Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 28, 2026, 10 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
250821 10 危険 オラクル - Oracle Fusion Middleware の Oracle WebLogic Server コンポーネントにおける Node Manager の処理に関する脆弱性 CWE-noinfo
情報不足
CVE-2010-3510 2012-03-27 18:42 2011-01-19 Show GitHub Exploit DB Packet Storm
250822 3 注意 オラクル - Oracle Sun Products Suite の Oracle Explorer (Sun Explorer) コンポーネントにおける脆弱性 CWE-noinfo
情報不足
CVE-2010-3506 2012-03-27 18:42 2010-10-13 Show GitHub Exploit DB Packet Storm
250823 4.3 警告 オラクル - Oracle E-Business Suite の Oracle Applications Technology Stack コンポーネントにおける脆弱性 CWE-noinfo
情報不足
CVE-2010-3504 2012-03-27 18:42 2010-10-13 Show GitHub Exploit DB Packet Storm
250824 4 警告 オラクル - Oracle Siebel Suite の Siebel Core コンポーネントにおける脆弱性 CWE-noinfo
情報不足
CVE-2010-3502 2012-03-27 18:42 2010-10-13 Show GitHub Exploit DB Packet Storm
250825 6 警告 オラクル - Oracle Siebel Suite の Siebel Core - Highly Interactive Client コンポーネントにおける脆弱性 CWE-noinfo
情報不足
CVE-2010-3500 2012-03-27 18:42 2010-10-13 Show GitHub Exploit DB Packet Storm
250826 10 危険 TIBCO Software - TIBCO ActiveMatrix Service Grid などで使用される ActiveMatrix Runtime コンポーネントにおける任意のコードを実行される脆弱性 CWE-20
不適切な入力確認
CVE-2010-3491 2012-03-27 18:42 2010-10-19 Show GitHub Exploit DB Packet Storm
250827 6.5 警告 FreePBX - FreePBX の設定インターフェース の System Recordings コンポーネントにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2010-3490 2012-03-27 18:42 2010-09-28 Show GitHub Exploit DB Packet Storm
250828 4.3 警告 digitalworkroom - CMS Digital Workroom の netautor/napro4/home/login2.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-3489 2012-03-27 18:42 2010-09-22 Show GitHub Exploit DB Packet Storm
250829 5 警告 houbysoft - QuickShare におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2010-3488 2012-03-27 18:42 2010-09-22 Show GitHub Exploit DB Packet Storm
250830 5 警告 yellosoft - YelloSoft Pinky におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2010-3487 2012-03-27 18:42 2010-09-22 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
277561 - hotspot_express hotex_billing_manager Cross-site scripting (XSS) vulnerability in cgi-bin/hotspotlogin.cgi in Hotspot Express hotEx Billing Manager 73 allows remote attackers to inject arbitrary web script or HTML via the reply parameter. CWE-79
Cross-site Scripting
CVE-2015-2781 2024-11-21 11:28 2015-04-14 Show GitHub Exploit DB Packet Storm
277562 - mediawiki mediawiki MediaWiki before 1.19.24, 1.2x before 1.23.9, and 1.24.x before 1.24.2, when using HHVM, allows remote attackers to cause a denial of service (CPU and memory consumption) via a large number of nested… CWE-399
 Resource Management Errors
CVE-2015-2942 2024-11-21 11:28 2015-04-13 Show GitHub Exploit DB Packet Storm
277563 - mediawiki mediawiki Cross-site scripting (XSS) vulnerability in MediaWiki before 1.19.24, 1.2x before 1.23.9, and 1.24.x before 1.24.2, when using HHVM, allows remote attackers to inject arbitrary web script or HTML via… CWE-79
Cross-site Scripting
CVE-2015-2941 2024-11-21 11:28 2015-04-13 Show GitHub Exploit DB Packet Storm
277564 - mediawiki checkuser Cross-site request forgery (CSRF) vulnerability in the CheckUser extension for MediaWiki allows remote attackers to hijack the authentication of certain users for requests that retrieve sensitive use… CWE-352
 Origin Validation Error
CVE-2015-2940 2024-11-21 11:28 2015-04-13 Show GitHub Exploit DB Packet Storm
277565 - mediawiki scribunto Cross-site scripting (XSS) vulnerability in the Scribunto extension for MediaWiki allows remote attackers to inject arbitrary web script or HTML via a function name, which is not properly handled in … CWE-79
Cross-site Scripting
CVE-2015-2939 2024-11-21 11:28 2015-04-13 Show GitHub Exploit DB Packet Storm
277566 - mediawiki mediawiki Cross-site scripting (XSS) vulnerability in MediaWiki before 1.19.24, 1.2x before 1.23.9, and 1.24.x before 1.24.2 allows remote attackers to inject arbitrary web script or HTML via a custom JavaScri… CWE-79
Cross-site Scripting
CVE-2015-2938 2024-11-21 11:28 2015-04-13 Show GitHub Exploit DB Packet Storm
277567 - mediawiki mediawiki MediaWiki before 1.19.24, 1.2x before 1.23.9, and 1.24.x before 1.24.2, when using HHVM or Zend PHP, allows remote attackers to cause a denial of service ("quadratic blowup" and memory consumption) v… CWE-399
 Resource Management Errors
CVE-2015-2937 2024-11-21 11:28 2015-04-13 Show GitHub Exploit DB Packet Storm
277568 - mediawiki mediawiki MediaWiki 1.24.x before 1.24.2, when using PBKDF2 for password hashing, allows remote attackers to cause a denial of service (CPU consumption) via a long password. CWE-399
 Resource Management Errors
CVE-2015-2936 2024-11-21 11:28 2015-04-13 Show GitHub Exploit DB Packet Storm
277569 - mediawiki mediawiki MediaWiki before 1.19.24, 1.2x before 1.23.9, and 1.24.x before 1.24.2 allows remote attackers to bypass the SVG filtering and obtain sensitive user information via a mixed case @import in a style el… CWE-200
Information Exposure
CVE-2015-2935 2024-11-21 11:28 2015-04-13 Show GitHub Exploit DB Packet Storm
277570 - mediawiki mediawiki MediaWiki before 1.19.24, 1.2x before 1.23.9, and 1.24.x before 1.24.2 does not properly handle when the Zend interpreter xml_parse function does not expand entities, which allows remote attackers to… CWE-79
Cross-site Scripting
CVE-2015-2934 2024-11-21 11:28 2015-04-13 Show GitHub Exploit DB Packet Storm