Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 27, 2026, 10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
260471	7.5	危険	アップル Ruby on Rails project	-	Ruby on Rails のダイジェスト認証における認証を回避される脆弱性	CWE-287 不適切な認証	CVE-2009-2422	2010-04-16 16:57	2009-07-10	Show	GitHub Exploit DB Packet Storm

260472	6.8	警告	アップル	-	Apple Mac OS X の QuickTime におけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-0526	2010-04-16 16:57	2010-03-29	Show	GitHub Exploit DB Packet Storm

260473	6.8	警告	アップル	-	Apple Mac OS X の QuickTime におけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-0520	2010-04-16 16:57	2010-03-29	Show	GitHub Exploit DB Packet Storm

260474	6.8	警告	アップル	-	Apple Mac OS X の QuickTime における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2010-0519	2010-04-16 16:57	2010-03-29	Show	GitHub Exploit DB Packet Storm

260475	6.8	警告	アップル	-	Apple Mac OS X の QuickTime における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-0518	2010-04-16 16:56	2010-03-29	Show	GitHub Exploit DB Packet Storm

260476	6.8	警告	アップル	-	Apple Mac OS X の QuickTime におけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-0517	2010-04-16 16:56	2010-03-29	Show	GitHub Exploit DB Packet Storm

260477	6.8	警告	アップル	-	Apple Mac OS X の QuickTime におけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-0516	2010-04-15 18:39	2010-03-29	Show	GitHub Exploit DB Packet Storm

260478	6.8	警告	アップル	-	Apple Mac OS X の QuickTime における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-0515	2010-04-15 18:39	2010-03-29	Show	GitHub Exploit DB Packet Storm

260479	6.8	警告	アップル	-	Apple Mac OS X の QuickTime におけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-0514	2010-04-15 18:38	2010-03-29	Show	GitHub Exploit DB Packet Storm

260480	6.8	警告	アップル	-	Apple Mac OS X の PS Normalizer におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-0513	2010-04-15 18:38	2010-03-29	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 27, 2026, 4:35 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
249301	8.8	HIGH Network	cybozu	remote_service_manager	Cybozu Remote Service 3.0.0 to 3.1.0 allows remote authenticated attackers to upload and execute Java code file on the server via unspecified vectors.	CWE-434 Unrestricted Upload of File with Dangerous Type	CVE-2018-16169	2024-11-21 12:52	2019-01-10	Show	GitHub Exploit DB Packet Storm

249302	9.8	CRITICAL Network	jpcert	logontracer	LogonTracer 1.2.0 and earlier allows remote attackers to conduct Python code injection attacks via unspecified vectors.	CWE-94 Code Injection	CVE-2018-16168	2024-11-21 12:52	2019-01-10	Show	GitHub Exploit DB Packet Storm

249303	9.8	CRITICAL Network	jpcert	logontracer	LogonTracer 1.2.0 and earlier allows remote attackers to execute arbitrary OS commands via unspecified vectors.	CWE-78 OS Command	CVE-2018-16167	2024-11-21 12:52	2019-01-10	Show	GitHub Exploit DB Packet Storm

249304	8.8	HIGH Network	jpcert	logontracer	LogonTracer 1.2.0 and earlier allows remote attackers to conduct XML External Entity (XXE) attacks via unspecified vectors.	CWE-611 XXE	CVE-2018-16166	2024-11-21 12:52	2019-01-10	Show	GitHub Exploit DB Packet Storm

249305	6.1	MEDIUM Network	jpcert	logontracer	Cross-site scripting vulnerability in LogonTracer 1.2.0 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.	CWE-79 Cross-site Scripting	CVE-2018-16165	2024-11-21 12:52	2019-01-10	Show	GitHub Exploit DB Packet Storm

249306	5.4	MEDIUM Network	web-dorado	event_calendar_wd	Cross-site scripting vulnerability in Event Calendar WD version 1.1.21 and earlier allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors.	CWE-79 Cross-site Scripting	CVE-2018-16164	2024-11-21 12:52	2019-01-10	Show	GitHub Exploit DB Packet Storm

249307	6.5	MEDIUM Network	google redhat	chrome enterprise_linux_desktop enterprise_linux_server enterprise_linux_workstation	A missing check for JS-simulated input events in Blink in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to download arbitrary files with no user input via a crafted HTML page.	CWE-20 Improper Input Validation	CVE-2018-16088	2024-11-21 12:52	2019-01-10	Show	GitHub Exploit DB Packet Storm

249308	4.3	MEDIUM Network	google	chrome	Lack of proper state tracking in Permissions in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.	CWE-732 Incorrect Permission Assignment for Critical Resource	CVE-2018-16087	2024-11-21 12:52	2019-01-10	Show	GitHub Exploit DB Packet Storm

249309	8.8	HIGH Network	google	chrome	A use after free in ResourceCoordinator in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.	CWE-787 CWE-416 Out-of-bounds Write Use After Free	CVE-2018-16085	2024-11-21 12:52	2019-01-10	Show	GitHub Exploit DB Packet Storm

249310	6.1	MEDIUM Network	google redhat	chrome enterprise_linux_desktop enterprise_linux_server enterprise_linux_workstation	The default selected dialog button in CustomHandlers in Google Chrome prior to 69.0.3497.81 allowed a remote attacker who convinced the user to perform certain operations to open external programs vi…	CWE-79 Cross-site Scripting	CVE-2018-16084	2024-11-21 12:52	2019-01-10	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed