Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":July 1, 2026, 4:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
259421 5 警告 Eyrie
VMware
レッドハット		 - pam_krb5 における有効なユーザ名を列挙される脆弱性 CWE-287
不適切な認証 		CVE-2009-1384 2011-02-28 14:51 2009-05-28 Show GitHub Exploit DB Packet Storm
259422 4.4 警告 サイバートラスト株式会社
VMware
レッドハット		 - Red Hat Enterprise Linux の pam_krb5 における権限昇格の脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-3825 2011-02-28 14:48 2008-10-2 Show GitHub Exploit DB Packet Storm
259423 6.8 警告 Haxx
アップル
VMware
サイバートラスト株式会社
レッドハット		 - libcurl の content_encoding.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-0734 2011-02-28 14:41 2010-02-9 Show GitHub Exploit DB Packet Storm
259424 4.3 警告 VMware
OpenSSL Project		 - OpenSSL クライアントの ssl3_get_key_exchange 関数における任意のコードを実行される脆弱性 CWE-399
リソース管理の問題 		CVE-2010-2939 2011-02-28 14:39 2010-08-17 Show GitHub Exploit DB Packet Storm
259425 10 危険 アップル
サイバートラスト株式会社
VMware
サン・マイクロシステムズ
レッドハット		 - 複数の Oracle 製品 の Java Deployment Toolkit コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-0886 2011-02-28 14:16 2010-04-15 Show GitHub Exploit DB Packet Storm
259426 8.3 危険 インターネットイニシアティブ - SEIL シリーズにおけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2011-0454 2011-02-28 12:08 2011-02-28 Show GitHub Exploit DB Packet Storm
259427 6.8 警告 Google - OpenCORE の Huffman デコーディング機能における整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2009-0475 2011-02-25 14:13 2009-02-17 Show GitHub Exploit DB Packet Storm
259428 7.2 危険 Google - T-Mobile G1 phone 上で稼働する Open Handset Alliance Android の link_image 関数における任意のファイルを作成される脆弱性 CWE-20
不適切な入力確認 		CVE-2009-0606 2011-02-25 14:11 2009-02-17 Show GitHub Exploit DB Packet Storm
259429 5 警告 シスコシステムズ - Cisco IOS 上で稼働する STCAPP におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他 		CVE-2010-4687 2011-02-25 14:07 2011-01-7 Show GitHub Exploit DB Packet Storm
259430 7.8 危険 シスコシステムズ - Cisco IOS 上で稼働する CallManager Express におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2010-4686 2011-02-25 14:05 2011-01-7 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:July 1, 2026, 4:27 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
252831 5.5 MEDIUM
Local 		qualcomm mdm9206_firmware
mdm9607_firmware
mdm9650_firmware
mdm9655_firmware
qm215_firmware
sd_210_firmware
sd_212_firmware
sd_205_firmware
sd_410_firmware
sd_412_firmware
sd_425… 		Insufficient protection of keys in keypad can lead HLOS to gain access to confidential keypad input data in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Sna… NVD-CWE-noinfo
CVE-2018-11958 2024-11-21 12:44 2019-04-5 Show GitHub Exploit DB Packet Storm
252832 6.8 MEDIUM
Physics 		tianocore edk_ii Stack overflow in DxeCore for EDK II may allow an unauthenticated user to potentially enable escalation of privilege, information disclosure and/or denial of service via local access. CWE-787
 Out-of-bounds Write 		CVE-2018-12183 2024-11-21 12:44 2019-03-28 Show GitHub Exploit DB Packet Storm
252833 6.7 MEDIUM
Local 		tianocore edk_ii Insufficient memory write check in SMM service for EDK II may allow an authenticated user to potentially enable escalation of privilege, information disclosure and/or denial of service via local acce… CWE-441
Confused Deputy 		CVE-2018-12182 2024-11-21 12:44 2019-03-28 Show GitHub Exploit DB Packet Storm
252834 6.0 MEDIUM
Local 		tianocore edk_ii Stack overflow in corrupted bmp for EDK II may allow unprivileged user to potentially enable denial of service or elevation of privilege via local access. CWE-787
 Out-of-bounds Write 		CVE-2018-12181 2024-11-21 12:44 2019-03-28 Show GitHub Exploit DB Packet Storm
252835 8.8 HIGH
Network 		tianocore
opensuse 		edk_ii
leap 		Buffer overflow in BlockIo service for EDK II may allow an unauthenticated user to potentially enable escalation of privilege, information disclosure and/or denial of service via network access. CWE-787
 Out-of-bounds Write 		CVE-2018-12180 2024-11-21 12:44 2019-03-28 Show GitHub Exploit DB Packet Storm
252836 7.8 HIGH
Local 		tianocore edk_ii Improper configuration in system firmware for EDK II may allow unauthenticated user to potentially enable escalation of privilege, information disclosure and/or denial of service via local access. NVD-CWE-noinfo
CVE-2018-12179 2024-11-21 12:44 2019-03-28 Show GitHub Exploit DB Packet Storm
252837 9.1 CRITICAL
Network 		tianocore edk_ii Buffer overflow in network stack for EDK II may allow unprivileged user to potentially enable escalation of privilege and/or denial of service via network. CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2018-12178 2024-11-21 12:44 2019-03-28 Show GitHub Exploit DB Packet Storm
252838 7.5 HIGH
Network 		fasterxml
debian
fedoraproject
oracle
redhat 		jackson-databind
debian_linux
fedora
jd_edwards_enterpriseone_tools
retail_merchandising_system
openshift_container_platform
jboss_enterprise_application_platform
single_sign-on<… 		An issue was discovered in FasterXML jackson-databind prior to 2.7.9.4, 2.8.11.2, and 2.9.6. When Default Typing is enabled (either globally or for a specific property), the service has the Oracle JD… CWE-502
 Deserialization of Untrusted Data 		CVE-2018-12023 2024-11-21 12:44 2019-03-22 Show GitHub Exploit DB Packet Storm
252839 7.5 HIGH
Network 		fasterxml
debian
fedoraproject
oracle
redhat 		jackson-databind
debian_linux
fedora
jd_edwards_enterpriseone_tools
retail_merchandising_system
openshift_container_platform
jboss_enterprise_application_platform
single_sign-on<… 		An issue was discovered in FasterXML jackson-databind prior to 2.7.9.4, 2.8.11.2, and 2.9.6. When Default Typing is enabled (either globally or for a specific property), the service has the Jodd-db j… CWE-502
 Deserialization of Untrusted Data 		CVE-2018-12022 2024-11-21 12:44 2019-03-22 Show GitHub Exploit DB Packet Storm
252840 7.5 HIGH
Network 		apache heron When accessing the heron-ui webpage, people can modify the file paths outside of the current container to access any file on the host. Example woule be modifying the parameter path= to go to the dire… CWE-22
Path Traversal 		CVE-2018-11789 2024-11-21 12:44 2019-03-22 Show GitHub Exploit DB Packet Storm