Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 27, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
260181	7.2	危険	マイクロソフト	-	複数の Microsoft 製品の Windows OpenType Compact Font Format ドライバにおける任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2010-0819	2010-07-1 16:21	2010-06-8	Show	GitHub Exploit DB Packet Storm

260182	6.8	警告	マイクロソフト	-	Microsoft Windows の win32k.sys における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-1255	2010-07-1 16:20	2010-06-8	Show	GitHub Exploit DB Packet Storm

260183	6.8	警告	マイクロソフト	-	Microsoft Windows の win32k.sys における任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2010-0485	2010-07-1 16:20	2010-06-8	Show	GitHub Exploit DB Packet Storm

260184	6.8	警告	マイクロソフト	-	Microsoft Windows の win32k.sys における任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2010-0484	2010-07-1 16:20	2010-06-8	Show	GitHub Exploit DB Packet Storm

260185	4.3	警告	マイクロソフト	-	Microsoft SharePoint Server におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-0817	2010-07-1 16:02	2010-04-29	Show	GitHub Exploit DB Packet Storm

260186	9.3	危険	マイクロソフト	-	Microsoft Windows の Microsoft Data Analyzer ActiveX コントロールにおける任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-0252	2010-07-1 16:02	2010-02-9	Show	GitHub Exploit DB Packet Storm

260187	9.3	危険	マイクロソフト	-	Microsoft Internet Explorer におけるアクセス制限を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-0255	2010-07-1 16:01	2010-02-3	Show	GitHub Exploit DB Packet Storm

260188	9.3	危険	マイクロソフト	-	Microsoft Internet Explorer における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-1262	2010-06-30 18:53	2010-06-8	Show	GitHub Exploit DB Packet Storm

260189	9.3	危険	マイクロソフト	-	Microsoft Internet Explorer における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-1259	2010-06-30 18:53	2010-06-8	Show	GitHub Exploit DB Packet Storm

260190	9.3	危険	マイクロソフト	-	Microsoft Internet Explorer における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-1261	2010-06-30 18:53	2010-06-8	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 27, 2026, 4:35 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
251421	9.8	CRITICAL Network	fast-cpp-csv-parser_project	fast-cpp-csv-parser	Fast C++ CSV Parser (aka fast-cpp-csv-parser) before 2018-07-06 has a heap-based buffer over-read in io::trim_chars in csv.h.	CWE-125 Out-of-bounds Read	CVE-2018-13421	2024-11-21 12:47	2018-07-8	Show	GitHub Exploit DB Packet Storm

251422	7.5	HIGH Network	gperftools_project	gperftools	Google gperftools 2.7 has a memory leak in malloc_extension.cc, related to MallocExtension::Register and InitModule. NOTE: the software maintainer indicates that this is not a bug; it is only a false…	CWE-772 Missing Release of Resource after Effective Lifetime	CVE-2018-13420	2024-11-21 12:47	2018-07-8	Show	GitHub Exploit DB Packet Storm

251423	6.5	MEDIUM Network	libsndfile_project	libsndfile	An issue has been found in libsndfile 1.0.28. There is a memory leak in psf_allocate in common.c, as demonstrated by sndfile-convert. NOTE: The maintainer and third parties were unable to reproduce a…	CWE-772 Missing Release of Resource after Effective Lifetime	CVE-2018-13419	2024-11-21 12:47	2018-07-8	Show	GitHub Exploit DB Packet Storm

251424	9.8	CRITICAL Network	info-zip_project	zip	Info-ZIP Zip 3.0, when the -T and -TT command-line options are used, allows attackers to cause a denial of service (invalid free and application crash) or possibly have unspecified other impact becau…	CWE-416 Use After Free	CVE-2018-13410	2024-11-21 12:47	2018-07-7	Show	GitHub Exploit DB Packet Storm

251425	6.1	MEDIUM Network	jirafeau	jirafeau	An issue was discovered in Jirafeau before 3.4.1. The "search file by hash" form is affected by reflected XSS that could allow, by targeting an administrator, stealing a session and gaining administr…	CWE-79 Cross-site Scripting	CVE-2018-13409	2024-11-21 12:47	2018-07-7	Show	GitHub Exploit DB Packet Storm

251426	6.1	MEDIUM Network	jirafeau	jirafeau	An issue was discovered in Jirafeau before 3.4.1. The "search file by link" form is affected by reflected XSS that could allow, by targeting an administrator, stealing a session and gaining administr…	CWE-79 Cross-site Scripting	CVE-2018-13408	2024-11-21 12:47	2018-07-7	Show	GitHub Exploit DB Packet Storm

251427	4.9	MEDIUM Network	jirafeau	jirafeau	A CSRF issue was discovered in Jirafeau before 3.4.1. The "delete file" feature on the admin panel is not protected against automated requests and could be abused.	CWE-352 Origin Validation Error	CVE-2018-13407	2024-11-21 12:47	2018-07-7	Show	GitHub Exploit DB Packet Storm

251428	7.8	HIGH Local	linux canonical debian	linux_kernel ubuntu_linux debian_linux	An integer overflow in the uvesafb_setcmap function in drivers/video/fbdev/uvesafb.c in the Linux kernel before 4.17.4 could result in local attackers being able to crash the kernel or potentially el…	CWE-190 Integer Overflow or Wraparound	CVE-2018-13406	2024-11-21 12:47	2018-07-6	Show	GitHub Exploit DB Packet Storm

251429	7.8	HIGH Local	linux debian canonical fedoraproject redhat f5	linux_kernel debian_linux ubuntu_linux fedora enterprise_linux_desktop enterprise_linux_server_aus enterprise_linux_workstation enterprise_linux_server_tus enterprise_linux_se…	The inode_init_owner function in fs/inode.c in the Linux kernel through 3.16 allows local users to create files with an unintended group ownership, in a scenario where a directory is SGID to a certai…	CWE-269 Improper Privilege Management	CVE-2018-13405	2024-11-21 12:47	2018-07-6	Show	GitHub Exploit DB Packet Storm

251430	8.8	HIGH Network	fortinet	fortios	An external control of system vulnerability in FortiOS may allow an authenticated, regular user to change the routing settings of the device via connecting to the ZebOS component.	CWE-20 Improper Input Validation	CVE-2018-13371	2024-11-21 12:46	2020-04-2	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed