Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 7, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
253501	3	注意	オラクル	-	Oracle PeopleSoft and JDEdwards Suite の PeopleSoft Enterprise CRM コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-2378	2010-08-6 18:29	2010-07-13	Show	GitHub Exploit DB Packet Storm

253502	4	警告	オラクル	-	Oracle PeopleSoft and JDEdwards Suite の PeopleSoft Enterprise PeopleTools コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-2377	2010-08-6 18:29	2010-07-13	Show	GitHub Exploit DB Packet Storm

253503	4	警告	オラクル	-	Oracle PeopleSoft and JDEdwards Suite の PeopleSoft Enterprise HCM - Time & Labor コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-2379	2010-08-6 18:29	2010-07-13	Show	GitHub Exploit DB Packet Storm

253504	4	警告	オラクル	-	Oracle PeopleSoft and JDEdwards Suite の PeopleSoft Enterprise HCM コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-2398	2010-08-6 18:28	2010-07-13	Show	GitHub Exploit DB Packet Storm

253505	4.3	警告	オラクル	-	Oracle PeopleSoft and JDEdwards Suite の PeopleSoft Enterprise FSCM コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-2380	2010-08-6 18:28	2010-07-13	Show	GitHub Exploit DB Packet Storm

253506	5.5	警告	オラクル	-	Oracle PeopleSoft and JDEdwards Suite の PeopleSoft Enterprise PeopleTools コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-2402	2010-08-6 18:28	2010-07-13	Show	GitHub Exploit DB Packet Storm

253507	5.5	警告	オラクル	-	Oracle PeopleSoft and JDEdwards Suite の PeopleSoft Enterprise HCM - eProfile Mgr コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-2401	2010-08-6 18:28	2010-07-13	Show	GitHub Exploit DB Packet Storm

253508	1.9	注意	オラクル	-	Oracle Supply Chain Products Suite の Oracle Transportation Management コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-2371	2010-08-6 18:27	2010-07-13	Show	GitHub Exploit DB Packet Storm

253509	4.3	警告	オラクル	-	Oracle Supply Chain Products Suite の Oracle Transportation Management コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-2372	2010-08-6 18:27	2010-07-13	Show	GitHub Exploit DB Packet Storm

253510	10	危険	アップルサイバートラスト株式会社サン・マイクロシステムズレッドハット	-	複数の Oracle 製品の New Java Plug-in コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0887	2010-08-5 17:16	2010-04-15	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 7, 2026, 4:22 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
281831	-	cisco	security_manager	CRLF injection vulnerability in the web framework in Cisco Security Manager 4.2 and earlier allows remote attackers to inject arbitrary HTTP headers and conduct redirection attacks via a crafted URL,…	CWE-20 Improper Input Validation	CVE-2014-2138	2024-11-21 11:05	2014-04-2	Show	GitHub Exploit DB Packet Storm

281832	-	cisco	web_security_appliance web_security_virtual_appliance	CRLF injection vulnerability in the web framework in Cisco Web Security Appliance (WSA) 7.7 and earlier allows remote attackers to inject arbitrary HTTP headers and conduct redirection attacks via a …	CWE-20 Improper Input Validation	CVE-2014-2137	2024-11-21 11:05	2014-04-2	Show	GitHub Exploit DB Packet Storm

281833	-	cisco	unity_connection	Cross-site scripting (XSS) vulnerability in the Web Inbox in Cisco Unity Connection 8.6(2a)SU3 and earlier allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter,…	CWE-79 Cross-site Scripting	CVE-2014-2125	2024-11-21 11:05	2014-04-2	Show	GitHub Exploit DB Packet Storm

281834	-	pearson	esis_enterprise_student_information_system	Cross-site scripting (XSS) vulnerability in aal/loginverification.aspx in Pearson eSIS Enterprise Student Information System allows remote attackers to inject arbitrary web script or HTML via unspeci…	CWE-79 Cross-site Scripting	CVE-2014-1942	2024-11-21 11:05	2014-04-2	Show	GitHub Exploit DB Packet Storm

281835	-	posh_project	posh	The remember me feature in portal/scr_authentif.php in POSH (aka Posh portal or Portaneo) 3.0, 3.2.1, 3.3.0, and earlier stores the username and MD5 digest of the password in cleartext in a cookie, w…	CWE-255 Credentials Management	CVE-2014-2212	2024-11-21 11:05	2014-04-2	Show	GitHub Exploit DB Packet Storm

281836	-	openstack	keystone	The memcache token backend in OpenStack Identity (Keystone) 2013.1 through 2.013.1.4, 2013.2 through 2013.2.2, and icehouse before icehouse-3, when issuing a trust token with impersonation enabled, d…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2014-2237	2024-11-21 11:05	2014-04-1	Show	GitHub Exploit DB Packet Storm

281837	-	xen	xen	The (1) do_send and (2) do_recv functions in io.c in libvchan in Xen 4.2.x, 4.3.x, and 4.4-RC series allows local guests to cause a denial of service or possibly gain privileges via crafted xenstore …	CWE-20 Improper Input Validation	CVE-2014-1896	2024-11-21 11:05	2014-04-1	Show	GitHub Exploit DB Packet Storm

281838	-	xen	xen	Off-by-one error in the flask_security_avc_cachestats function in xsm/flask/flask_op.c in Xen 4.2.x and 4.3.x, when the maximum number of physical CPUs are in use, allows local users to cause a denia…	CWE-189 Numeric Errors	CVE-2014-1895	2024-11-21 11:05	2014-04-1	Show	GitHub Exploit DB Packet Storm

281839	-	xen	xen	Multiple integer overflows in unspecified suboperations in the flask hypercall in Xen 3.2.x and earlier, when XSM is enabled, allow local users to cause a denial of service (processor fault) via unsp…	CWE-189 Numeric Errors	CVE-2014-1894	2024-11-21 11:05	2014-04-1	Show	GitHub Exploit DB Packet Storm

281840	-	xen	xen	Multiple integer overflows in the (1) FLASK_GETBOOL and (2) FLASK_SETBOOL suboperations in the flask hypercall in Xen 4.1.x, 3.3.x, 3.2.x, and earlier, when XSM is enabled, allow local users to cause…	CWE-189 Numeric Errors	CVE-2014-1893	2024-11-21 11:05	2014-04-1	Show	GitHub Exploit DB Packet Storm