Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":July 1, 2026, 10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
260621	7.5	危険	サイバートラスト株式会社 Apache Software Foundation	-	Apache Geronimo の SQLLoginModule における認証を回避される脆弱性	CWE-287 不適切な認証	CVE-2007-5797	2010-07-22 20:51	2007-10-22	Show	GitHub Exploit DB Packet Storm

260622	6.8	警告	InterSect Alliance International Pty	-	Snare Agent の Web インターフェースにクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2010-2594	2010-07-22 20:51	2010-06-30	Show	GitHub Exploit DB Packet Storm

260623	5.5	警告	富士通	-	Internet Navigware Server における情報漏えいの脆弱性	CWE-200 情報漏えい	-	2010-07-22 20:51	2010-06-18	Show	GitHub Exploit DB Packet Storm

260624	7.8	危険	サイバートラスト株式会社 Linux レッドハット	-	Linux kernel の NFSv4 クライアントの nfs4_proc_lock 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2009-3726	2010-07-22 17:53	2009-11-9	Show	GitHub Exploit DB Packet Storm

260625	5	警告	IBM アップルサイバートラスト株式会社サン・マイクロシステムズヒューレット・パッカードマイクロソフトオラクル OpenOffice.org Project レッドハット	-	XML 署名の検証において認証回避が可能な問題	CWE-DesignError	CVE-2009-0217	2010-07-22 17:52	2009-07-15	Show	GitHub Exploit DB Packet Storm

260626	9.3	危険	アドビシステムズレッドハット	-	Adobe Reader および Acrobat におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-2212	2010-07-21 16:31	2010-06-29	Show	GitHub Exploit DB Packet Storm

260627	9.3	危険	アドビシステムズレッドハット	-	Adobe Reader および Acrobat における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-2211	2010-07-21 16:31	2010-06-29	Show	GitHub Exploit DB Packet Storm

260628	9.3	危険	アドビシステムズレッドハット	-	Adobe Reader および Acrobat における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-2210	2010-07-21 16:31	2010-06-29	Show	GitHub Exploit DB Packet Storm

260629	9.3	危険	アドビシステムズレッドハット	-	Adobe Reader および Acrobat における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-2209	2010-07-21 16:30	2010-06-29	Show	GitHub Exploit DB Packet Storm

260630	9.3	危険	アドビシステムズレッドハット	-	Adobe Reader および Acrobat における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-2208	2010-07-21 16:30	2010-06-29	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:July 1, 2026, 4:27 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
246071	5.4	MEDIUM Network	cacti	cacti	A cross-site scripting (XSS) vulnerability exists in host.php (via tree.php) in Cacti before 1.2.0 due to lack of escaping of unintended characters in the Website Hostname field for Devices.	CWE-79 Cross-site Scripting	CVE-2018-20726	2024-11-21 13:02	2019-01-17	Show	GitHub Exploit DB Packet Storm

246072	4.8	MEDIUM Network	cacti	cacti	A cross-site scripting (XSS) vulnerability exists in graph_templates.php in Cacti before 1.2.0 due to lack of escaping of unintended characters in the Graph Vertical Label.	CWE-79 Cross-site Scripting	CVE-2018-20725	2024-11-21 13:02	2019-01-17	Show	GitHub Exploit DB Packet Storm

246073	4.8	MEDIUM Network	cacti	cacti	A cross-site scripting (XSS) vulnerability exists in pollers.php in Cacti before 1.2.0 due to lack of escaping of unintended characters in the Website Hostname for Data Collectors.	CWE-79 Cross-site Scripting	CVE-2018-20724	2024-11-21 13:02	2019-01-17	Show	GitHub Exploit DB Packet Storm

246074	4.8	MEDIUM Network	cacti	cacti	A cross-site scripting (XSS) vulnerability exists in color_templates.php in Cacti before 1.2.0 due to lack of escaping of unintended characters in the Name field for a Color.	CWE-79 Cross-site Scripting	CVE-2018-20723	2024-11-21 13:02	2019-01-17	Show	GitHub Exploit DB Packet Storm

246075	9.8	CRITICAL Network	uriparser_project debian	uriparser debian_linux	URI_FUNC() in UriParse.c in uriparser before 0.9.1 has an out-of-bounds read (in uriParseEx functions) for an incomplete URI with an IPv6 address containing an embedded IPv4 address, such as a "//[…	CWE-125 Out-of-bounds Read	CVE-2018-20721	2024-11-21 13:02	2019-01-16	Show	GitHub Exploit DB Packet Storm

246076	7.5	HIGH Network	hitachienergy	relion_630_firmware	ABB Relion 630 devices 1.1 before 1.1.0.C0, 1.2 before 1.2.0.B3, and 1.3 before 1.3.0.A6 allow remote attackers to cause a denial of service (reboot) via a reboot command in an SPA message.	CWE-20 Improper Input Validation	CVE-2018-20720	2024-11-21 13:02	2019-01-16	Show	GitHub Exploit DB Packet Storm

246077	8.8	HIGH Network	tiki	tikiwiki_cms\/groupware	In Tiki before 17.2, the user task component is vulnerable to a SQL Injection via the tiki-user_tasks.php show_history parameter.	CWE-89 SQL Injection	CVE-2018-20719	2024-11-21 13:02	2019-01-16	Show	GitHub Exploit DB Packet Storm

246078	9.8	CRITICAL Network	pydio	pydio	In Pydio before 8.2.2, an attack is possible via PHP Object Injection because a user is allowed to use the $phpserial$a:0:{} syntax to store a preference. An attacker either needs a "public link" of …	CWE-502 Deserialization of Untrusted Data	CVE-2018-20718	2024-11-21 13:02	2019-01-16	Show	GitHub Exploit DB Packet Storm

246079	8.8	HIGH Network	prestashop	prestashop	In the orders section of PrestaShop before 1.7.2.5, an attack is possible after gaining access to a target store with a user role with the rights of at least a Salesman or higher privileges. The atta…	CWE-94 Code Injection	CVE-2018-20717	2024-11-21 13:02	2019-01-16	Show	GitHub Exploit DB Packet Storm

246080	9.8	CRITICAL Network	cubecart	cubecart	CubeCart before 6.1.13 has SQL Injection via the validate[] parameter of the "I forgot my Password!" feature.	CWE-89 SQL Injection	CVE-2018-20716	2024-11-21 13:02	2019-01-16	Show	GitHub Exploit DB Packet Storm