Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 3, 2026, noon

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
251451	10	危険	ヒューレット・パッカード	-	Palm Pre WebOS における詳細不明な脆弱性	CWE-noinfo 情報不足	CVE-2009-5071	2012-03-27 18:42	2011-04-19	Show	GitHub Exploit DB Packet Storm

251452	4.3	警告	khalid baheyeldin	-	Drupal 用の Flag Content モジュールにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-5096	2012-03-27 18:42	2009-10-21	Show	GitHub Exploit DB Packet Storm

251453	5	警告	PNG Development Group	-	libpng の pngwutil.c におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2009-5063	2012-03-27 18:42	2011-08-31	Show	GitHub Exploit DB Packet Storm

251454	3.5	注意	IBM	-	IBM Lotus Quickr for Lotus Domino におけるサービス運用妨害 (DoS) 状態となる脆弱性	CWE-399 リソース管理の問題	CVE-2009-5062	2012-03-27 18:42	2011-03-22	Show	GitHub Exploit DB Packet Storm

251455	2.1	注意	IBM	-	IBM Lotus Quickr for Lotus Domino におけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2009-5061	2012-03-27 18:42	2011-03-22	Show	GitHub Exploit DB Packet Storm

251456	3.5	注意	IBM	-	IBM Lotus Quickr for Lotus Domino におけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2009-5060	2012-03-27 18:42	2011-03-22	Show	GitHub Exploit DB Packet Storm

251457	3.5	注意	IBM	-	IBM Lotus Quickr for Lotus Domino におけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2009-5059	2012-03-27 18:42	2011-03-22	Show	GitHub Exploit DB Packet Storm

251458	3.5	注意	IBM	-	IBM Lotus Quickr for Lotus Domino におけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2009-5058	2012-03-27 18:42	2011-03-22	Show	GitHub Exploit DB Packet Storm

251459	5	警告	OTRS プロジェクト	-	OTRS の S/MIME の機能における電子メールメッセージを解読される脆弱性	CWE-310 暗号の問題	CVE-2009-5057	2012-03-27 18:42	2011-03-18	Show	GitHub Exploit DB Packet Storm

251460	2.1	注意	OTRS プロジェクト	-	OTRS におけるアクセス制限を回避される脆弱性	CWE-20 不適切な入力確認	CVE-2009-5056	2012-03-27 18:42	2011-03-18	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 3, 2026, 4:18 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
247131	9.1	CRITICAL Network	zohocorp	manageengine_applications_manager	Incorrect Access Control in CustomFieldsFeedServlet in Zoho ManageEngine Applications Manager Version 13 before build 13740 allows an attacker to delete any file and read certain files on the server …	CWE-20 Improper Input Validation	CVE-2018-11808	2024-11-21 12:44	2018-06-6	Show	GitHub Exploit DB Packet Storm

247132	8.8	HIGH Network	apache	hadoop	Web endpoint authentication check is broken in Apache Hadoop 3.0.0-alpha4, 3.0.0-beta1, and 3.0.0. Authenticated users may impersonate any user even if no proxy user is configured.	CWE-306 Missing Authentication for Critical Function	CVE-2018-11764	2024-11-21 12:43	2020-10-22	Show	GitHub Exploit DB Packet Storm

247133	7.5	HIGH Network	apache	hadoop	In Apache Hadoop versions 3.0.0-alpha2 to 3.0.0, 2.9.0 to 2.9.2, 2.8.0 to 2.8.5, any users can access some servlets without authentication when Kerberos authentication is enabled and SPNEGO through H…	CWE-287 Improper Authentication	CVE-2018-11765	2024-11-21 12:43	2020-10-1	Show	GitHub Exploit DB Packet Storm

247134	5.4	MEDIUM Adjacent	puppet	puppet_server	Previous versions of Puppet Agent didn't verify the peer in the SSL connection prior to downloading the CRL. This issue is resolved in Puppet Agent 6.4.0.	CWE-295 Improper Certificate Validation	CVE-2018-11751	2024-11-21 12:43	2019-12-17	Show	GitHub Exploit DB Packet Storm

247135	7.5	HIGH Network	apache	hadoop	In Apache Hadoop 3.1.0 to 3.1.1, 3.0.0-alpha1 to 3.0.3, 2.9.0 to 2.9.1, and 2.0.0-alpha to 2.8.4, the user/group information can be corrupted across storing in fsimage and reading back from fsimage.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2018-11768	2024-11-21 12:43	2019-10-4	Show	GitHub Exploit DB Packet Storm

247136	9.8	CRITICAL Network	eventum_project	eventum	Controller/ListController.php in Eventum 3.5.0 is vulnerable to Deserialization of Untrusted Data. Fixed in version 3.5.2.	CWE-502 Deserialization of Untrusted Data	CVE-2018-11569	2024-11-21 12:43	2019-09-6	Show	GitHub Exploit DB Packet Storm

247137	8.1	HIGH Network	cloudera	cloudera_manager	Cloudera Manager through 5.15 has Incorrect Access Control.	CWE-284 Improper Access Control	CVE-2018-11744	2024-11-21 12:43	2019-07-11	Show	GitHub Exploit DB Packet Storm

247138	6.1	MEDIUM Network	e107	e107	In e107 v2.1.7, output without filtering results in XSS.	CWE-79 Cross-site Scripting	CVE-2018-11734	2024-11-21 12:43	2019-07-11	Show	GitHub Exploit DB Packet Storm

247139	9.8	CRITICAL Network	fasterxml redhat oracle	jackson-databind openshift_container_platform retail_customer_management_and_segmentation_foundation clusterware global_lifecycle_management_opatch utilities_advanced_spatial_and_opera…	An issue was discovered in FasterXML jackson-databind 2.0.0 through 2.9.5. Use of Jackson default typing along with a gadget class from iBatis allows exfiltration of content. Fixed in 2.7.9.4, 2.8.11…	CWE-502 Deserialization of Untrusted Data	CVE-2018-11307	2024-11-21 12:43	2019-07-10	Show	GitHub Exploit DB Packet Storm

247140	4.6	MEDIUM Network	otrs debian	otrs debian_linux	An issue was discovered in Open Ticket Request System (OTRS) 6.0.x through 6.0.7. A carefully constructed email could be used to inject and execute arbitrary stylesheet or JavaScript code in a logged…	NVD-CWE-noinfo	CVE-2018-11563	2024-11-21 12:43	2019-07-8	Show	GitHub Exploit DB Packet Storm