Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 16, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
254401 3.6 注意 オラクル - Oracle Database Server の Core RDBMS コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-2391 2010-11-1 15:37 2010-10-12 Show GitHub Exploit DB Packet Storm
254402 4.3 警告 オラクル - Oracle Database Server の XDK コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-2407 2010-11-1 15:37 2010-10-12 Show GitHub Exploit DB Packet Storm
254403 6.8 警告 Vim - GVim における DLL 読み込みに関する脆弱性 CWE-Other
その他 		CVE-2010-3914 2010-11-1 12:00 2010-11-1 Show GitHub Exploit DB Packet Storm
254404 9.3 危険 オラクル - Oracle Siebel Option Pack for IE の ActiveX コントロールのメモリ初期化処理に脆弱性 CWE-94
コード・インジェクション 		CVE-2009-3737 2010-10-29 16:43 2010-08-9 Show GitHub Exploit DB Packet Storm
254405 4.6 警告 オラクル - Oracle Database Server の Job Queue コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-2411 2010-10-29 16:35 2010-10-12 Show GitHub Exploit DB Packet Storm
254406 4.9 警告 オラクル - Oracle Database Server の Change Data Capture コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-2415 2010-10-29 16:34 2010-10-12 Show GitHub Exploit DB Packet Storm
254407 5.5 警告 オラクル - Oracle Database Server の OLAP コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-2412 2010-10-29 16:34 2010-10-12 Show GitHub Exploit DB Packet Storm
254408 6.5 警告 オラクル - Oracle Database Server の Java Virtual Machine コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-2419 2010-10-29 16:34 2010-10-12 Show GitHub Exploit DB Packet Storm
254409 7.5 危険 オラクル - 複数の Oracle 製品の Database Control コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-2390 2010-10-29 16:33 2010-10-12 Show GitHub Exploit DB Packet Storm
254410 7.5 危険 マイクロソフト - Microsoft Windows Server の Microsoft Cluster Service 内にあるユーザインターフェイスにおけるディスク上のデータを読まれるまたは編集される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-3223 2010-10-29 16:32 2010-10-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 16, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
274791 - redhat libuser libuser before 0.56.13-8 and 0.60 before 0.60-7, as used in the userhelper program in the usermode package, directly modifies /etc/passwd, which allows local users to cause a denial of service (incon… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2015-3246 2024-11-21 11:28 2015-08-11 Show GitHub Exploit DB Packet Storm
274792 - redhat libuser Incomplete blacklist vulnerability in the chfn function in libuser before 0.56.13-8 and 0.60 before 0.60-7, as used in the userhelper program in the usermode package, allows local users to cause a de… CWE-20
 Improper Input Validation  		CVE-2015-3245 2024-11-21 11:28 2015-08-11 Show GitHub Exploit DB Packet Storm
274793 - artifex afpl_ghostscript Integer overflow in the gs_heap_alloc_bytes function in base/gsmalloc.c in Ghostscript 9.15 and earlier allows remote attackers to cause a denial of service (crash) via a crafted Postscript (ps) file… CWE-189
Numeric Errors 		CVE-2015-3228 2024-11-21 11:28 2015-08-11 Show GitHub Exploit DB Packet Storm
274794 - yodobashi yodobashi The Yodobashi application 1.2.1.0 and earlier for Android allows remote attackers to execute arbitrary Java methods, and consequently obtain sensitive information or execute OS commands, via a crafte… CWE-200
CWE-78
Information Exposure
OS Command  		CVE-2015-2980 2024-11-21 11:28 2015-08-8 Show GitHub Exploit DB Packet Storm
274795 - sierrawireless aleos Sierra Wireless ALEOS before 4.4.2 on AirLink ES, GX, and LS devices has hardcoded root accounts, which makes it easier for remote attackers to obtain administrative access via a (1) SSH or (2) TELNE… CWE-200
Information Exposure 		CVE-2015-2897 2024-11-21 11:28 2015-08-8 Show GitHub Exploit DB Packet Storm
274796 6.0 MEDIUM
Local 		dell bios The BIOS implementation on Dell Latitude, OptiPlex, Precision Mobile Workstation, and Precision Workstation Client Solutions (CS) devices with model-dependent firmware before A21 does not enforce a B… NVD-CWE-noinfo
CVE-2015-2890 2024-11-21 11:28 2015-08-1 Show GitHub Exploit DB Packet Storm
274797 - chiyu bf-660c Chiyu BF-660C fingerprint access-control devices allow remote attackers to bypass authentication and (1) read or (2) modify communication configuration settings via a request to net.htm, a different … CWE-264
Permissions, Privileges, and Access Controls 		CVE-2015-2871 2024-11-21 11:28 2015-08-1 Show GitHub Exploit DB Packet Storm
274798 - chiyutw bf-630
bf-630w
bf-660c 		Cross-site scripting (XSS) vulnerability on Chiyu BF-630, BF-630W, and BF-660C fingerprint access-control devices allows remote attackers to inject arbitrary web script or HTML via a SCRIPT element. CWE-79
Cross-site Scripting 		CVE-2015-2870 2024-11-21 11:28 2015-08-1 Show GitHub Exploit DB Packet Storm
274799 - webservice-dic yoyaku Webservice-DIC yoyaku_v41 allows remote attackers to execute arbitrary OS commands via unspecified vectors. CWE-78
OS Command  		CVE-2015-2979 2024-11-21 11:28 2015-07-29 Show GitHub Exploit DB Packet Storm
274800 - webservice-dic yoyaku Webservice-DIC yoyaku_v41 allows remote attackers to bypass authentication and complete a conference-room reservation via unspecified vectors, as demonstrated by an "unintentional reservation." CWE-287
Improper Authentication 		CVE-2015-2978 2024-11-21 11:28 2015-07-29 Show GitHub Exploit DB Packet Storm