Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 20, 2026, 10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
259641	9.3	危険	Artifex Software サイバートラスト株式会社サン・マイクロシステムズレッドハット	-	ICC Format ライブラリにおける整数オーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2009-0583	2010-02-17 11:43	2009-03-23	Show	GitHub Exploit DB Packet Storm

259642	6	警告	Artifex Software サイバートラスト株式会社レッドハット	-	Ghostscript の zseticcspace() 関数におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2008-0411	2010-02-17 11:43	2008-02-27	Show	GitHub Exploit DB Packet Storm

259643	2.1	注意	サイバートラスト株式会社レッドハット	-	lm_sensors の pwmconfig (スクリプト)における不適切な一時ファイル作成によるシンボリックリンク攻撃を受ける脆弱性	-	CVE-2005-2672	2010-02-17 11:43	2005-08-22	Show	GitHub Exploit DB Packet Storm

259644	9.3	危険	アップル	-	Apple Mac OS X の Image RAW における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-0037	2010-02-16 11:45	2010-01-19	Show	GitHub Exploit DB Packet Storm

259645	9.3	危険	アップル	-	Apple Mac OS X の CoreAudio における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-0036	2010-02-16 11:45	2010-01-19	Show	GitHub Exploit DB Packet Storm

259646	9.3	危険	アドビシステムズ	-	Adobe Shockwave Player における任意のコードを実行される脆弱性	CWE-189 数値処理の問題	CVE-2009-4003	2010-02-16 11:44	2010-01-19	Show	GitHub Exploit DB Packet Storm

259647	9.3	危険	アドビシステムズ	-	Adobe Shockwave Player における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2009-4002	2010-02-16 11:44	2010-01-19	Show	GitHub Exploit DB Packet Storm

259648	6.9	警告	サイバートラスト株式会社 Linux レッドハット	-	Linux kernel における競合状態の脆弱性	CWE-362 競合状態	CVE-2009-3547	2010-02-16 11:44	2009-11-3	Show	GitHub Exploit DB Packet Storm

259649	4.9	警告	サイバートラスト株式会社 Linux レッドハット	-	Linux kernel の netlink サブシステムにおける重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2005-4881	2010-02-16 11:43	2009-10-19	Show	GitHub Exploit DB Packet Storm

259650	4.7	警告	サイバートラスト株式会社 Linux レッドハット	-	Linux kernel の execve 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2009-2848	2010-02-16 11:43	2009-08-18	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 20, 2026, 4:01 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
250061	3.1	LOW Physics	dropbox	dropbox	An issue was discovered in the com.dropbox.android application 98.2.2 for Android. The FingerprintManager class for Biometric validation allows authentication bypass through the callback method from …	CWE-287 Improper Authentication	CVE-2018-12445	2024-11-21 12:45	2018-06-20	Show	GitHub Exploit DB Packet Storm

250062	8.8	HIGH Network	codenx	shopnx	An issue was discovered in ShopNx through 2017-11-17. The vulnerability allows a remote attacker to upload any malicious file to a Node.js application. An attacker can upload a malicious HTML file th…	CWE-434 Unrestricted Upload of File with Dangerous Type	CVE-2018-12519	2024-11-21 12:45	2018-06-20	Show	GitHub Exploit DB Packet Storm

250063	6.5	MEDIUM Network	akcms_project	akcms	An issue was discovered in AKCMS 6.1. CSRF can delete an article via an admincp deleteitem action to index.php.	CWE-352 Origin Validation Error	CVE-2018-12583	2024-11-21 12:45	2018-06-20	Show	GitHub Exploit DB Packet Storm

250064	8.8	HIGH Network	akcms_project	akcms	An issue was discovered in AKCMS 6.1. CSRF can add an admin account via a /index.php?file=account&action=manageaccounts&job=newaccount URI.	CWE-352 Origin Validation Error	CVE-2018-12582	2024-11-21 12:45	2018-06-20	Show	GitHub Exploit DB Packet Storm

250065	6.1	MEDIUM Network	dragonbyte-tech	vbsecurity	library/DBTech/Security/Action/Sessions.php in DragonByte vBSecurity 3.x through 3.3.0 for vBulletin 3 and vBulletin 4 allows self-XSS via $session['user_agent'] in the "Login Sessions" feature.	CWE-79 Cross-site Scripting	CVE-2018-12580	2024-11-21 12:45	2018-06-20	Show	GitHub Exploit DB Packet Storm

250066	9.8	CRITICAL Network	sam2p_project	sam2p	There is a heap-based buffer overflow in bmp_compress1_row in appliers.cpp in sam2p 0.49.4 that leads to a denial of service or possibly unspecified other impact.	CWE-787 Out-of-bounds Write	CVE-2018-12578	2024-11-21 12:45	2018-06-20	Show	GitHub Exploit DB Packet Storm

250067	8.8	HIGH Network	linaro debian	lava debian_linux	An issue was discovered in Linaro LAVA before 2018.5.post1. Because of use of yaml.load() instead of yaml.safe_load() when parsing user data, remote code execution can occur.	CWE-20 Improper Input Validation	CVE-2018-12565	2024-11-21 12:45	2018-06-19	Show	GitHub Exploit DB Packet Storm

250068	6.5	MEDIUM Network	linaro debian	lava debian_linux	An issue was discovered in Linaro LAVA before 2018.5.post1. Because of support for URLs in the submit page, a user can forge an HTTP request that will force lava-server-gunicorn to return any file on…	CWE-20 Improper Input Validation	CVE-2018-12564	2024-11-21 12:45	2018-06-19	Show	GitHub Exploit DB Packet Storm

250069	6.5	MEDIUM Network	linaro	lava	An issue was discovered in Linaro LAVA before 2018.5.post1. Because of support for file: URLs, a user can force lava-server-gunicorn to download any file from the filesystem if it's readable by lavas…	CWE-20 Improper Input Validation	CVE-2018-12563	2024-11-21 12:45	2018-06-19	Show	GitHub Exploit DB Packet Storm

250070	9.8	CRITICAL Network	cantata_project	cantata	An issue was discovered in the cantata-mounter D-Bus service in Cantata through 2.3.1. The wrapper script 'mount.cifs.wrapper' uses the shell to forward the arguments to the actual mount.cifs binary.…	CWE-20 Improper Input Validation	CVE-2018-12562	2024-11-21 12:45	2018-06-19	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed