Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":April 28, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
253011	4.9	警告	オラクル	-	Oracle Database の Oracle Data Pump コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2009-3411	2010-02-12 12:21	2010-01-12	Show	GitHub Exploit DB Packet Storm

253012	6	警告	オラクル	-	Oracle Database の Application Express Application Builder コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0076	2010-02-12 12:21	2010-01-12	Show	GitHub Exploit DB Packet Storm

253013	9	危険	オラクル	-	Oracle Database の Oracle OLAP コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2009-3415	2010-02-12 12:20	2010-01-12	Show	GitHub Exploit DB Packet Storm

253014	10	危険	オラクル	-	Oracle Database の Listener コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0071	2010-02-12 12:20	2010-01-12	Show	GitHub Exploit DB Packet Storm

253015	5	警告	Pidgin Adium レッドハット	-	Pidgin および Adium の MSN プロトコルプラグインにおけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2010-0013	2010-02-10 13:39	2010-01-8	Show	GitHub Exploit DB Packet Storm

253016	10	危険	アドビシステムズレッドハット	-	Adobe Reader および Acrobat の U3D 実装における任意のコードを実行される脆弱性	CWE-189 数値処理の問題	CVE-2009-3959	2010-02-10 13:39	2010-01-12	Show	GitHub Exploit DB Packet Storm

253017	10	危険	アドビシステムズ	-	Adobe Reader および Acrobat のダウンロードマネージャーにおける任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2009-3958	2010-02-10 13:39	2010-01-12	Show	GitHub Exploit DB Packet Storm

253018	5	警告	アドビシステムズ	-	Adobe Reader および Acrobat におけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2009-3957	2010-02-10 13:39	2010-01-12	Show	GitHub Exploit DB Packet Storm

253019	10	危険	アドビシステムズレッドハット	-	Adobe Reader および Acrobat におけるスクリプトインジェクションの脆弱性に関連した脆弱性	CWE-16 環境設定	CVE-2009-3956	2010-02-10 13:39	2010-01-12	Show	GitHub Exploit DB Packet Storm

253020	10	危険	アドビシステムズレッドハット	-	Adobe Reader および Acrobat における任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2009-3955	2010-02-10 13:38	2010-01-12	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:April 28, 2026, 4:09 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
278181	7.5	HIGH Network	bytemark	symbiosis	Bytemark Symbiosis allows remote attackers to cause a denial of service via a crafted username, which triggers the firewall to blacklist the IP.	NVD-CWE-noinfo	CVE-2014-3979	2024-11-21 11:09	2020-01-28	Show	GitHub Exploit DB Packet Storm

278182	5.3	MEDIUM Network	proxmox	virtual_environment	Proxmox VE prior to 3.2: 'AccessControl.pm' User Enumeration Vulnerability	CWE-203 Information Exposure Through Discrepancy	CVE-2014-4156	2024-11-21 11:09	2020-01-28	Show	GitHub Exploit DB Packet Storm

278183	9.8	CRITICAL Network	apereo debian fedoraproject	.net_cas_client java_cas_client phpcas debian_linux fedora	A URL parameter injection vulnerability was found in the back-channel ticket validation step of the CAS protocol in Jasig Java CAS Client before 3.3.2, .NET CAS Client before 1.0.2, and phpCAS before…	CWE-74 Injection	CVE-2014-4172	2024-11-21 11:09	2020-01-25	Show	GitHub Exploit DB Packet Storm

278184	6.1	MEDIUM Network	bssys	rbs_bs-client	Cross-site scripting (XSS) vulnerability in bsi.dll in Bank Soft Systems (BSS) RBS BS-Client 3.17.9 allows remote attackers to inject arbitrary web script or HTML via the colorstyle parameter.	CWE-79 Cross-site Scripting	CVE-2014-4196	2024-11-21 11:09	2020-01-4	Show	GitHub Exploit DB Packet Storm

278185	6.1	MEDIUM Network	ulli_horlacher	fex	The addto parameter to fup in Frams' Fast File EXchange (F*EX, aka fex) before fex-2014053 allows remote attackers to conduct cross-site scripting (XSS) attacks	CWE-79 Cross-site Scripting	CVE-2014-3875	2024-11-21 11:09	2019-11-28	Show	GitHub Exploit DB Packet Storm

278186	5.5	MEDIUM Local	s48	scheme48	The scheme48-send-definition function in cmuscheme48.el in Scheme 48 allows local users to write to arbitrary files via a symlink attack on /tmp/s48lose.tmp.	CWE-59 Link Following	CVE-2014-4150	2024-11-21 11:09	2018-07-21	Show	GitHub Exploit DB Packet Storm

278187	8.1	HIGH Network	horde	horde_ldap	The Horde_Ldap library before 2.0.6 for Horde allows remote attackers to bypass authentication by leveraging knowledge of the LDAP bind user DN.	CWE-287 Improper Authentication	CVE-2014-3999	2024-11-21 11:09	2018-04-11	Show	GitHub Exploit DB Packet Storm

278188	9.8	CRITICAL Network	opencart	opencart	The Cart::getProducts method in system/library/cart.php in OpenCart 1.5.6.4 and earlier allows remote attackers to conduct server-side request forgery (SSRF) attacks or possibly conduct XML External …	CWE-611 CWE-918 XXE Server-Side Request Forgery (SSRF)	CVE-2014-3990	2024-11-21 11:09	2018-03-21	Show	GitHub Exploit DB Packet Storm

278189	5.9	MEDIUM Network	f5	big-ip_local_traffic_manager big-ip_application_acceleration_manager big-ip_advanced_firewall_manager big-ip_analytics big-ip_access_policy_manager big-ip_application_security_manager<…	SSL virtual servers in F5 BIG-IP systems 10.x before 10.2.4 HF9, 11.x before 11.2.1 HF12, 11.3.0 before HF10, 11.4.0 before HF8, 11.4.1 before HF5, 11.5.0 before HF5, and 11.5.1 before HF5, when used…	CWE-200 Information Exposure	CVE-2014-4024	2024-11-21 11:09	2018-03-20	Show	GitHub Exploit DB Packet Storm

278190	5.3	MEDIUM Network	apexis	apm-j601-ws_firmware	Directory traversal vulnerability in Apexis APM-J601-WS cameras with firmware before 17.35.2.49 allows remote attackers to read arbitrary files via unspecified vectors.	CWE-22 Path Traversal	CVE-2014-3972	2024-11-21 11:09	2018-02-20	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed