Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 1, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
251131 3.5 注意 オラクル - Oracle Fusion Middleware の BPEL Console コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-3581 2012-03-27 18:42 2010-10-14 Show GitHub Exploit DB Packet Storm
251132 4.6 警告 オラクル - Oracle OpenSolaris における Kernel/File System の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2010-3580 2012-03-27 18:42 2010-10-14 Show GitHub Exploit DB Packet Storm
251133 6.4 警告 オラクル - Oracle Sun Products Suite の Sun Convergence 1 コンポーネントにおける Webmail の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2010-3579 2012-03-27 18:42 2010-10-14 Show GitHub Exploit DB Packet Storm
251134 9 危険 オラクル - Oracle OpenSolaris における Depot サーバの処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2010-3578 2012-03-27 18:42 2010-10-14 Show GitHub Exploit DB Packet Storm
251135 6.4 警告 オラクル - Oracle OpenSolaris における Kernel/CIFS の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2010-3577 2012-03-27 18:42 2010-10-14 Show GitHub Exploit DB Packet Storm
251136 6.4 警告 オラクル - Oracle Sun Products Suite の Oracle Communications Messaging Server コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-3575 2012-03-27 18:42 2010-10-14 Show GitHub Exploit DB Packet Storm
251137 5.5 警告 オラクル - Oracle PeopleSoft および JDEdwards Suite の PeopleSoft FMS ESA - EX コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-3547 2012-03-27 18:42 2010-10-14 Show GitHub Exploit DB Packet Storm
251138 5.8 警告 オラクル - Oracle Sun Products Suite の Sun Java System Identity Manager コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-3546 2012-03-27 18:42 2010-10-14 Show GitHub Exploit DB Packet Storm
251139 5.5 警告 オラクル - Oracle PeopleSoft および JDEdwards Suite の PeopleSoft Enterprise FMS - GL コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-3539 2012-03-27 18:42 2010-10-14 Show GitHub Exploit DB Packet Storm
251140 5.5 警告 オラクル - Oracle PeopleSoft および JDEdwards Suite の PeopleSoft Enterprise FMS - GL コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-3538 2012-03-27 18:42 2010-10-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 1, 2026, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
247901 10.0 CRITICAL
Network 		freecol freecol FreeCol version <= nightly-2018-08-22 contains a XML External Entity (XXE) vulnerability in FreeColXMLReader parser that can result in Disclosure of confidential data, denial of service, SSRF, port s… CWE-611
XXE 		CVE-2018-1000825 2024-11-21 12:40 2018-12-21 Show GitHub Exploit DB Packet Storm
247902 9.8 CRITICAL
Network 		megamek megamek MegaMek version < v0.45.1 contains a Other/Unknown vulnerability in Object Stream Connection that can result in Disclosure of confidential data, denial of service, SSRF, remote code execution. CWE-502
 Deserialization of Untrusted Data 		CVE-2018-1000824 2024-11-21 12:40 2018-12-21 Show GitHub Exploit DB Packet Storm
247903 10.0 CRITICAL
Network 		exist-db exist exist version <= 5.0.0-RC4 contains a XML External Entity (XXE) vulnerability in XML Parser for REST Server that can result in Disclosure of confidential data, denial of service, SSRF, port scanning. CWE-611
XXE 		CVE-2018-1000823 2024-11-21 12:40 2018-12-21 Show GitHub Exploit DB Packet Storm
247904 10.0 CRITICAL
Network 		codelibs fess codelibs fess version before commit faa265b contains a XML External Entity (XXE) vulnerability in GSA XML file parser that can result in Disclosure of confidential data, denial of service, SSRF, port… CWE-611
XXE 		CVE-2018-1000822 2024-11-21 12:40 2018-12-21 Show GitHub Exploit DB Packet Storm
247905 10.0 CRITICAL
Network 		micromathematics_project micromathematics MicroMathematics version before commit 5c05ac8 contains a XML External Entity (XXE) vulnerability in SMathStudio files that can result in Disclosure of confidential data, denial of service, SSRF, por… CWE-611
XXE 		CVE-2018-1000821 2024-11-21 12:40 2018-12-21 Show GitHub Exploit DB Packet Storm
247906 10.0 CRITICAL
Network 		neo4j awesome_procedures_on_cyper neo4j-contrib neo4j-apoc-procedures version before commit 45bc09c contains a XML External Entity (XXE) vulnerability in XML Parser that can result in Disclosure of confidential data, denial of servic… CWE-611
XXE 		CVE-2018-1000820 2024-11-21 12:40 2018-12-21 Show GitHub Exploit DB Packet Storm
247907 5.4 MEDIUM
Network 		grafana grafana Grafana version confirmed for 5.2.4 and 5.3.0 contains a Cross Site Scripting (XSS) vulnerability in Influxdb and Graphite query editor that can result in Running arbitrary js code in victims browser… CWE-79
Cross-site Scripting 		CVE-2018-1000816 2024-11-21 12:40 2018-12-21 Show GitHub Exploit DB Packet Storm
247908 4.3 MEDIUM
Network 		brave brave Brave Software Inc. Brave version version 0.22.810 to 0.24.0 contains a Other/Unknown vulnerability in function ContentSettingsObserver::AllowScript() in content_settings_observer.cc that can result … CWE-20
 Improper Input Validation  		CVE-2018-1000815 2024-11-21 12:40 2018-12-21 Show GitHub Exploit DB Packet Storm
247909 7.5 HIGH
Network 		asset_pipeline_project asset-pipeline Asset Pipeline Grails Plugin Asset-pipeline plugin version Prior to 2.14.1.1, 2.15.1 and 3.0.6 contains a Incorrect Access Control vulnerability in Applications deployed in Jetty that can result in D… CWE-22
Path Traversal 		CVE-2018-1000817 2024-11-21 12:40 2018-12-21 Show GitHub Exploit DB Packet Storm
247910 6.5 MEDIUM
Network 		aiohttp-session_project aiohttp-session aio-libs aiohttp-session version 2.6.0 and earlier contains a Other/Unknown vulnerability in EncryptedCookieStorage and NaClCookieStorage that can result in Non-expiring sessions / Infinite lifespan.… CWE-613
 Insufficient Session Expiration 		CVE-2018-1000814 2024-11-21 12:40 2018-12-21 Show GitHub Exploit DB Packet Storm