Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 28, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
260041 4.3 警告 サイバートラスト株式会社
LibTIFF
レッドハット
- LibTIFF の TIFFVStripSize 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2010-2597 2010-07-28 19:31 2010-07-2 Show GitHub Exploit DB Packet Storm
260042 4.3 警告 サイバートラスト株式会社
LibTIFF
レッドハット
- LibTIFF の TIFFRGBAImageGet 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2010-2483 2010-07-28 19:31 2010-07-6 Show GitHub Exploit DB Packet Storm
260043 4.3 警告 サイバートラスト株式会社
LibTIFF
レッドハット
- LibTIFF の TIFFExtractData マクロにおけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2010-2481 2010-07-28 19:31 2010-07-6 Show GitHub Exploit DB Packet Storm
260044 5 警告 レッドハット - iSNS 実装におけるバッファーオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2010-2221 2010-07-28 19:30 2010-07-8 Show GitHub Exploit DB Packet Storm
260045 7.5 危険 シスコシステムズ - Cisco Content Services Switch における HTTP Request Smuggling 攻撃の脆弱性 CWE-20
不適切な入力確認
CVE-2010-1576 2010-07-27 17:29 2010-07-2 Show GitHub Exploit DB Packet Storm
260046 7.5 危険 シスコシステムズ - Cisco Content Services Switch における認証を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2010-1575 2010-07-27 17:28 2010-07-2 Show GitHub Exploit DB Packet Storm
260047 6.8 警告 サイバートラスト株式会社
The Perl Foundation
レッドハット
- Perl の Archive::Tar モジュールにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2007-4829 2010-07-26 18:29 2007-11-2 Show GitHub Exploit DB Packet Storm
260048 9.3 危険 マイクロソフト - Microsoft Windows Help and Support Center に脆弱性 CWE-78
OSコマンド・インジェクション
CVE-2010-1885 2010-07-23 18:55 2010-06-10 Show GitHub Exploit DB Packet Storm
260049 4.9 警告 マイクロソフト - Microsoft Windows の Canonical Display Driver における任意のコードを実行される脆弱性 CWE-DesignError
CVE-2009-3678 2010-07-23 18:55 2010-05-14 Show GitHub Exploit DB Packet Storm
260050 9.3 危険 サン・マイクロシステムズ
レッドハット
リアルネットワークス
- Realnetworks RealPlayer における ASM RuleBook の処理に関する脆弱性 CWE-119
バッファエラー
CVE-2009-4247 2010-07-23 18:55 2010-01-19 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 29, 2026, 4:19 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
252661 7.8 HIGH
Local
google android In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, lack of input size validation before copying to buffer in PMIC function can lead to heap ov… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2018-11832 2024-11-21 12:44 2018-09-19 Show GitHub Exploit DB Packet Storm
252662 7.8 HIGH
Local
google android In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, improper validation of array index in WMA roam synchronization handler can lead to OOB writ… CWE-129
 Improper Validation of Array Index
CVE-2018-11827 2024-11-21 12:44 2018-09-19 Show GitHub Exploit DB Packet Storm
252663 7.8 HIGH
Local
google android In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, lack of check on integer overflow while calculating memory can lead to Buffer overflow in W… CWE-190
 Integer Overflow or Wraparound
CVE-2018-11826 2024-11-21 12:44 2018-09-19 Show GitHub Exploit DB Packet Storm
252664 7.0 HIGH
Local
google android In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, LUT configuration is passed down to driver from userspace via ioctl. Simultaneous update fr… CWE-362
CWE-416
Race Condition
 Use After Free
CVE-2018-11818 2024-11-21 12:44 2018-09-19 Show GitHub Exploit DB Packet Storm
252665 8.1 HIGH
Network
apache karaf In Apache Karaf version prior to 3.0.9, 4.0.9, 4.1.1, when the webconsole feature is installed in Karaf, it is available at .../system/console and requires authentication to access it. One part of th… CWE-287
Improper Authentication
CVE-2018-11787 2024-11-21 12:44 2018-09-18 Show GitHub Exploit DB Packet Storm
252666 8.8 HIGH
Network
apache karaf In Apache Karaf prior to 4.2.0 release, if the sshd service in Karaf is left on so an administrator can manage the running instance, any user with rights to the Karaf console can pivot and read/write… CWE-269
 Improper Privilege Management
CVE-2018-11786 2024-11-21 12:44 2018-09-18 Show GitHub Exploit DB Packet Storm
252667 7.8 HIGH
Local
apache
redhat
debian
canonical
spamassassin
enterprise_linux_desktop
enterprise_linux_workstation
enterprise_linux_server
debian_linux
ubuntu_linux
enterprise_linux_server_eus
Apache SpamAssassin 3.4.2 fixes a local user code injection in the meta rule syntax. CWE-94
Code Injection
CVE-2018-11781 2024-11-21 12:44 2018-09-17 Show GitHub Exploit DB Packet Storm
252668 9.8 CRITICAL
Network
apache
pdfinfo_project
debian
canonical
spamassassin
pdfinfo
debian_linux
ubuntu_linux
A potential Remote Code Execution bug exists with the PDFInfo plugin in Apache SpamAssassin before 3.4.2. CWE-94
Code Injection
CVE-2018-11780 2024-11-21 12:44 2018-09-17 Show GitHub Exploit DB Packet Storm
252669 7.5 HIGH
Network
opcfoundation
debian
unified_architecture-.net-legacy
unified_architecture-java
unified_architecture_ansic
unified_architecture_.net-standard
debian_linux
Buffer overflow in OPC UA applications allows remote attackers to trigger a stack overflow with carefully structured requests. CWE-787
 Out-of-bounds Write
CVE-2018-12086 2024-11-21 12:44 2018-09-15 Show GitHub Exploit DB Packet Storm
252670 8.2 HIGH
Local
intel nuc_kit_firmware
compute_card_firmware
compute_stick_firmware
Improper input validation in firmware for Intel NUC Kits may allow a privileged user to potentially execute arbitrary code resulting in information disclosure, escalation of privilege and/or denial o… CWE-20
 Improper Input Validation 
CVE-2018-12176 2024-11-21 12:44 2018-09-13 Show GitHub Exploit DB Packet Storm