Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 12, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
255081 5 警告 オラクル - BEA Product Suite の WebLogic Server コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-0068 2010-02-15 19:32 2010-01-12 Show GitHub Exploit DB Packet Storm
255082 4.3 警告 オラクル - Oracle Application Server の J2EE コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-0070 2010-02-15 19:31 2010-01-12 Show GitHub Exploit DB Packet Storm
255083 5 警告 オラクル - Oracle Application Server の J2EE コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-0067 2010-02-15 19:31 2010-01-12 Show GitHub Exploit DB Packet Storm
255084 5 警告 オラクル - Oracle Application Server の Access Manager Identity Server コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-0066 2010-02-15 19:31 2010-01-12 Show GitHub Exploit DB Packet Storm
255085 7.8 危険 サイバートラスト株式会社
Linux
レッドハット		 - Linux kernel の e1000_clean_rx_irq 関数における整数アンダーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2009-1385 2010-02-15 11:03 2009-06-4 Show GitHub Exploit DB Packet Storm
255086 4.6 警告 サイバートラスト株式会社
Todd C. Miller		 - sudo の Perl スクリプト実行時における権限昇格の脆弱性 - CVE-2005-4158 2010-02-15 11:03 2005-11-8 Show GitHub Exploit DB Packet Storm
255087 1 注意 オラクル - Oracle Database および Oracle Application Server の Unzip コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2009-3412 2010-02-12 12:22 2010-01-12 Show GitHub Exploit DB Packet Storm
255088 3.2 注意 オラクル - Oracle Database の Oracle Spatial コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2009-3413 2010-02-12 12:22 2010-01-12 Show GitHub Exploit DB Packet Storm
255089 3.6 注意 オラクル - Oracle Database の RDBMS コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2009-3410 2010-02-12 12:21 2010-01-12 Show GitHub Exploit DB Packet Storm
255090 4 警告 オラクル - Oracle Database の Logical Standby コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2009-1996 2010-02-12 12:21 2010-01-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 13, 2026, 5:05 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
252331 6.5 MEDIUM
Network 		atlassian crowd The administration backup restore resource in Atlassian Crowd before version 3.0.2 and from version 3.1.0 before version 3.1.1 allows remote attackers to read files from the filesystem via a XXE vuln… CWE-611
XXE 		CVE-2017-18110 2024-11-21 12:19 2019-03-29 Show GitHub Exploit DB Packet Storm
252332 6.1 MEDIUM
Network 		atlassian crowd The login resource of CrowdId in Atlassian Crowd before version 3.0.2 and from version 3.1.0 before version 3.1.1 allows remote attackers to redirect users to a different website which they may use a… CWE-601
Open Redirect 		CVE-2017-18109 2024-11-21 12:19 2019-03-29 Show GitHub Exploit DB Packet Storm
252333 7.2 HIGH
Network 		atlassian crowd The administration SMTP configuration resource in Atlassian Crowd before version 2.10.2 allows remote attackers with administration rights to execute arbitrary code via a JNDI injection. CWE-94
Code Injection 		CVE-2017-18108 2024-11-21 12:19 2019-03-29 Show GitHub Exploit DB Packet Storm
252334 7.5 HIGH
Network 		atlassian crowd The identifier_hash for a session token in Atlassian Crowd before version 2.9.1 could potentially collide with an identifier_hash for another user or a user in a different directory, this allows remo… CWE-287
Improper Authentication 		CVE-2017-18106 2024-11-21 12:19 2019-03-29 Show GitHub Exploit DB Packet Storm
252335 8.1 HIGH
Network 		atlassian crowd The console login resource in Atlassian Crowd before version 3.0.2 and from version 3.1.0 before version 3.1.1 allows remote attackers, who have previously obtained a user's JSESSIONID cookie, to gai… CWE-384
 Session Fixation 		CVE-2017-18105 2024-11-21 12:19 2019-03-29 Show GitHub Exploit DB Packet Storm
252336 9.8 CRITICAL
Network 		github github The Management Console in GitHub Enterprise 2.8.x before 2.8.7 has a deserialization issue that allows unauthenticated remote attackers to execute arbitrary code. This occurs because the enterprise s… CWE-502
 Deserialization of Untrusted Data 		CVE-2017-18365 2024-11-21 12:19 2019-03-28 Show GitHub Exploit DB Packet Storm
252337 6.1 MEDIUM
Network 		frank-karau phpfk phpFK lite has XSS via the faq.php, members.php, or search.php query string or the user.php user parameter. CWE-79
Cross-site Scripting 		CVE-2017-18364 2024-11-21 12:19 2019-03-28 Show GitHub Exploit DB Packet Storm
252338 9.8 CRITICAL
Network 		connectwise manageditsync ConnectWise ManagedITSync integration through 2017 for Kaseya VSA is vulnerable to unauthenticated remote commands that allow full direct access to the Kaseya VSA database. In February 2019, attacker… CWE-89
SQL Injection 		CVE-2017-18362 2024-11-21 12:19 2019-02-5 Show GitHub Exploit DB Packet Storm
252339 7.5 HIGH
Network 		pylonsproject colander In Pylons Colander through 1.6, the URL validator allows an attacker to potentially cause an infinite loop thereby causing a denial of service via an unclosed parenthesis. CWE-835
 Loop with Unreachable Exit Condition ('Infinite Loop') 		CVE-2017-18361 2024-11-21 12:19 2019-02-1 Show GitHub Exploit DB Packet Storm
252340 5.5 MEDIUM
Local 		linux
canonical 		linux_kernel
ubuntu_linux 		In change_port_settings in drivers/usb/serial/io_ti.c in the Linux kernel before 4.11.3, local users could cause a denial of service by division-by-zero in the serial device layer by trying to set ve… CWE-369
 Divide By Zero 		CVE-2017-18360 2024-11-21 12:19 2019-01-31 Show GitHub Exploit DB Packet Storm