutils	An issue was discovered in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.31. There is a NULL pointer dereference in work_stuff_copy_to_from when called from iterate_demangle_function.	CWE-476 NULL Pointer Dereference	CVE-2018-17794	2024-11-21 12:54	2018-10-1	Show	GitHub Exploit DB Packet Storm

249228	7.5	HIGH Network	blynk	blynk-server	In blynk-server in Blynk before 0.39.7, Directory Traversal exists via a ../ in a URI that has /static or /static/js at the beginning, as demonstrated by reading the /etc/passwd file.	CWE-22 Path Traversal	CVE-2018-17785	2024-11-21 12:54	2018-10-1	Show	GitHub Exploit DB Packet Storm

249229	6.5	MEDIUM Network	telegram	telegram_desktop telegram_messenger	Telegram Desktop (aka tdesktop) 1.3.14, and Telegram 3.3.0.0 WP8.1 on Windows, leaks end-user public and private IP addresses during a call because of an unsafe default behavior in which P2P connecti…	CWE-200 Information Exposure	CVE-2018-17780	2024-11-21 12:54	2018-09-30	Show	GitHub Exploit DB Packet Storm

249230	7.5	HIGH Network	foxitsoftware	phantompdf reader	Foxit PhantomPDF and Reader before 9.3 allow remote attackers to trigger Uninitialized Object Information Disclosure because creation of ArrayBuffer and DataView objects is mishandled.	CWE-200 Information Exposure	CVE-2018-17781	2024-11-21 12:54	2018-09-30	Show	GitHub Exploit DB Packet Storm