Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 15, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
254901 4 警告 オラクル - Oracle PeopleSoft and JDEdwards Suite の PeopleSoft Enterprise HCM コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-2398 2010-08-6 18:28 2010-07-13 Show GitHub Exploit DB Packet Storm
254902 4.3 警告 オラクル - Oracle PeopleSoft and JDEdwards Suite の PeopleSoft Enterprise FSCM コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-2380 2010-08-6 18:28 2010-07-13 Show GitHub Exploit DB Packet Storm
254903 5.5 警告 オラクル - Oracle PeopleSoft and JDEdwards Suite の PeopleSoft Enterprise PeopleTools コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-2402 2010-08-6 18:28 2010-07-13 Show GitHub Exploit DB Packet Storm
254904 5.5 警告 オラクル - Oracle PeopleSoft and JDEdwards Suite の PeopleSoft Enterprise HCM - eProfile Mgr コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-2401 2010-08-6 18:28 2010-07-13 Show GitHub Exploit DB Packet Storm
254905 1.9 注意 オラクル - Oracle Supply Chain Products Suite の Oracle Transportation Management コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-2371 2010-08-6 18:27 2010-07-13 Show GitHub Exploit DB Packet Storm
254906 4.3 警告 オラクル - Oracle Supply Chain Products Suite の Oracle Transportation Management コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-2372 2010-08-6 18:27 2010-07-13 Show GitHub Exploit DB Packet Storm
254907 10 危険 アップル
サイバートラスト株式会社
サン・マイクロシステムズ
レッドハット		 - 複数の Oracle 製品 の New Java Plug-in コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-0887 2010-08-5 17:16 2010-04-15 Show GitHub Exploit DB Packet Storm
254908 2.6 注意 オラクル - Oracle E-Business Suite の Oracle Knowledge Management コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-0836 2010-08-5 16:36 2010-07-13 Show GitHub Exploit DB Packet Storm
254909 3.5 注意 オラクル - Oracle E-Business Suite の Oracle Applications Framework コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-0909 2010-08-5 16:35 2010-07-13 Show GitHub Exploit DB Packet Storm
254910 4.3 警告 オラクル - Oracle E-Business Suite の Oracle Applications Manager コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-0913 2010-08-5 16:35 2010-07-13 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 15, 2026, 4:28 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
304681 - paul_mcenery php_bible_search Cross-site scripting (XSS) vulnerability in bible.php in PHP Bible Search allows remote attackers to inject arbitrary web script or HTML via the chapter parameter. CWE-79
Cross-site Scripting 		CVE-2010-2617 2024-11-21 10:17 2010-07-2 Show GitHub Exploit DB Packet Storm
304682 - paul_mcenery php_bible_search SQL injection vulnerability in bible.php in PHP Bible Search, probably 0.99, allows remote attackers to execute arbitrary SQL commands via the chapter parameter. CWE-89
SQL Injection 		CVE-2010-2616 2024-11-21 10:17 2010-07-2 Show GitHub Exploit DB Packet Storm
304683 - grafik-power grafik_cms Multiple cross-site scripting (XSS) vulnerabilities in admin/admin.php in Grafik CMS 1.1.2, and possibly earlier, allow remote attackers to inject arbitrary web script or HTML via the (1) page_menu a… CWE-79
Cross-site Scripting 		CVE-2010-2615 2024-11-21 10:17 2010-07-2 Show GitHub Exploit DB Packet Storm
304684 - grafik-power grafik_cms SQL injection vulnerability in admin/admin.php in Grafik CMS 1.1.2, and possibly earlier, allows remote attackers to execute arbitrary SQL commands via the id parameter in an edit_page action. CWE-89
SQL Injection 		CVE-2010-2614 2024-11-21 10:17 2010-07-2 Show GitHub Exploit DB Packet Storm
304685 - harmistechnology com_awd_song Cross-site scripting (XSS) vulnerability in the JExtensions JE Awd Song (com_awd_song) component for Joomla! allows remote attackers to inject arbitrary web script or HTML via the song review field, … CWE-79
Cross-site Scripting 		CVE-2010-2613 2024-11-21 10:17 2010-07-2 Show GitHub Exploit DB Packet Storm
304686 - hp openvms
openvms_for_integrity_servers 		Unspecified vulnerability in the HP OpenVMS Auditing feature in OpenVMS ALPHA 7.3-2, 8.2, and 8.3; and OpenVMS for Integrity Servers 8.3 AND 8.3-1H1; allows local users to obtain sensitive informatio… CWE-200
NVD-CWE-noinfo
Information Exposure 		CVE-2010-2612 2024-11-21 10:17 2010-07-2 Show GitHub Exploit DB Packet Storm
304687 5.5 MEDIUM
Local 		clusterlabs cluster_glue
pacemaker 		stonith-ng in pacemaker and cluster-glue passed passwords as commandline parameters, making it possible for local attackers to gain access to passwords of the HA stack and potentially influence its o… CWE-287
Improper Authentication 		CVE-2010-2496 2024-11-21 10:16 2021-10-18 Show GitHub Exploit DB Packet Storm
304688 7.8 HIGH
Local 		linux linux_kernel A flaw was discovered in gfs2 file system’s handling of acls (access control lists). An unprivileged local attacker could exploit this flaw to gain access or execute any file stored in the gfs2 file … - CVE-2010-2525 2024-11-21 10:16 2021-06-22 Show GitHub Exploit DB Packet Storm
304689 7.5 HIGH
Network 		znc znc NULL pointer dereference vulnerability in ZNC before 0.092 caused by traffic stats when there are unauthenticated connections. CWE-476
 NULL Pointer Dereference 		CVE-2010-2488 2024-11-21 10:16 2019-11-13 Show GitHub Exploit DB Packet Storm
304690 9.8 CRITICAL
Network 		syscp_project syscp syscp 1.4.2.1 allows attackers to add arbitrary paths via the documentroot of a domain by appending a colon to it and setting the open basedir path to use that domain documentroot. CWE-20
 Improper Input Validation  		CVE-2010-2476 2024-11-21 10:16 2019-11-8 Show GitHub Exploit DB Packet Storm