Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 28, 2026, 10 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
259951 7.5 危険 The PHP Group - PHP の dechunk フィルタにおけるサービス運用妨害 (DoS) の脆弱性 CWE-189
数値処理の問題
CVE-2010-1866 2010-08-18 18:26 2010-05-2 Show GitHub Exploit DB Packet Storm
259952 5 警告 The PHP Group - PHP の chunk_split 関数における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2010-1862 2010-08-18 18:25 2010-05-4 Show GitHub Exploit DB Packet Storm
259953 5 警告 The PHP Group - PHP の addcslashes 関数における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2010-1864 2010-08-17 17:37 2010-05-3 Show GitHub Exploit DB Packet Storm
259954 5 警告 The PHP Group - PHP における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2010-2190 2010-08-17 17:36 2010-05-30 Show GitHub Exploit DB Packet Storm
259955 6.4 警告 The PHP Group - PHP における重要な情報を取得される脆弱性 CWE-119
バッファエラー
CVE-2010-2191 2010-08-17 17:35 2010-05-31 Show GitHub Exploit DB Packet Storm
259956 5 警告 The PHP Group - PHP の Zend Engine における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2010-1914 2010-08-17 17:34 2010-05-8 Show GitHub Exploit DB Packet Storm
259957 6.4 警告 The PHP Group - PHP の sysvshm 拡張における任意のメモリアドレスを書かれる脆弱性 CWE-399
リソース管理の問題
CVE-2010-1861 2010-08-17 17:33 2010-05-5 Show GitHub Exploit DB Packet Storm
259958 4.3 警告 サイバートラスト株式会社
Mozilla Foundation
レッドハット
- 複数の Mozilla 製品における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2010-0654 2010-08-16 18:57 2010-02-18 Show GitHub Exploit DB Packet Storm
259959 7.6 危険 アップル - Apple Safari における window オブジェクトの処理に脆弱性 CWE-399
リソース管理の問題
CVE-2010-1939 2010-08-16 15:08 2010-05-12 Show GitHub Exploit DB Packet Storm
259960 7.6 危険 IBM - IBM Lotus Domino Web Access の ActiveX コントロールにおけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2010-0919 2010-08-16 15:05 2010-03-3 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 28, 2026, 4:01 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
247331 9.8 CRITICAL
Network
bosch common_product_platform_4_firmware
common_product_platform_6_firmware
common_product_platform_7_firmware
common_product_platform_7.3_firmware
An issue was discovered in several Bosch IP cameras for firmware versions 6.32 and higher. A malicious client could potentially succeed in the unauthorized execution of code on the device via the net… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2018-19036 2024-11-21 12:57 2018-12-18 Show GitHub Exploit DB Packet Storm
247332 7.8 HIGH
Local
sylabs singularity Sylabs Singularity 2.4 to 2.6 allows local users to conduct Improper Input Validation attacks. CWE-20
 Improper Input Validation 
CVE-2018-19295 2024-11-21 12:57 2018-12-18 Show GitHub Exploit DB Packet Storm
247333 9.8 CRITICAL
Network
geutebrueck g-cam\/efd-2251_firmware
g-cam\/ewpc-2275_firmware
In Geutebrueck GmbH E2 Camera Series versions prior to 1.12.0.25 the DDNS configuration (in the Network Configuration panel) is vulnerable to an OS system command injection as root. CWE-78
OS Command 
CVE-2018-19007 2024-11-21 12:57 2018-12-15 Show GitHub Exploit DB Packet Storm
247334 4.3 MEDIUM
Network
sonarsource sonarqube A vulnerability in the API of SonarSource SonarQube before 7.4 could allow an authenticated user to discover sensitive information such as valid user-account logins in the web application. The vulner… CWE-200
Information Exposure
CVE-2018-19413 2024-11-21 12:57 2018-12-15 Show GitHub Exploit DB Packet Storm
247335 7.5 HIGH
Network
ge ex2100e_firmware
ls2100e_firmware
mark_vle_firmware
GE Mark VIe, EX2100e, EX2100e_Reg, and LS2100e Versions 03.03.28C to 05.02.04C, EX2100e All versions prior to v04.09.00C, EX2100e_Reg All versions prior to v04.09.00C, and LS2100e All versions prior … CWE-22
Path Traversal
CVE-2018-19003 2024-11-21 12:57 2018-12-15 Show GitHub Exploit DB Packet Storm
247336 6.1 MEDIUM
Network
oracle secure_global_desktop XSS exists in the Administration Console in Oracle Secure Global Desktop 4.4 20080807152602 (but was fixed in later versions including 5.4). helpwindow.jsp has reflected XSS via all parameters, as de… CWE-79
Cross-site Scripting
CVE-2018-19439 2024-11-21 12:57 2018-12-14 Show GitHub Exploit DB Packet Storm
247337 5.5 MEDIUM
Local
qemu
canonical
debian
fedoraproject
opensuse
qemu
ubuntu_linux
debian_linux
fedora
leap
hw/9pfs/cofile.c and hw/9pfs/9p.c in QEMU can modify an fid path while it is being accessed by a second thread, leading to (for example) a use-after-free outcome. CWE-416
 Use After Free
CVE-2018-19364 2024-11-21 12:57 2018-12-14 Show GitHub Exploit DB Packet Storm
247338 7.5 HIGH
Network
zohocorp manageengine_adaudit_plus Zoho ManageEngine ADAudit before 5.1 build 5120 allows remote attackers to cause a denial of service (stack-based buffer overflow) via the 'Domain Name' field when adding a new domain. CWE-787
 Out-of-bounds Write
CVE-2018-19118 2024-11-21 12:57 2018-12-14 Show GitHub Exploit DB Packet Storm
247339 6.5 MEDIUM
Network
grafana
redhat
netapp
grafana
enterprise_linux_desktop
enterprise_linux_workstation
enterprise_linux_server
ceph_storage
active_iq_performance_analytics_services
storagegrid_webscale_nas_bridge
Grafana before 4.6.5 and 5.x before 5.3.3 allows remote authenticated users to read arbitrary files by leveraging Editor or Admin permissions. CWE-200
Information Exposure
CVE-2018-19039 2024-11-21 12:57 2018-12-14 Show GitHub Exploit DB Packet Storm
247340 4.3 MEDIUM
Physics
philips healthsuite_health Philips HealthSuite Health Android App, all versions. The software uses simple encryption that is not strong enough for the level of protection required. CWE-326
Inadequate Encryption Strength
CVE-2018-19001 2024-11-21 12:57 2018-12-7 Show GitHub Exploit DB Packet Storm