Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 3, 2026, 2 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
252571	4.9	警告	オラクル	-	Oracle Solaris および OpenSolaris における Kernel/X86 の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2010-3517	2010-11-2 15:51	2010-10-12	Show	GitHub Exploit DB Packet Storm

252572	5.8	警告	オラクル	-	Oracle Sun Products Suite の Oracle iPlanet Web Server コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-3545	2010-11-2 15:51	2010-10-12	Show	GitHub Exploit DB Packet Storm

252573	6.3	警告	オラクル	-	Oracle Solaris における su の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2010-3503	2010-11-2 15:51	2010-10-12	Show	GitHub Exploit DB Packet Storm

252574	9.3	危険	アップルサイバートラスト株式会社ターボリナックス FreeType Project オラクルレッドハット	-	FreeType 2 における CFF フォントの処理に脆弱性	CWE-119 バッファエラー	CVE-2010-1797	2010-11-2 15:24	2010-08-9	Show	GitHub Exploit DB Packet Storm

252575	6.6	警告	オラクル	-	Oracle Solaris における Live Upgrade の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2010-3507	2010-11-1 15:41	2010-10-12	Show	GitHub Exploit DB Packet Storm

252576	10	危険	オラクル	-	Oracle Solaris における Scheduler の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2010-3509	2010-11-1 15:41	2010-10-12	Show	GitHub Exploit DB Packet Storm

252577	4.3	警告	オラクル	-	Oracle Fusion Middleware の Forms コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-2396	2010-11-1 15:41	2010-10-12	Show	GitHub Exploit DB Packet Storm

252578	4.3	警告	オラクル	-	Oracle Fusion Middleware の Cabo/UIX コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-2410	2010-11-1 15:41	2010-10-12	Show	GitHub Exploit DB Packet Storm

252579	4.3	警告	オラクル	-	Oracle Fusion Middleware の Cabo/UIX コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-2409	2010-11-1 15:40	2010-10-12	Show	GitHub Exploit DB Packet Storm

252580	4.3	警告	オラクル	-	Oracle Fusion Middleware の Cabo/UIX コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-2395	2010-11-1 15:39	2010-10-12	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 3, 2026, 4:06 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
256051	5.4	MEDIUM Network	quickappscms	quickapps_cms	QuickApps CMS version 2.0.0 is vulnerable to Stored Cross-site Scripting in the user's real name field resulting in denial of service and performing unauthorised actions with an administrator user's …	CWE-79 Cross-site Scripting	CVE-2017-1000495	2024-11-21 12:04	2018-01-3	Show	GitHub Exploit DB Packet Storm

256052	7.8	HIGH Local	miniupnp_project	miniupnpd	Uninitialized stack variable vulnerability in NameValueParserEndElt (upnpreplyparse.c) in miniupnpd < 2.0 allows an attacker to cause Denial of Service (Segmentation fault and Memory Corruption) or p…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2017-1000494	2024-11-21 12:04	2018-01-3	Show	GitHub Exploit DB Packet Storm

256053	9.8	CRITICAL Network	rocket.chat	rocket.chat	Rocket.Chat Server version 0.59 and prior is vulnerable to a NoSQL injection leading to administrator account takeover	CWE-74 Injection	CVE-2017-1000493	2024-11-21 12:04	2018-01-3	Show	GitHub Exploit DB Packet Storm

256054	6.1	MEDIUM Network	leanote	desktop	Leanote-desktop version v2.5 is vulnerable to a XSS which leads to code execution due to enabled node integration	CWE-79 Cross-site Scripting	CVE-2017-1000492	2024-11-21 12:04	2018-01-3	Show	GitHub Exploit DB Packet Storm

256055	6.1	MEDIUM Network	shiba_project	shiba	Shiba markdown live preview app version 1.1.0 is vulnerable to XSS which leads to code execution due to enabled node integration.	CWE-79 Cross-site Scripting	CVE-2017-1000491	2024-11-21 12:04	2018-01-3	Show	GitHub Exploit DB Packet Storm

256056	5.4	MEDIUM Network	invoiceninja	invoice_ninja	Invoice Ninja version 3.8.1 is vulnerable to stored cross-site scripting vulnerability, within the invoice creation page, which can result in disruption of service and execution of javascript code.	CWE-79 Cross-site Scripting	CVE-2017-1000466	2024-11-21 12:04	2018-01-3	Show	GitHub Exploit DB Packet Storm

256057	5.4	MEDIUM Network	leafpub	leafpub	Leafpub version 1.2.0-beta6 is vulnerable to stored cross-site scripting vulnerability, within the edit blog post page, which can result in disruption of service and execution of javascript code.	CWE-79 Cross-site Scripting	CVE-2017-1000463	2024-11-21 12:04	2018-01-3	Show	GitHub Exploit DB Packet Storm

256058	6.1	MEDIUM Network	leanote	leanote	Leanote version <= 2.5 is vulnerable to XSS due to not sanitized input in markdown notes	CWE-79 Cross-site Scripting	CVE-2017-1000459	2024-11-21 12:04	2018-01-3	Show	GitHub Exploit DB Packet Storm

256059	8.3	HIGH Network	openmicroscopy	omero	In OMERO 5.3.3 or earlier a user could create an OriginalFile and adjust its path such that it now points to another user's file on the underlying filesystem, then manipulate the user's data.	NVD-CWE-noinfo	CVE-2017-1000438	2024-11-21 12:04	2018-01-3	Show	GitHub Exploit DB Packet Storm

256060	9.8	CRITICAL Network	creolabs	gravity	Creolabs Gravity 1.0 contains a stack based buffer overflow in the operator_string_add function, resulting in remote code execution.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2017-1000437	2024-11-21 12:04	2018-01-3	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed