Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 27, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
401 10 危険 X.Org Foundation X11 X.Org FoundationのX11における不特定の脆弱性 CWE-Other
その他 		CVE-1999-0526 2026-06-23 11:22 1997-07-1 Show GitHub Exploit DB Packet Storm
402 7.5 危険 クアルコム eudora
Eudora Pro
Eudora Light 		クアルコムのeudora等の複数製品における不特定の脆弱性 CWE-Other
その他 		CVE-1999-0427 2026-06-23 11:22 2000-05-1 Show GitHub Exploit DB Packet Storm
403 5 警告 SNMP
Network Appliance		 NetCache
SNMP 		Network Appliance等の複数ベンダの製品における不特定の脆弱性 CWE-Other
その他 		CVE-1999-0472 2026-06-23 11:22 1999-04-7 Show GitHub Exploit DB Packet Storm
404 5 警告 WinRoute WinRoute WinRouteにおける不特定の脆弱性 CWE-Other
その他 		CVE-1999-0471 2026-06-23 11:22 1999-04-9 Show GitHub Exploit DB Packet Storm
405 5 警告 WebCom Guestbook CGI WebComのGuestbook CGIにおける不特定の脆弱性 CWE-Other
その他 		CVE-1999-0467 2026-06-23 11:22 1999-04-1 Show GitHub Exploit DB Packet Storm
406 2.1 注意 L0pht L0phtCrack L0phtのL0phtCrackにおける不特定の脆弱性 CWE-Other
その他 		CVE-1999-0458 2026-06-23 11:22 1999-01-6 Show GitHub Exploit DB Packet Storm
407 7.5 危険 allaire ColdFusion Server allaireのColdFusion Serverにおける不特定の脆弱性 CWE-Other
その他 		CVE-1999-0455 2026-06-23 11:22 1999-12-25 Show GitHub Exploit DB Packet Storm
408 5 警告 ramp networks WebRamp ramp networksのWebRampにおける不特定の脆弱性 CWE-Other
その他 		CVE-1999-0437 2026-06-23 11:22 1999-03-1 Show GitHub Exploit DB Packet Storm
409 4.6 警告 レッドハット
Slackware
SUSE
X.Org Foundation
NetBSD		 Slackware Linux
Red Hat Linux
SUSE LINUX
x11r6
NetBSD 		NetBSD等の複数ベンダの製品における不特定の脆弱性 CWE-Other
その他 		CVE-1999-0433 2026-06-23 11:22 1999-03-21 Show GitHub Exploit DB Packet Storm
410 7.2 危険 NetBSD umapfs NetBSDのumapfsにおける不特定の脆弱性 CWE-Other
その他 		CVE-1999-0420 2026-06-23 11:22 1999-03-17 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 27, 2026, 4:35 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
254161 4.8 MEDIUM
Network 		joyplus-cms_project joyplus-cms joyplus-cms 1.6.0 has XSS via the device_name parameter in a manager/admin_ajax.php?action=save flag=add request. CWE-79
Cross-site Scripting 		CVE-2018-10096 2024-11-21 12:40 2018-04-14 Show GitHub Exploit DB Packet Storm
254162 5.5 MEDIUM
Local 		linux
debian
canonical 		linux_kernel
debian_linux
ubuntu_linux 		The kernel_wait4 function in kernel/exit.c in the Linux kernel before 4.13, when an unspecified architecture and compiler is used, might allow local users to cause a denial of service by triggering a… CWE-20
 Improper Input Validation  		CVE-2018-10087 2024-11-21 12:40 2018-04-13 Show GitHub Exploit DB Packet Storm
254163 8.1 HIGH
Network 		mikrotik routeros An issue was discovered in MikroTik RouterOS 6.41.4. Missing OpenVPN server certificate verification allows a remote unauthenticated attacker capable of intercepting client traffic to act as a malici… CWE-295
Improper Certificate Validation  		CVE-2018-10066 2024-11-21 12:40 2018-04-13 Show GitHub Exploit DB Packet Storm
254164 7.2 HIGH
Network 		cmsmadesimple cms_made_simple CMS Made Simple (CMSMS) through 2.2.7 contains an arbitrary code execution vulnerability in the admin dashboard because the implementation uses "eval('function testfunction'.rand()" and it is possibl… CWE-94
Code Injection 		CVE-2018-10086 2024-11-21 12:40 2018-04-13 Show GitHub Exploit DB Packet Storm
254165 9.8 CRITICAL
Network 		cmsmadesimple cms_made_simple CMS Made Simple (CMSMS) through 2.2.6 allows PHP object injection because of an unserialize call in the _get_data function of \lib\classes\internal\class.LoginOperations.php. By sending a crafted coo… CWE-502
 Deserialization of Untrusted Data 		CVE-2018-10085 2024-11-21 12:40 2018-04-13 Show GitHub Exploit DB Packet Storm
254166 8.8 HIGH
Network 		cmsmadesimple cms_made_simple CMS Made Simple (CMSMS) through 2.2.6 contains a privilege escalation vulnerability from ordinary user to admin user by arranging for the eff_uid value within $_COOKIE[$this->_loginkey] to equal 1, b… CWE-327
 Use of a Broken or Risky Cryptographic Algorithm 		CVE-2018-10084 2024-11-21 12:40 2018-04-13 Show GitHub Exploit DB Packet Storm
254167 7.5 HIGH
Network 		cmsmadesimple cms_made_simple CMS Made Simple (CMSMS) through 2.2.7 contains an arbitrary file deletion vulnerability in the admin dashboard via directory traversal sequences in the val parameter within a cmd=del request, because… CWE-22
Path Traversal 		CVE-2018-10083 2024-11-21 12:40 2018-04-13 Show GitHub Exploit DB Packet Storm
254168 5.3 MEDIUM
Network 		cmsmadesimple cms_made_simple CMS Made Simple (CMSMS) through 2.2.7 allows physical path leakage via an invalid /index.php?page= value, a crafted URI starting with /index.php?mact=Search, or a direct request to /admin/header.php,… CWE-200
Information Exposure 		CVE-2018-10082 2024-11-21 12:40 2018-04-13 Show GitHub Exploit DB Packet Storm
254169 9.8 CRITICAL
Network 		cmsmadesimple cms_made_simple CMS Made Simple (CMSMS) through 2.2.6 contains an admin password reset vulnerability because data values are improperly compared, as demonstrated by a hash beginning with the "0e" substring. CWE-640
 Weak Password Recovery Mechanism for Forgotten Password 		CVE-2018-10081 2024-11-21 12:40 2018-04-13 Show GitHub Exploit DB Packet Storm
254170 8.6 HIGH
Network 		secutech_project ris-11_firmware
ris-22_firmware
ris-33_firmware 		Secutech RiS-11, RiS-22, and RiS-33 devices with firmware V5.07.52_es_FRI01 allow DNS settings changes via a goform/AdvSetDns?GO=wan_dns.asp request in conjunction with a crafted admin cookie. CWE-345
 Insufficient Verification of Data Authenticity 		CVE-2018-10080 2024-11-21 12:40 2018-04-13 Show GitHub Exploit DB Packet Storm