Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":July 1, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
259461	5.1	警告	Lunascape	-	Lunascape における実行ファイル読み込みに関する脆弱性	CWE-Other その他	CVE-2011-0452	2011-02-23 14:01	2011-02-23	Show	GitHub Exploit DB Packet Storm

259462	5	警告	Google レッドハット	-	WebKit の CSSParser::parseFontFaceSrc 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-119 バッファエラー	CVE-2010-4577	2011-02-22 14:07	2010-12-13	Show	GitHub Exploit DB Packet Storm

259463	5	警告	シスコシステムズ	-	Cisco Adaptive Security Appliances デバイス上で稼働する Mobile User Security における重要な情報を取得される脆弱性	CWE-287 不適切な認証	CVE-2010-4690	2011-02-22 13:58	2011-01-7	Show	GitHub Exploit DB Packet Storm

259464	7.8	危険	シスコシステムズ	-	Cisco Adaptive Security Appliances デバイスにおけるアクセス制限を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-4689	2011-02-22 13:56	2011-01-7	Show	GitHub Exploit DB Packet Storm

259465	7.8	危険	シスコシステムズ	-	Cisco Adaptive Security Appliances デバイス上の SIP 検査機能におけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2010-4688	2011-02-22 13:53	2011-01-7	Show	GitHub Exploit DB Packet Storm

259466	7.8	危険	シスコシステムズ	-	CSG2 上で稼働する Cisco IOS におけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2011-0350	2011-02-22 13:49	2011-01-26	Show	GitHub Exploit DB Packet Storm

259467	7.8	危険	シスコシステムズ	-	CSG2 上で稼働する Cisco IOS におけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2011-0349	2011-02-22 13:47	2011-01-26	Show	GitHub Exploit DB Packet Storm

259468	6.4	警告	シスコシステムズ	-	CSG2 上で稼働する Cisco IOS におけるアクセスおよび課金などの制限を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-0348	2011-02-22 13:44	2011-01-26	Show	GitHub Exploit DB Packet Storm

259469	4.3	警告	Google	-	Android の com.android.phone プロセスにおけるサービス運用妨害 (DoS) 脆弱性	CWE-noinfo 情報不足	CVE-2009-2999	2011-02-22 11:32	2009-10-14	Show	GitHub Exploit DB Packet Storm

259470	5	警告	Google	-	Android の com.android.phone プロセスにおけるサービス運用妨害 (DoS) 脆弱性	CWE-noinfo 情報不足	CVE-2009-2656	2011-02-22 11:28	2009-08-3	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:July 1, 2026, 4:27 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
249861	6.5	MEDIUM Network	cybozu	remote_service_manager	Improper countermeasure against clickjacking attack in client certificates management screen was discovered in Cybozu Remote Service 3.0.0 to 3.1.8, that allows remote attackers to trick a user to de…	CWE-1021 Improper Restriction of Rendered UI Layers or Frames	CVE-2018-16172	2024-11-21 12:52	2019-01-10	Show	GitHub Exploit DB Packet Storm

249862	8.8	HIGH Network	cybozu	remote_service_manager	Directory traversal vulnerability in Cybozu Remote Service 3.0.0 to 3.1.8 allows remote attackers to execute Java code file on the server via unspecified vectors.	CWE-22 Path Traversal	CVE-2018-16171	2024-11-21 12:52	2019-01-10	Show	GitHub Exploit DB Packet Storm

249863	8.1	HIGH Network	cybozu	remote_service_manager	Directory traversal vulnerability in Cybozu Remote Service 3.0.0 to 3.1.8 for Windows allows remote authenticated attackers to read arbitrary files via unspecified vectors.	CWE-22 Path Traversal	CVE-2018-16170	2024-11-21 12:52	2019-01-10	Show	GitHub Exploit DB Packet Storm

249864	8.8	HIGH Network	cybozu	remote_service_manager	Cybozu Remote Service 3.0.0 to 3.1.0 allows remote authenticated attackers to upload and execute Java code file on the server via unspecified vectors.	CWE-434 Unrestricted Upload of File with Dangerous Type	CVE-2018-16169	2024-11-21 12:52	2019-01-10	Show	GitHub Exploit DB Packet Storm

249865	9.8	CRITICAL Network	jpcert	logontracer	LogonTracer 1.2.0 and earlier allows remote attackers to conduct Python code injection attacks via unspecified vectors.	CWE-94 Code Injection	CVE-2018-16168	2024-11-21 12:52	2019-01-10	Show	GitHub Exploit DB Packet Storm

249866	9.8	CRITICAL Network	jpcert	logontracer	LogonTracer 1.2.0 and earlier allows remote attackers to execute arbitrary OS commands via unspecified vectors.	CWE-78 OS Command	CVE-2018-16167	2024-11-21 12:52	2019-01-10	Show	GitHub Exploit DB Packet Storm

249867	8.8	HIGH Network	jpcert	logontracer	LogonTracer 1.2.0 and earlier allows remote attackers to conduct XML External Entity (XXE) attacks via unspecified vectors.	CWE-611 XXE	CVE-2018-16166	2024-11-21 12:52	2019-01-10	Show	GitHub Exploit DB Packet Storm

249868	6.1	MEDIUM Network	jpcert	logontracer	Cross-site scripting vulnerability in LogonTracer 1.2.0 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.	CWE-79 Cross-site Scripting	CVE-2018-16165	2024-11-21 12:52	2019-01-10	Show	GitHub Exploit DB Packet Storm

249869	5.4	MEDIUM Network	web-dorado	event_calendar_wd	Cross-site scripting vulnerability in Event Calendar WD version 1.1.21 and earlier allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors.	CWE-79 Cross-site Scripting	CVE-2018-16164	2024-11-21 12:52	2019-01-10	Show	GitHub Exploit DB Packet Storm

249870	6.5	MEDIUM Network	google redhat	chrome enterprise_linux_desktop enterprise_linux_server enterprise_linux_workstation	A missing check for JS-simulated input events in Blink in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to download arbitrary files with no user input via a crafted HTML page.	CWE-20 Improper Input Validation	CVE-2018-16088	2024-11-21 12:52	2019-01-10	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed