Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 10, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
231921	2.1	注意	オラクル	-	Oracle Fusion Middleware の Oracle WebCenter Sites における ImagePicker の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2012-5065	2012-10-19 18:18	2012-10-16	Show	GitHub Exploit DB Packet Storm

231922	10	危険	サン・マイクロシステムズオラクル	-	Oracle Fusion Middleware の Oracle JRockit における脆弱性	CWE-noinfo 情報不足	CVE-2012-3202	2012-10-19 18:17	2012-10-16	Show	GitHub Exploit DB Packet Storm

231923	4.3	警告	オラクル	-	Oracle Fusion Middleware の Oracle BI Publisher における Administration の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2012-3194	2012-10-19 18:12	2012-10-16	Show	GitHub Exploit DB Packet Storm

231924	3.5	注意	オラクル	-	Oracle Fusion Middleware の Oracle BI Publisher における Administration の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2012-3193	2012-10-19 18:11	2012-10-16	Show	GitHub Exploit DB Packet Storm

231925	4.9	警告	オラクル	-	Oracle Fusion Middleware の Oracle WebCenter Sites における Advanced UI の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2012-3186	2012-10-19 18:11	2012-10-16	Show	GitHub Exploit DB Packet Storm

231926	4.9	警告	オラクル	-	Oracle Fusion Middleware の Oracle WebCenter Sites における Advanced UI の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2012-3185	2012-10-19 18:10	2012-10-16	Show	GitHub Exploit DB Packet Storm

231927	4.3	警告	オラクル	-	Oracle Fusion Middleware の Oracle WebCenter Sites における Advanced UI の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2012-3184	2012-10-19 18:10	2012-10-16	Show	GitHub Exploit DB Packet Storm

231928	4.9	警告	オラクル	-	Oracle Fusion Middleware の Oracle Fusion Middleware における Advanced UI の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2012-3183	2012-10-19 18:09	2012-10-16	Show	GitHub Exploit DB Packet Storm

231929	4.3	警告	オラクル	-	Oracle Fusion Middleware の Oracle Application Server Single Sign-On における Redirect の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2012-3175	2012-10-19 18:09	2012-10-16	Show	GitHub Exploit DB Packet Storm

231930	6.4	警告	オラクル	-	Oracle Fusion Middleware の Oracle Reports Developer における Servlet の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2012-3153	2012-10-19 18:09	2012-10-16	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 11, 2026, 4:09 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
347071	-	cmsqlite	cmsqlite	Directory traversal vulnerability in index.php in CMSQlite 1.2 and earlier allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the mod parameter.	CWE-22 Path Traversal	CVE-2010-2096	2010-05-28 13:00	2010-05-28	Show	GitHub Exploit DB Packet Storm

347072	-	e107	e107	bbcode/php.bb in e107 0.7.20 and earlier does not perform access control checks for all inputs that could contain the php bbcode tag, which allows remote attackers to execute arbitrary PHP code, as d…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2010-2099	2010-05-28 13:00	2010-05-28	Show	GitHub Exploit DB Packet Storm

347073	-	apache	apache_http_server	Race condition in the mod_auth_shadow module for the Apache HTTP Server allows remote attackers to bypass authentication, and read and possibly modify data, via vectors related to improper interactio…	CWE-362 Race Condition	CVE-2010-1151	2010-05-27 14:49	2010-04-21	Show	GitHub Exploit DB Packet Storm

347074	-	moinmo	moinmoin	MoinMoin 1.7.x before 1.7.3 and 1.8.x before 1.8.3 checks parent ACLs in certain inappropriate circumstances during processing of hierarchical ACLs, which allows remote attackers to bypass intended a…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2009-4762	2010-05-27 14:47	2010-03-30	Show	GitHub Exploit DB Packet Storm

347075	-	cisco	scientific_atlanta_webstar_dpc2100r2	Multiple cross-site request forgery (CSRF) vulnerabilities in the web interface on the Cisco Scientific Atlanta WebSTAR DPC2100R2 cable modem with firmware 2.0.2r1256-060303 allow remote attackers to…	CWE-352 Origin Validation Error	CVE-2010-2025	2010-05-27 13:00	2010-05-27	Show	GitHub Exploit DB Packet Storm

347076	-	cisco	scientific_atlanta_webstar_dpc2100r2	The web interface on the Cisco Scientific Atlanta WebSTAR DPC2100R2 cable modem with firmware 2.0.2r1256-060303 allows remote attackers to bypass authentication, and reset the modem or replace the fi…	CWE-287 Improper Authentication	CVE-2010-2026	2010-05-27 13:00	2010-05-27	Show	GitHub Exploit DB Packet Storm

347077	-	cisco	scientific_atlanta_webstar_dpc2100r2	The web interface on the Cisco Scientific Atlanta WebSTAR DPC2100R2 cable modem with firmware 2.0.2r1256-060303 has a default administrative password (aka SAPassword) of W2402, which makes it easier …	CWE-255 Credentials Management	CVE-2010-2082	2010-05-27 13:00	2010-05-27	Show	GitHub Exploit DB Packet Storm

347078	-	microsoft	dynamics_gp	Microsoft Dynamics GP has a default value of ACCESS for the system password, which might make it easier for remote authenticated users to bypass intended access restrictions via unspecified vectors.	CWE-255 Credentials Management	CVE-2010-2083	2010-05-27 13:00	2010-05-27	Show	GitHub Exploit DB Packet Storm

347079	-	novell	access_manager	The Identity Server in Novell Access Manager before 3.1 SP1 allows attackers with disabled Active Directory accounts to authenticate using X.509 authentication, which bypasses intended access restric…	CWE-287 Improper Authentication	CVE-2009-4879	2010-05-27 13:00	2010-05-27	Show	GitHub Exploit DB Packet Storm

347080	-	rhinosoft	serv-u	Stack-based buffer overflow in the HTTP server in Rhino Software Serv-U Web Client 9.0.0.5 allows remote attackers to cause a denial of service (server crash) or execute arbitrary code via a long Ses…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2009-4873	2010-05-27 03:30	2010-05-27	Show	GitHub Exploit DB Packet Storm