Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 19, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
259751	9.3	危険	マイクロソフト	-	Microsoft Project における任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2009-0102	2010-01-22 10:26	2009-12-8	Show	GitHub Exploit DB Packet Storm

259752	9.3	危険	マイクロソフト	-	Microsoft Internet Explorer におけるメモリ破損の脆弱性	CWE-94 コード・インジェクション	CVE-2009-3673	2010-01-22 10:26	2009-12-8	Show	GitHub Exploit DB Packet Storm

259753	9.3	危険	マイクロソフト	-	Microsoft Internet Explorer におけるメモリ破損の脆弱性	CWE-399 リソース管理の問題	CVE-2009-3671	2010-01-22 10:26	2009-12-8	Show	GitHub Exploit DB Packet Storm

259754	10	危険	マイクロソフト	-	Microsoft Windows のインターネット認証サービスにおけるネットワークリソースにアクセスされる脆弱性	CWE-255 CWE-94	CVE-2009-3677	2010-01-22 10:24	2009-12-8	Show	GitHub Exploit DB Packet Storm

259755	10	危険	マイクロソフト	-	Microsoft Windows のインターネット認証サービスにおける任意のコードを実行される脆弱性	CWE-287 不適切な認証	CVE-2009-2505	2010-01-22 10:24	2009-12-8	Show	GitHub Exploit DB Packet Storm

259756	6.9	警告	acpid	-	acpid の umask におけるサービス運用妨害 (DoS) の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2009-4235	2010-01-21 11:44	2009-12-7	Show	GitHub Exploit DB Packet Storm

259757	6.9	警告	サイバートラスト株式会社レッドハット acpid	-	acpid のレッドハットパッチにおける権限を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2009-4033	2010-01-21 11:43	2009-12-7	Show	GitHub Exploit DB Packet Storm

259758	10	危険	アドビシステムズ	-	Adobe Illustrator における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2009-3952	2010-01-21 11:43	2010-01-7	Show	GitHub Exploit DB Packet Storm

259759	9.3	危険	アドビシステムズ	-	Adobe Illustrator における Encapsulated PostScript ファイルの処理に関する任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2009-4195	2010-01-21 11:43	2009-12-4	Show	GitHub Exploit DB Packet Storm

259760	4.4	警告	サイバートラスト株式会社 Linux レッドハット	-	Linux Kernel の exit_notify 関数における任意のシグナルをプロセスに送信可能な脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2009-1337	2010-01-21 11:23	2009-04-22	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 19, 2026, 4:01 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
249331	7.5	HIGH Network	moontoken_project	moontoken	The mintToken function of a smart contract implementation for MoonToken, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to an…	CWE-190 Integer Overflow or Wraparound	CVE-2018-13462	2024-11-21 12:47	2018-07-9	Show	GitHub Exploit DB Packet Storm

249332	9.8	CRITICAL Network	dolibarr	dolibarr_erp\/crm	SQL injection vulnerability in product/card.php in Dolibarr ERP/CRM version 7.0.3 allows remote attackers to execute arbitrary SQL commands via the status_batch parameter.	CWE-89 SQL Injection	CVE-2018-13450	2024-11-21 12:47	2018-07-9	Show	GitHub Exploit DB Packet Storm

249333	9.8	CRITICAL Network	dolibarr	dolibarr_erp\/crm	SQL injection vulnerability in product/card.php in Dolibarr ERP/CRM version 7.0.3 allows remote attackers to execute arbitrary SQL commands via the statut_buy parameter.	CWE-89 SQL Injection	CVE-2018-13449	2024-11-21 12:47	2018-07-9	Show	GitHub Exploit DB Packet Storm

249334	9.8	CRITICAL Network	dolibarr	dolibarr_erp\/crm	SQL injection vulnerability in product/card.php in Dolibarr ERP/CRM version 7.0.3 allows remote attackers to execute arbitrary SQL commands via the country_id parameter.	CWE-89 SQL Injection	CVE-2018-13448	2024-11-21 12:47	2018-07-9	Show	GitHub Exploit DB Packet Storm

249335	9.8	CRITICAL Network	dolibarr	dolibarr_erp\/crm	SQL injection vulnerability in product/card.php in Dolibarr ERP/CRM version 7.0.3 allows remote attackers to execute arbitrary SQL commands via the statut parameter.	CWE-89 SQL Injection	CVE-2018-13447	2024-11-21 12:47	2018-07-9	Show	GitHub Exploit DB Packet Storm

249336	8.8	HIGH Network	seacms	seacms	An issue was discovered in SeaCMS 6.61. There is a CSRF vulnerability that can add a user account via adm1n/admin_manager.php?action=add.	CWE-352 Origin Validation Error	CVE-2018-13445	2024-11-21 12:47	2018-07-9	Show	GitHub Exploit DB Packet Storm

249337	8.8	HIGH Network	seacms	seacms	An issue was discovered in SeaCMS 6.61. There is a CSRF vulnerability that can add an admin account via adm1n/admin_manager.php?action=save&id=2.	CWE-352 Origin Validation Error	CVE-2018-13444	2024-11-21 12:47	2018-07-9	Show	GitHub Exploit DB Packet Storm

249338	6.5	MEDIUM Network	audio_file_library_project canonical	audio_file_library ubuntu_linux	The audiofile Audio File Library 0.3.6 has a NULL pointer dereference bug in ModuleState::setup in modules/ModuleState.cpp, which allows an attacker to cause a denial of service via a crafted caf fil…	CWE-476 NULL Pointer Dereference	CVE-2018-13440	2024-11-21 12:47	2018-07-9	Show	GitHub Exploit DB Packet Storm

249339	7.5	HIGH Network	tencent	wechat_pay	WXPayUtil in WeChat Pay Java SDK allows XXE attacks involving a merchant notification URL.	CWE-611 XXE	CVE-2018-13439	2024-11-21 12:47	2018-07-9	Show	GitHub Exploit DB Packet Storm

249340	6.1	MEDIUM Network	boostnote	boostnote	Boostnote v0.11.7 allows XSS during highlighting of Markdown text, as demonstrated by an onerror attribute of an IMG element.	CWE-79 Cross-site Scripting	CVE-2018-13433	2024-11-21 12:47	2018-07-8	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed