Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 1, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
253181 4.3 警告 オラクル - Oracle Industry Product Suite の Retail - Oracle Retail Markdown Optimization コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-0862 2010-05-13 15:13 2010-04-13 Show GitHub Exploit DB Packet Storm
253182 4.3 警告 オラクル - Oracle Industry Product Suite の Life Sciences - Oracle Thesaurus Management System コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-0875 2010-05-13 15:12 2010-04-13 Show GitHub Exploit DB Packet Storm
253183 4.3 警告 オラクル - Oracle Industry Product Suite の Life Sciences - Oracle Clinical Remote Data Capture Option コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-0876 2010-05-13 15:12 2010-04-13 Show GitHub Exploit DB Packet Storm
253184 4.3 警告 オラクル - Oracle Industry Product Suite の Communications - Oracle Communications Unified Inventory Management コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-0874 2010-05-13 15:12 2010-04-13 Show GitHub Exploit DB Packet Storm
253185 4 警告 オラクル - 複数の Oracle 製品の PeopleTools コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-0879 2010-05-13 15:12 2010-04-13 Show GitHub Exploit DB Packet Storm
253186 4 警告 オラクル - 複数の Oracle 製品の PeopleTools コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-0878 2010-05-13 15:11 2010-04-13 Show GitHub Exploit DB Packet Storm
253187 5 警告 オラクル - 複数の Oracle 製品の PeopleTools コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-0877 2010-05-13 15:11 2010-04-13 Show GitHub Exploit DB Packet Storm
253188 4 警告 オラクル - 複数の Oracle 製品の PeopleTools コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-0880 2010-05-13 15:11 2010-04-13 Show GitHub Exploit DB Packet Storm
253189 3.5 注意 オラクル - Oracle E-Business Suite の Oracle Workflow Cartridge コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-0857 2010-05-13 15:10 2010-04-13 Show GitHub Exploit DB Packet Storm
253190 3.5 注意 オラクル - Oracle E-Business Suite の E-Business Intelligence コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-0858 2010-05-13 15:10 2010-04-13 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 1, 2026, 4:54 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
297501 9.1 CRITICAL
Network 		joomla joomla\! Joomla! 1.6.0 is vulnerable to SQL Injection via the filter_order and filer_order_Dir parameters. CWE-89
SQL Injection 		CVE-2011-1151 2024-11-21 10:25 2020-02-6 Show GitHub Exploit DB Packet Storm
297502 6.1 MEDIUM
Network 		bbpress bbpress bbPress through 1.0.2 has XSS in /bb-login.php url via the re parameter. CWE-79
Cross-site Scripting 		CVE-2011-1150 2024-11-21 10:25 2020-02-6 Show GitHub Exploit DB Packet Storm
297503 6.1 MEDIUM
Network 		phpshop phpshop PHPShop through 0.8.1 has XSS. CWE-79
Cross-site Scripting 		CVE-2011-1069 2024-11-21 10:25 2020-02-6 Show GitHub Exploit DB Packet Storm
297504 6.1 MEDIUM
Network 		vanillaforums vanilla Vanilla Forums 2.0.17.1 through 2.0.17.5 has XSS in /vanilla/index.php via the p parameter. CWE-79
Cross-site Scripting 		CVE-2011-1009 2024-11-21 10:25 2020-02-6 Show GitHub Exploit DB Packet Storm
297505 9.8 CRITICAL
Network 		smarty
debian 		smarty
debian_linux 		The $smarty.template variable in Smarty3 allows attackers to possibly execute arbitrary PHP code via the sysplugins/smarty_internal_compile_private_special_variable.php file. CWE-20
 Improper Input Validation  		CVE-2011-1028 2024-11-21 10:25 2019-11-21 Show GitHub Exploit DB Packet Storm
297506 7.8 HIGH
Local 		unixodbc
debian
opensuse
redhat 		unixodbc
debian_linux
opensuse
enterprise_linux 		The SQLDriverConnect() function in unixODBC before 2.2.14p2 have a possible buffer overflow condition when specifying a large value for SAVEFILE parameter in the connection string. CWE-120
Classic Buffer Overflow 		CVE-2011-1145 2024-11-21 10:25 2019-11-14 Show GitHub Exploit DB Packet Storm
297507 4.7 MEDIUM
Local 		tesseract_project
debian 		tesseract
debian_linux 		In tesseract 2.03 and 2.04, an attacker can rewrite an arbitrary user file by guessing the PID and creating a link to the user's file. CWE-59
Link Following 		CVE-2011-1136 2024-11-21 10:25 2019-11-14 Show GitHub Exploit DB Packet Storm
297508 7.8 HIGH
Local 		v86d_project
debian 		v86d
debian_linux 		v86d before 0.1.10 do not verify if received netlink messages are sent by the kernel. This could allow unprivileged users to manipulate the video mode and potentially other consequences. CWE-863
 Incorrect Authorization 		CVE-2011-1070 2024-11-21 10:25 2019-11-14 Show GitHub Exploit DB Packet Storm
297509 6.1 MEDIUM
Network 		s9y serendipity Cross-Site Scripting (XSS) in Xinha, as included in the Serendipity package before 1.5.5, allows remote attackers to execute arbitrary code in plugins/ExtendedFileManager/manager.php and plugins/Imag… CWE-79
Cross-site Scripting 		CVE-2011-1135 2024-11-21 10:25 2019-11-6 Show GitHub Exploit DB Packet Storm
297510 9.8 CRITICAL
Network 		s9y serendipity Cross-Site Scripting (XSS) in Xinha, as included in the Serendipity package before 1.5.5, allows remote attackers to execute arbitrary code in the image manager. CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2011-1134 2024-11-21 10:25 2019-11-6 Show GitHub Exploit DB Packet Storm