Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":July 1, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
259571	9.3	危険	アップル Google レッドハット	-	Apple Safari の WebKit における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-1782	2011-02-4 14:38	2010-07-30	Show	GitHub Exploit DB Packet Storm

259572	4.3	警告	アップル Google レッドハット	-	Apple Safari および Google Chrome の WebKit における同一生成元ポリシーを回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-3259	2011-02-4 14:37	2010-09-7	Show	GitHub Exploit DB Packet Storm

259573	9.3	危険	アップル Google レッドハット	-	Apple Safari および Google Chrome の WebKit における任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2010-3257	2011-02-4 14:36	2010-09-7	Show	GitHub Exploit DB Packet Storm

259574	10	危険	アップル Google レッドハット	-	Apple Safari および Google Chrome の WebKit における任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2010-3116	2011-02-4 14:34	2010-08-24	Show	GitHub Exploit DB Packet Storm

259575	9.3	危険	アップルレッドハット	-	Apple Safari の WebKit における任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2010-1807	2011-02-4 14:33	2010-09-7	Show	GitHub Exploit DB Packet Storm

259576	9.3	危険	アップルレッドハット	-	iPhone および iPod touch 上で稼動する Apple iOS の WebKit における任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2010-1815	2011-02-4 14:32	2010-09-8	Show	GitHub Exploit DB Packet Storm

259577	9.3	危険	アップルレッドハット	-	iPhone および iPod touch 上で稼動する Apple iOS の WebKit における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-1814	2011-02-4 14:30	2010-09-8	Show	GitHub Exploit DB Packet Storm

259578	9.3	危険	アップルレッドハット	-	iPhone および iPod touch 上で稼動する Apple iOS の WebKit における任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2010-1812	2011-02-4 14:29	2010-09-8	Show	GitHub Exploit DB Packet Storm

259579	9.3	危険	アップル Google レッドハット	-	Apple Safari の WebKit における任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2010-1780	2011-02-4 14:28	2010-07-30	Show	GitHub Exploit DB Packet Storm

259580	5.8	警告	アップルレッドハット	-	Apple Safari の WebKit における DNS 先読み設定を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-3813	2011-02-4 14:26	2010-11-22	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:July 1, 2026, 4:27 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
247831	9.1	CRITICAL Network	wowza	streaming_engine	The REST API in Wowza Streaming Engine 4.7.4.01 allows traversal of the directory structure and retrieval of a file via a remote, specifically crafted HTTP request.	CWE-22 Path Traversal	CVE-2018-19365	2024-11-21 12:57	2019-03-22	Show	GitHub Exploit DB Packet Storm

247832	9.8	CRITICAL Network	openmrs	openmrs	OpenMRS before 2.24.0 is affected by an Insecure Object Deserialization vulnerability that allows an unauthenticated user to execute arbitrary commands on the targeted system via crafted XML data in …	CWE-502 Deserialization of Untrusted Data	CVE-2018-19276	2024-11-21 12:57	2019-03-22	Show	GitHub Exploit DB Packet Storm

247833	5.4	MEDIUM Network	webmin	webmin	Webmin 1.890 has XSS via /config.cgi?webmin, the /shell/index.cgi history parameter, /shell/index.cgi?stripped=1, or the /webminlog/search.cgi uall or mall parameter.	CWE-79 Cross-site Scripting	CVE-2018-19191	2024-11-21 12:57	2019-03-22	Show	GitHub Exploit DB Packet Storm

247834	7.5	HIGH Network	colossusxt	colossuscoinxt	ColossusCoinXT through 1.0.5 (a chain-based proof-of-stake cryptocurrency) allows a remote denial of service, exploitable by an attacker who acquires even a small amount of stake/coins in the system.…	CWE-400 Uncontrolled Resource Consumption	CVE-2018-19158	2024-11-21 12:57	2019-03-22	Show	GitHub Exploit DB Packet Storm

247835	4.8	MEDIUM Network	cobham	satcom_sailor_800_firmware satcom_sailor_900_firmware	Cobham Satcom Sailor 800 and 900 devices contained persistent XSS, which required administrative access to exploit. The vulnerability was exploitable by acquiring a copy of the device's configuration…	CWE-79 Cross-site Scripting	CVE-2018-19394	2024-11-21 12:57	2019-03-16	Show	GitHub Exploit DB Packet Storm

247836	7.5	HIGH Network	cobham	satcom_sailor_800_firmware satcom_sailor_900_firmware	Cobham Satcom Sailor 800 and 900 devices contained a vulnerability that allowed for arbitrary writing of content to the system's configuration file. This was exploitable via multiple attack vectors d…	CWE-732 Incorrect Permission Assignment for Critical Resource	CVE-2018-19393	2024-11-21 12:57	2019-03-16	Show	GitHub Exploit DB Packet Storm

247837	9.8	CRITICAL Network	cobham	satcom_sailor_250_firmware satcom_sailor_500_firmware	Cobham Satcom Sailor 250 and 500 devices before 1.25 contained an unauthenticated password reset vulnerability. This could allow modification of any user account's password (including the default "ad…	CWE-287 Improper Authentication	CVE-2018-19392	2024-11-21 12:57	2019-03-16	Show	GitHub Exploit DB Packet Storm

247838	6.1	MEDIUM Network	cobham	satcom_sailor_250_firmware satcom_sailor_500_firmware	Cobham Satcom Sailor 250 and 500 devices before 1.25 contained persistent XSS, which could be exploited by an unauthenticated threat actor via the /index.lua?pageID=Phone%20book name field.	CWE-79 Cross-site Scripting	CVE-2018-19391	2024-11-21 12:57	2019-03-16	Show	GitHub Exploit DB Packet Storm

247839	6.1	MEDIUM Network	avinetworks	avi_vantage	Avi Vantage before 17.2.13 uses an invalid URL encoding during a redirect operation, aka AV-33959.	CWE-601 Open Redirect	CVE-2018-19106	2024-11-21 12:57	2019-02-20	Show	GitHub Exploit DB Packet Storm

247840	7.8	HIGH Local	abb	cp400pb_firmware	The TextEditor 2.0 in ABB CP400 Panel Builder versions 2.0.7.05 and earlier contain a vulnerability in the file parser of the Text Editor wherein the application doesn't properly prevent the insertio…	CWE-20 Improper Input Validation	CVE-2018-19008	2024-11-21 12:57	2019-02-14	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed