Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 18, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
259751 9.3 危険 マイクロソフト - Microsoft Internet Explorer におけるメモリ破損の脆弱性 CWE-94
コード・インジェクション
CVE-2009-3673 2010-01-22 10:26 2009-12-8 Show GitHub Exploit DB Packet Storm
259752 9.3 危険 マイクロソフト - Microsoft Internet Explorer におけるメモリ破損の脆弱性 CWE-399
リソース管理の問題
CVE-2009-3671 2010-01-22 10:26 2009-12-8 Show GitHub Exploit DB Packet Storm
259753 10 危険 マイクロソフト - Microsoft Windows のインターネット認証サービスにおけるネットワークリソースにアクセスされる脆弱性 CWE-255
CWE-94
CVE-2009-3677 2010-01-22 10:24 2009-12-8 Show GitHub Exploit DB Packet Storm
259754 10 危険 マイクロソフト - Microsoft Windows のインターネット認証サービスにおける任意のコードを実行される脆弱性 CWE-287
不適切な認証
CVE-2009-2505 2010-01-22 10:24 2009-12-8 Show GitHub Exploit DB Packet Storm
259755 6.9 警告 acpid - acpid の umask におけるサービス運用妨害 (DoS) の脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2009-4235 2010-01-21 11:44 2009-12-7 Show GitHub Exploit DB Packet Storm
259756 6.9 警告 サイバートラスト株式会社
レッドハット
acpid
- acpid のレッドハットパッチにおける権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2009-4033 2010-01-21 11:43 2009-12-7 Show GitHub Exploit DB Packet Storm
259757 10 危険 アドビシステムズ - Adobe Illustrator における任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2009-3952 2010-01-21 11:43 2010-01-7 Show GitHub Exploit DB Packet Storm
259758 9.3 危険 アドビシステムズ - Adobe Illustrator における Encapsulated PostScript ファイルの処理に関する任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2009-4195 2010-01-21 11:43 2009-12-4 Show GitHub Exploit DB Packet Storm
259759 4.4 警告 サイバートラスト株式会社
Linux
レッドハット
- Linux Kernel の exit_notify 関数における任意のシグナルをプロセスに送信可能な脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2009-1337 2010-01-21 11:23 2009-04-22 Show GitHub Exploit DB Packet Storm
259760 4.9 警告 サイバートラスト株式会社
Linux
レッドハット
- Linux Kernel における sendmsg 関数の呼び出しに関するサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2008-5300 2010-01-21 11:22 2008-12-1 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 18, 2026, 4 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
250061 3.1 LOW
Physics
dropbox dropbox An issue was discovered in the com.dropbox.android application 98.2.2 for Android. The FingerprintManager class for Biometric validation allows authentication bypass through the callback method from … CWE-287
Improper Authentication
CVE-2018-12445 2024-11-21 12:45 2018-06-20 Show GitHub Exploit DB Packet Storm
250062 8.8 HIGH
Network
codenx shopnx An issue was discovered in ShopNx through 2017-11-17. The vulnerability allows a remote attacker to upload any malicious file to a Node.js application. An attacker can upload a malicious HTML file th… CWE-434
 Unrestricted Upload of File with Dangerous Type 
CVE-2018-12519 2024-11-21 12:45 2018-06-20 Show GitHub Exploit DB Packet Storm
250063 6.5 MEDIUM
Network
akcms_project akcms An issue was discovered in AKCMS 6.1. CSRF can delete an article via an admincp deleteitem action to index.php. CWE-352
 Origin Validation Error
CVE-2018-12583 2024-11-21 12:45 2018-06-20 Show GitHub Exploit DB Packet Storm
250064 8.8 HIGH
Network
akcms_project akcms An issue was discovered in AKCMS 6.1. CSRF can add an admin account via a /index.php?file=account&action=manageaccounts&job=newaccount URI. CWE-352
 Origin Validation Error
CVE-2018-12582 2024-11-21 12:45 2018-06-20 Show GitHub Exploit DB Packet Storm
250065 6.1 MEDIUM
Network
dragonbyte-tech vbsecurity library/DBTech/Security/Action/Sessions.php in DragonByte vBSecurity 3.x through 3.3.0 for vBulletin 3 and vBulletin 4 allows self-XSS via $session['user_agent'] in the "Login Sessions" feature. CWE-79
Cross-site Scripting
CVE-2018-12580 2024-11-21 12:45 2018-06-20 Show GitHub Exploit DB Packet Storm
250066 9.8 CRITICAL
Network
sam2p_project sam2p There is a heap-based buffer overflow in bmp_compress1_row in appliers.cpp in sam2p 0.49.4 that leads to a denial of service or possibly unspecified other impact. CWE-787
 Out-of-bounds Write
CVE-2018-12578 2024-11-21 12:45 2018-06-20 Show GitHub Exploit DB Packet Storm
250067 8.8 HIGH
Network
linaro
debian
lava
debian_linux
An issue was discovered in Linaro LAVA before 2018.5.post1. Because of use of yaml.load() instead of yaml.safe_load() when parsing user data, remote code execution can occur. CWE-20
 Improper Input Validation 
CVE-2018-12565 2024-11-21 12:45 2018-06-19 Show GitHub Exploit DB Packet Storm
250068 6.5 MEDIUM
Network
linaro
debian
lava
debian_linux
An issue was discovered in Linaro LAVA before 2018.5.post1. Because of support for URLs in the submit page, a user can forge an HTTP request that will force lava-server-gunicorn to return any file on… CWE-20
 Improper Input Validation 
CVE-2018-12564 2024-11-21 12:45 2018-06-19 Show GitHub Exploit DB Packet Storm
250069 6.5 MEDIUM
Network
linaro lava An issue was discovered in Linaro LAVA before 2018.5.post1. Because of support for file: URLs, a user can force lava-server-gunicorn to download any file from the filesystem if it's readable by lavas… CWE-20
 Improper Input Validation 
CVE-2018-12563 2024-11-21 12:45 2018-06-19 Show GitHub Exploit DB Packet Storm
250070 9.8 CRITICAL
Network
cantata_project cantata An issue was discovered in the cantata-mounter D-Bus service in Cantata through 2.3.1. The wrapper script 'mount.cifs.wrapper' uses the shell to forward the arguments to the actual mount.cifs binary.… CWE-20
 Improper Input Validation 
CVE-2018-12562 2024-11-21 12:45 2018-06-19 Show GitHub Exploit DB Packet Storm