Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 17, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
259791 9.3 危険 マイクロソフト - Microsoft Office Excel における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2009-3128 2010-01-5 16:17 2009-11-10 Show GitHub Exploit DB Packet Storm
259792 9.3 危険 マイクロソフト - Microsoft Office および Open XML File Format Converter における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2009-3127 2010-01-5 16:16 2009-11-10 Show GitHub Exploit DB Packet Storm
259793 6.8 警告 アップル
サイバートラスト株式会社
サン・マイクロシステムズ
ターボリナックス
ヒューレット・パッカード
OpenSSL Project
レッドハット		 - OpenSSL の SSL_get_shared_ciphers() 関数における一つずれエラーの脆弱性 CWE-189
数値処理の問題 		CVE-2007-5135 2010-01-5 13:31 2007-10-12 Show GitHub Exploit DB Packet Storm
259794 7.8 危険 マイクロソフト - Microsoft Windows で稼働している Active Directory の LDAP サービスにおけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2009-1928 2010-01-4 15:24 2009-11-10 Show GitHub Exploit DB Packet Storm
259795 9.3 危険 マイクロソフト - Microsoft Windows の kernel における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2009-2514 2010-01-4 15:24 2009-11-10 Show GitHub Exploit DB Packet Storm
259796 6.8 警告 マイクロソフト - Microsoft Windows の kernel の Graphics Device Interface (GDI) における権限を取得される脆弱性 CWE-20
不適切な入力確認 		CVE-2009-2513 2010-01-4 15:24 2009-11-10 Show GitHub Exploit DB Packet Storm
259797 6.8 警告 マイクロソフト - Microsoft Windows の kernel における権限を取得される脆弱性 CWE-20
不適切な入力確認 		CVE-2009-1127 2010-01-4 15:24 2009-11-10 Show GitHub Exploit DB Packet Storm
259798 10 危険 マイクロソフト - Microsoft Windows の License Logging Server (llssrv.exe) における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2009-2523 2010-01-4 15:24 2009-11-10 Show GitHub Exploit DB Packet Storm
259799 9.3 危険 マイクロソフト - Microsoft Windows の Web Services on Devices API (WSDAPI) における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2009-2512 2010-01-4 15:23 2009-11-10 Show GitHub Exploit DB Packet Storm
259800 10 危険 アップル
VMware
サン・マイクロシステムズ		 - Sun Java SE の Provider クラスにおける詳細不明な脆弱性 CWE-noinfo
情報不足 		CVE-2009-2722 2010-01-4 14:56 2009-08-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 17, 2026, 4:19 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
247641 9.1 CRITICAL
Network 		accusoft prizmdoc Accusoft PrizmDoc HTML5 Document Viewer before 13.5 contains an XML external entity (XXE) vulnerability, allowing an attacker to read arbitrary files or cause a denial of service (resource consumptio… CWE-611
XXE 		CVE-2018-15805 2024-11-21 12:51 2018-12-11 Show GitHub Exploit DB Packet Storm
247642 6.8 MEDIUM
Network 		cloud_foundry bits_service Cloud Foundry Bits Service, versions prior to 2.18.0, includes an information disclosure vulnerability. A remote malicious user may execute a timing attack to brute-force the signing key, allowing th… CWE-200
Information Exposure 		CVE-2018-15800 2024-11-21 12:51 2018-12-11 Show GitHub Exploit DB Packet Storm
247643 8.8 HIGH
Network 		pivotal_software cloud_foundry_nfs_volume Cloud Foundry NFS volume release, 1.2.x prior to 1.2.5, 1.5.x prior to 1.5.4, 1.7.x prior to 1.7.3, logs the cf admin username and password when running the nfsbrokerpush BOSH deploy errand. A remote… CWE-532
 Inclusion of Sensitive Information in Log Files 		CVE-2018-15797 2024-11-21 12:51 2018-12-6 Show GitHub Exploit DB Packet Storm
247644 4.3 MEDIUM
Physics 		dell data_protection_\|_encryption Dell Encryption (formerly Dell Data Protection | Encryption) v10.1.0 and earlier contain an information disclosure vulnerability. A malicious user with physical access to the machine could potentiall… CWE-200
Information Exposure 		CVE-2018-15773 2024-11-21 12:51 2018-12-6 Show GitHub Exploit DB Packet Storm
247645 8.8 HIGH
Network 		nuuo nvrmini2_firmware NUUO NVRMini2 version 3.9.1 is vulnerable to authenticated remote command injection. An attacker can send crafted requests to upgrade_handle.php to execute OS commands as root. CWE-78
OS Command  		CVE-2018-15716 2024-11-21 12:51 2018-12-1 Show GitHub Exploit DB Packet Storm
247646 9.8 CRITICAL
Network 		zoom zoom Zoom clients on Windows (before version 4.1.34814.1119), Mac OS (before version 4.1.34801.1116), and Linux (2.4.129780.0915 and below) are vulnerable to unauthorized message processing. A remote unau… CWE-20
 Improper Input Validation  		CVE-2018-15715 2024-11-21 12:51 2018-12-1 Show GitHub Exploit DB Packet Storm
247647 7.5 HIGH
Network 		google android Android 1.0 through 9.0 has Insecure Permissions. The Android bug ID is 77286983. CWE-732
 Incorrect Permission Assignment for Critical Resource 		CVE-2018-15835 2024-11-21 12:51 2018-12-1 Show GitHub Exploit DB Packet Storm
247648 6.5 MEDIUM
Network 		dell openmanage_network_manager Dell OpenManage Network Manager versions prior to 6.5.0 enabled read/write access to the file system for MySQL users due to insecure default configuration setting for the embedded MySQL database. CWE-732
 Incorrect Permission Assignment for Critical Resource 		CVE-2018-15768 2024-11-21 12:51 2018-12-1 Show GitHub Exploit DB Packet Storm
247649 8.8 HIGH
Network 		dell openmanage_network_manager The Dell OpenManage Network Manager virtual appliance versions prior to 6.5.3 contain an improper authorization vulnerability caused by a misconfiguration in the /etc/sudoers file. CWE-863
 Incorrect Authorization 		CVE-2018-15767 2024-11-21 12:51 2018-12-1 Show GitHub Exploit DB Packet Storm
247650 8.8 HIGH
Network 		ocsinventory-ng ocsinventory_ng Unrestricted file upload (with remote code execution) in OCS Inventory NG ocsreports allows a privileged user to gain access to the server via crafted HTTP requests. CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2018-15537 2024-11-21 12:51 2018-11-30 Show GitHub Exploit DB Packet Storm