Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":April 30, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
253161	4.3	警告	オラクル	-	Oracle Sun Product Suite の Sun Convergence コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0893	2010-05-14 18:42	2010-04-13	Show	GitHub Exploit DB Packet Storm

253162	4.9	警告	サン・マイクロシステムズオラクル	-	Oracle Sun Product Suite の Solaris コンポーネントにおける脆弱性	CWE-20 不適切な入力確認	CVE-2010-0453	2010-05-14 18:42	2010-02-3	Show	GitHub Exploit DB Packet Storm

253163	4.9	警告	サン・マイクロシステムズオラクル	-	Oracle Sun Product Suite の Solaris コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0889	2010-05-14 18:41	2010-04-13	Show	GitHub Exploit DB Packet Storm

253164	5.8	警告	オラクル	-	Oracle Sun Product Suite の Sun Management Center コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0891	2010-05-14 18:41	2010-04-13	Show	GitHub Exploit DB Packet Storm

253165	5.8	警告	オラクル	-	Oracle Sun Product Suite の Sun Java System Access Manager コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0894	2010-05-14 18:41	2010-04-13	Show	GitHub Exploit DB Packet Storm

253166	6.8	警告	オラクル	-	Oracle Sun Product Suite の Sun Java System Communications Express コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0885	2010-05-14 18:41	2010-04-13	Show	GitHub Exploit DB Packet Storm

253167	7.1	危険	オラクル	-	Oracle Sun Product Suite の Sun Convergence コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0896	2010-05-14 18:41	2010-04-13	Show	GitHub Exploit DB Packet Storm

253168	7.2	危険	サン・マイクロシステムズオラクル	-	Oracle Sun Product Suite の Solaris コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0882	2010-05-14 18:40	2010-04-13	Show	GitHub Exploit DB Packet Storm

253169	7.5	危険	オラクル	-	Oracle Sun Product Suite の Sun Java System Directory Server コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0897	2010-05-14 18:40	2010-04-13	Show	GitHub Exploit DB Packet Storm

253170	10	危険	オラクル	-	Oracle Sun Product Suite の Sun Ray Server Software コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0888	2010-05-14 18:40	2010-04-13	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:April 30, 2026, 4:58 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
269361	5.3	MEDIUM Local	apache	cordova	Apache Cordova iOS before 4.0.0 might allow attackers to bypass a URL whitelist protection mechanism in an app and load arbitrary resources by leveraging unspecified methods.	CWE-254 CWE-284 7PK - Security Features Improper Access Control	CVE-2015-5207	2024-11-21 11:32	2016-05-10	Show	GitHub Exploit DB Packet Storm

269362	5.9	MEDIUM Network	samba canonical	samba ubuntu_linux	Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 does not properly implement the DCE-RPC layer, which allows remote attackers to perform protocol-downgrade attacks, cause a…	NVD-CWE-noinfo	CVE-2015-5370	2024-11-21 11:32	2016-04-25	Show	GitHub Exploit DB Packet Storm

269363	7.5	HIGH Network	redhat openstack	openstack tripleo_heat_templates	The TripleO Heat templates (tripleo-heat-templates) do not properly order the Identity Service (keystone) before the OpenStack Object Storage (Swift) staticweb middleware in the swiftproxy pipeline w…	CWE-200 Information Exposure	CVE-2015-5271	2024-11-21 11:32	2016-04-16	Show	GitHub Exploit DB Packet Storm

269364	8.1	HIGH Network	apache	camel	Apache Camel 2.6.x through 2.14.x, 2.15.x before 2.15.5, and 2.16.x before 2.16.1, when using (1) camel-jetty or (2) camel-servlet as a consumer in Camel routes, allow remote attackers to execute arb…	CWE-19 Data Processing Errors	CVE-2015-5348	2024-11-21 11:32	2016-04-16	Show	GitHub Exploit DB Packet Storm

269365	6.5	MEDIUM Network	redhat canonical	libvirt ubuntu_linux	The virStorageVolCreateXML API in libvirt 1.2.14 through 1.2.19 allows remote authenticated users with a read-write connection to cause a denial of service (libvirtd crash) by triggering a failed unl…	CWE-284 Improper Access Control	CVE-2015-5247	2024-11-21 11:32	2016-04-15	Show	GitHub Exploit DB Packet Storm

269366	7.6	HIGH Network	apache debian	subversion debian_linux	Integer overflow in util.c in mod_dav_svn in Apache Subversion 1.7.x, 1.8.x before 1.8.15, and 1.9.x before 1.9.3 allows remote authenticated users to cause a denial of service (subversion server cra…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2015-5343	2024-11-21 11:32	2016-04-14	Show	GitHub Exploit DB Packet Storm

269367	6.1	MEDIUM Network	apache	wicket	Cross-site scripting (XSS) vulnerability in the getWindowOpenJavaScript function in org.apache.wicket.extensions.ajax.markup.html.modal.ModalWindow in Apache Wicket 1.5.x before 1.5.15, 6.x before 6.…	CWE-79 Cross-site Scripting	CVE-2015-5347	2024-11-21 11:32	2016-04-13	Show	GitHub Exploit DB Packet Storm

269368	6.5	MEDIUM Network	apache	ranger	The Policy Admin Tool in Apache Ranger before 0.5.1 allows remote authenticated users to bypass intended access restrictions via the REST API.	CWE-264 Permissions, Privileges, and Access Controls	CVE-2015-5167	2024-11-21 11:32	2016-04-12	Show	GitHub Exploit DB Packet Storm

269369	5.5	MEDIUM Local	qemu	qemu	Stack-based buffer overflow in hw/scsi/scsi-bus.c in QEMU, when built with SCSI-device emulation support, allows guest OS users with CAP_SYS_RAWIO permissions to cause a denial of service (instance c…	CWE-787 Out-of-bounds Write	CVE-2015-5158	2024-11-21 11:32	2016-04-12	Show	GitHub Exploit DB Packet Storm

269370	7.8	HIGH Local	apache	ldap_studio directory_studio	The CSV export in Apache LDAP Studio and Apache Directory Studio before 2.0.0-M10 does not properly escape field values, which might allow attackers to execute arbitrary commands by leveraging a craf…	CWE-77 Command Injection	CVE-2015-5349	2024-11-21 11:32	2016-04-12	Show	GitHub Exploit DB Packet Storm