Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 21, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
202211	3.1	低 Network	オラクル	-	Oracle Siebel CRM の Siebel UI Framework における Open UI に関する脆弱性	CWE-noinfo 情報不足	CVE-2017-3264	2017-02-1 11:18	2017-01-17	Show	GitHub Exploit DB Packet Storm

202212	9	緊急 Network	オラクル	-	Oracle Database Server の OJVM における脆弱性	CWE-noinfo 情報不足	CVE-2017-3310	2017-02-1 11:00	2017-01-17	Show	GitHub Exploit DB Packet Storm

202213	3.3	低 Local	オラクル	-	Oracle Database Server の RDBMS Security における脆弱性	CWE-200 情報漏えい	CVE-2017-3240	2017-02-1 11:00	2017-01-17	Show	GitHub Exploit DB Packet Storm

202214	10	緊急 Network	オラクル	-	Oracle Primavera Products Suite の Primavera P6 Enterprise Project Portfolio Management における Web Access に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2017-3324	2017-02-1 10:48	2017-01-17	Show	GitHub Exploit DB Packet Storm

202215	8.1	重要 Network	オラクル	-	Oracle Primavera Products Suite の Primavera P6 Enterprise Project Portfolio Management における Team Member に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2017-3263	2017-02-1 10:48	2017-01-17	Show	GitHub Exploit DB Packet Storm

202216	6.5	警告 Network	WordPress.org	-	WordPress の wp-admin/includes/ajax-actions.php の wp_ajax_update_plugin 関数におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2016-6897	2017-02-1 10:37	2016-06-16	Show	GitHub Exploit DB Packet Storm

202217	7.1	重要 Network	WordPress.org	-	WordPress の wp-admin/includes/ajax-actions.php の wp_ajax_update_plugin 関数におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2016-6896	2017-02-1 10:37	2016-08-20	Show	GitHub Exploit DB Packet Storm

202218	4.3	警告 Network	WordPress.org	-	WordPress の wp-admin/includes/ajax-actions.php の wp_ajax_update_plugin 関数における読み取りアクセス制限を回避される脆弱性	CWE-254 CWE-284	CVE-2016-10148	2017-02-1 10:37	2016-07-27	Show	GitHub Exploit DB Packet Storm

202219	4	警告 Local	Info-ZIP	-	Info-Zip UnZip の zipinfo.c の zi_short 関数におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2016-9844	2017-01-31 18:23	2016-12-2	Show	GitHub Exploit DB Packet Storm

202220	5.5	警告 Local	Linux	-	Linux Kernel の crypto/mcryptd.c におけるサービス運用妨害 (DoS) の脆弱性	CWE-476 NULL ポインタデリファレンス	CVE-2016-10147	2017-01-31 18:16	2016-12-15	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 21, 2026, 4:01 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
344481	-	microsoft	visio	Buffer overflow in VISIODWG.DLL before 10.0.6880.4 in Microsoft Office Visio allows user-assisted remote attackers to execute arbitrary code via a crafted DXF file, a different vulnerability than CVE…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2010-1681	2018-10-11 04:57	2010-05-6	Show	GitHub Exploit DB Packet Storm

344482	-	zikula	zikula_application_framework	Multiple cross-site scripting (XSS) vulnerabilities in Zikula Application Framework 1.2.2, and possibly earlier, allow remote attackers to inject arbitrary web script or HTML via the (1) func paramet…	CWE-79 Cross-site Scripting	CVE-2010-1724	2018-10-11 04:57	2010-05-6	Show	GitHub Exploit DB Packet Storm

344483	-	apple	safari webkit	Use-after-free vulnerability in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, allows remote attackers to execute arbitrary code or caus…	CWE-399 Resource Management Errors	CVE-2010-1749	2018-10-11 04:57	2010-06-12	Show	GitHub Exploit DB Packet Storm

344484	-	artifex	gpl_ghostscript	Stack-based buffer overflow in the parser function in GhostScript 8.70 and 8.64 allows context-dependent attackers to execute arbitrary code via a crafted PostScript file.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2010-1869	2018-10-11 04:57	2010-05-12	Show	GitHub Exploit DB Packet Storm

344485	-	emc	rsa_key_manager_client	SQL injection vulnerability in EMC RSA Key Manager (RKM) C Client 1.5.x allows user-assisted remote attackers to execute arbitrary SQL commands via the metadata section of encrypted key data.	CWE-89 SQL Injection	CVE-2010-1904	2018-10-11 04:57	2010-06-8	Show	GitHub Exploit DB Packet Storm

344486	-	consona	consona_live_assistance consona_dynamic_agent consona_subscriber_assistance	Multiple cross-site scripting (XSS) vulnerabilities in Consona Live Assistance, Dynamic Agent, and Subscriber Assistance allow remote attackers to inject arbitrary web script or HTML via crafted inpu…	CWE-79 Cross-site Scripting	CVE-2010-1905	2018-10-11 04:57	2010-05-12	Show	GitHub Exploit DB Packet Storm

344487	-	consona	consona_dynamic_agent consona_repair_manager consona_subscriber_activation consona_subscriber_agent	tgsrv.exe in the Repair Service in Consona Dynamic Agent, Repair Manager, Subscriber Activation, and Subscriber Agent relies on a predictable timestamp field to validate input to the \\.\pipe\__Repai…	CWE-310 Cryptographic Issues	CVE-2010-1906	2018-10-11 04:57	2010-05-12	Show	GitHub Exploit DB Packet Storm

344488	-	consona	consona_dynamic_agent consona_live_assistance consona_subscriber_assistance	The SdcUser.TgConCtl ActiveX control in tgctlcm.dll in Consona Live Assistance, Dynamic Agent, and Subscriber Assistance allows remote attackers to discover the username of the client user, and conse…	CWE-200 Information Exposure	CVE-2010-1907	2018-10-11 04:57	2010-05-12	Show	GitHub Exploit DB Packet Storm

344489	-	consona	consona_dynamic_agent consona_live_assistance consona_subscriber_assistance	The SdcUser.TgConCtl ActiveX control in tgctlcm.dll in Consona Live Assistance, Dynamic Agent, and Subscriber Assistance does not properly restrict access to the HTTPDownloadFile, HTTPGetFile, Instal…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2010-1908	2018-10-11 04:57	2010-05-12	Show	GitHub Exploit DB Packet Storm

344490	-	consona	consona_dynamic_agent consona_live_assistance consona_subscriber_assistance	Buffer overflow in the RunCmd method in the SdcUser.TgConCtl ActiveX control in tgctlcm.dll in Consona Live Assistance, Dynamic Agent, and Subscriber Assistance allows remote attackers to execute arb…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2010-1909	2018-10-11 04:57	2010-05-12	Show	GitHub Exploit DB Packet Storm