Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 27, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
259941 6.8 警告 アップル
サイバートラスト株式会社
LibTIFF
レッドハット		 - LibTIFF の FAX3 デコーダの Fax3SetupState 関数における整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2010-1411 2010-08-24 13:44 2010-06-10 Show GitHub Exploit DB Packet Storm
259942 2.6 注意 アップル - Apple Safari の AutoFill 機能におけるアドレスブックカードの情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2010-1796 2010-08-20 18:24 2010-07-30 Show GitHub Exploit DB Packet Storm
259943 4.3 警告 アップル - Apple Safari におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-1778 2010-08-20 18:24 2010-07-30 Show GitHub Exploit DB Packet Storm
259944 7.5 危険 金子 勇 - Winny におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2010-2360 2010-08-20 12:02 2010-08-20 Show GitHub Exploit DB Packet Storm
259945 7.5 危険 金子 勇 - Winny におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2010-2360 2010-08-20 12:02 2010-08-20 Show GitHub Exploit DB Packet Storm
259946 5 警告 金子 勇 - Winny におけるノード情報の処理に関する脆弱性 CWE-Other
その他 		CVE-2010-2362 2010-08-20 12:01 2010-08-20 Show GitHub Exploit DB Packet Storm
259947 5 警告 金子 勇 - Winny における BBS 情報の処理に関する脆弱性 CWE-Other
その他 		CVE-2010-2361 2010-08-20 12:01 2010-08-20 Show GitHub Exploit DB Packet Storm
259948 10 危険 シマンテック
IBM		 - Autonomy KeyView Filter SDK の kvolefio.dll における整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2009-3032 2010-08-19 18:22 2010-03-5 Show GitHub Exploit DB Packet Storm
259949 5 警告 The PHP Group - PHP の phar 拡張における重要な情報を取得される脆弱性 CWE-134
書式文字列の問題 		CVE-2010-2094 2010-08-18 18:26 2010-05-14 Show GitHub Exploit DB Packet Storm
259950 7.5 危険 The PHP Group - PHP の sqlite_single_query および sqlite_array_query 関数における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2010-1868 2010-08-18 18:26 2010-05-7 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 27, 2026, 4:35 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
247251 6.1 MEDIUM
Network 		mycolorway simditor Simditor through 2.3.21 allows DOM XSS via an onload attribute within a malformed SVG element. CWE-79
Cross-site Scripting 		CVE-2018-19048 2024-11-21 12:57 2019-05-13 Show GitHub Exploit DB Packet Storm
247252 7.5 HIGH
Network 		virginmedia hub_3.0_firmware On Virgin Media wireless router 3.0 hub devices, the web interface is vulnerable to denial of service. When POST requests are sent and keep the connection open, the router lags and becomes unusable t… CWE-400
 Uncontrolled Resource Consumption 		CVE-2018-19037 2024-11-21 12:57 2019-05-13 Show GitHub Exploit DB Packet Storm
247253 7.5 HIGH
Network 		wplaunchpad
opensuse 		wpbackupplus
leap 		The WP Backup+ (aka WPbackupplus) plugin through 2018-11-22 for WordPress allows remote attackers to obtain sensitive information from server folders and files, as demonstrated by download.sql. CWE-200
Information Exposure 		CVE-2018-19456 2024-11-21 12:57 2019-05-8 Show GitHub Exploit DB Packet Storm
247254 7.0 HIGH
Local 		zohocorp manageengine_admanager_plus Zoho ManageEngine ADManager Plus 6.6 Build 6657 allows local users to gain privileges (after a reboot) by placing a Trojan horse file into the permissive bin directory. CWE-732
 Incorrect Permission Assignment for Critical Resource 		CVE-2018-19374 2024-11-21 12:57 2019-05-1 Show GitHub Exploit DB Packet Storm
247255 8.8 HIGH
Network 		gitlab gitlab GitLab Community and Enterprise Edition 8.9 and later and before 11.5.0-rc12, 11.4.6, and 11.3.10 has Incorrect Access Control. NVD-CWE-noinfo
CVE-2018-19359 2024-11-21 12:57 2019-04-26 Show GitHub Exploit DB Packet Storm
247256 9.8 CRITICAL
Network 		neatorobotics botvac_connected_firmware A Buffer Overflow in Network::AuthenticationClient::VerifySignature in /bin/astro in Neato Botvac Connected 2.2.0 allows a remote attacker to execute arbitrary code with root privileges via a crafted… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2018-19442 2024-11-21 12:57 2019-04-26 Show GitHub Exploit DB Packet Storm
247257 6.1 MEDIUM
Network 		mybb mybb A reflected XSS vulnerability in index.php in MyBB 1.8.x through 1.8.19 allows remote attackers to inject JavaScript via the 'upsetting[bburl]' parameter. CWE-79
Cross-site Scripting 		CVE-2018-19202 2024-11-21 12:57 2019-04-12 Show GitHub Exploit DB Packet Storm
247258 9.8 CRITICAL
Network 		d-link
dlink 		dap-1530_firmware
dap-1610_firmware
dwr-111_firmware
dwr-116_firmware
dwr-512_firmware
dwr-711_firmware
dwr-712_firmware
dwr-921_firmware 		On D-Link DAP-1530 (A1) before firmware version 1.06b01, DAP-1610 (A1) before firmware version 1.06b01, DWR-111 (A1) before firmware version 1.02v02, DWR-116 (A1) before firmware version 1.06b03, DWR… CWE-20
 Improper Input Validation  		CVE-2018-19300 2024-11-21 12:57 2019-04-12 Show GitHub Exploit DB Packet Storm
247259 8.8 HIGH
Network 		kentico kentico_cms Kentico CMS before 11.0.45 allows unrestricted upload of a file with a dangerous type. CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2018-19453 2024-11-21 12:57 2019-04-11 Show GitHub Exploit DB Packet Storm
247260 4.8 MEDIUM
Network 		osisoft pi_vision OSIsoft PI Vision, versions PI Vision 2017, and PI Vision 2017 R2, The application contains a cross-site scripting vulnerability where displays that reference AF elements and attributes containing Ja… CWE-79
Cross-site Scripting 		CVE-2018-19006 2024-11-21 12:57 2019-04-9 Show GitHub Exploit DB Packet Storm