Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":April 30, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
253161	4.3	警告	オラクル	-	Oracle Sun Product Suite の Sun Convergence コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0893	2010-05-14 18:42	2010-04-13	Show	GitHub Exploit DB Packet Storm

253162	4.9	警告	サン・マイクロシステムズオラクル	-	Oracle Sun Product Suite の Solaris コンポーネントにおける脆弱性	CWE-20 不適切な入力確認	CVE-2010-0453	2010-05-14 18:42	2010-02-3	Show	GitHub Exploit DB Packet Storm

253163	4.9	警告	サン・マイクロシステムズオラクル	-	Oracle Sun Product Suite の Solaris コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0889	2010-05-14 18:41	2010-04-13	Show	GitHub Exploit DB Packet Storm

253164	5.8	警告	オラクル	-	Oracle Sun Product Suite の Sun Management Center コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0891	2010-05-14 18:41	2010-04-13	Show	GitHub Exploit DB Packet Storm

253165	5.8	警告	オラクル	-	Oracle Sun Product Suite の Sun Java System Access Manager コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0894	2010-05-14 18:41	2010-04-13	Show	GitHub Exploit DB Packet Storm

253166	6.8	警告	オラクル	-	Oracle Sun Product Suite の Sun Java System Communications Express コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0885	2010-05-14 18:41	2010-04-13	Show	GitHub Exploit DB Packet Storm

253167	7.1	危険	オラクル	-	Oracle Sun Product Suite の Sun Convergence コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0896	2010-05-14 18:41	2010-04-13	Show	GitHub Exploit DB Packet Storm

253168	7.2	危険	サン・マイクロシステムズオラクル	-	Oracle Sun Product Suite の Solaris コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0882	2010-05-14 18:40	2010-04-13	Show	GitHub Exploit DB Packet Storm

253169	7.5	危険	オラクル	-	Oracle Sun Product Suite の Sun Java System Directory Server コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0897	2010-05-14 18:40	2010-04-13	Show	GitHub Exploit DB Packet Storm

253170	10	危険	オラクル	-	Oracle Sun Product Suite の Sun Ray Server Software コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0888	2010-05-14 18:40	2010-04-13	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 1, 2026, 4:54 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
272081	5.5	MEDIUM Local	redhat	automatic_bug_reporting_tool	The event scripts in Automatic Bug Reporting Tool (ABRT) uses world-readable permission on a copy of sosreport file in problem directories, which allows local users to obtain sensitive information fr…	CWE-200 Information Exposure	CVE-2015-1870	2024-11-21 11:26	2017-06-27	Show	GitHub Exploit DB Packet Storm

272082	8.8	HIGH Network	zend	zend_framework	Cross-site request forgery (CSRF) vulnerability in Zend/Validator/Csrf in Zend Framework 2.3.x before 2.3.6 via null or malformed token identifiers.	CWE-352 Origin Validation Error	CVE-2015-1786	2024-11-21 11:26	2017-06-9	Show	GitHub Exploit DB Packet Storm

272083	6.5	MEDIUM Network	pivotal_software cloudfoundry	cloud_foundry_elastic_runtime cf-release	A path traversal vulnerability was identified in the Cloud Foundry component Cloud Controller that affects cf-release versions prior to v208 and Pivotal Cloud Foundry Elastic Runtime versions prior t…	CWE-22 Path Traversal	CVE-2015-1834	2024-11-21 11:26	2017-05-26	Show	GitHub Exploit DB Packet Storm

272084	5.3	MEDIUM Local	saltstack fedoraproject	salt fedora	modules/chef.py in SaltStack before 2014.7.4 does not properly handle files in /tmp.	CWE-19 Data Processing Errors	CVE-2015-1839	2024-11-21 11:26	2017-04-13	Show	GitHub Exploit DB Packet Storm

272085	5.3	MEDIUM Local	saltstack fedoraproject	salt fedora	modules/serverdensity_device.py in SaltStack before 2014.7.4 does not properly handle files in /tmp.	CWE-19 Data Processing Errors	CVE-2015-1838	2024-11-21 11:26	2017-04-13	Show	GitHub Exploit DB Packet Storm

272086	5.5	MEDIUM Local	ibm	security_directory_server tivoli_directory_server	IBM Security Directory Server could allow an authenticated user to execute commands into the web administration tool that would cause the tool to crash.	CWE-284 Improper Access Control	CVE-2015-1976	2024-11-21 11:26	2017-02-9	Show	GitHub Exploit DB Packet Storm

272087	8.8	HIGH Network	roundcube	webmail	Multiple buffer overflows in the DBMail driver in the Password plugin in Roundcube before 1.1.0 allow remote attackers to have unspecified impact via the (1) password or (2) username.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2015-2181	2024-11-21 11:26	2017-01-31	Show	GitHub Exploit DB Packet Storm

272088	8.8	HIGH Network	roundcube	webmail	The DBMail driver in the Password plugin in Roundcube before 1.1.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the password.	CWE-74 Injection	CVE-2015-2180	2024-11-21 11:26	2017-01-31	Show	GitHub Exploit DB Packet Storm

272089	7.5	HIGH Network	fedoraproject eclipse	fedora jetty	The exception handling code in Eclipse Jetty before 9.2.9.v20150224 allows remote attackers to obtain sensitive information from process memory via illegal characters in an HTTP header, aka JetLeak.	CWE-200 Information Exposure	CVE-2015-2080	2024-11-21 11:26	2016-10-7	Show	GitHub Exploit DB Packet Storm

272090	9.1	CRITICAL Network	apache	derby	XML external entity (XXE) vulnerability in the SqlXmlUtil code in Apache Derby before 10.12.1.1, when a Java Security Manager is not in place, allows context-dependent attackers to read arbitrary fil…	CWE-399 CWE-611 Resource Management Errors XXE	CVE-2015-1832	2024-11-21 11:26	2016-10-4	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed