Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 19, 2026, 2 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
255381	3	注意	オラクル	-	Oracle PeopleSoft and JDEdwards Suite の PeopleSoft Enterprise CRM コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-2378	2010-08-6 18:29	2010-07-13	Show	GitHub Exploit DB Packet Storm

255382	4	警告	オラクル	-	Oracle PeopleSoft and JDEdwards Suite の PeopleSoft Enterprise PeopleTools コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-2377	2010-08-6 18:29	2010-07-13	Show	GitHub Exploit DB Packet Storm

255383	4	警告	オラクル	-	Oracle PeopleSoft and JDEdwards Suite の PeopleSoft Enterprise HCM - Time & Labor コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-2379	2010-08-6 18:29	2010-07-13	Show	GitHub Exploit DB Packet Storm

255384	4	警告	オラクル	-	Oracle PeopleSoft and JDEdwards Suite の PeopleSoft Enterprise HCM コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-2398	2010-08-6 18:28	2010-07-13	Show	GitHub Exploit DB Packet Storm

255385	4.3	警告	オラクル	-	Oracle PeopleSoft and JDEdwards Suite の PeopleSoft Enterprise FSCM コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-2380	2010-08-6 18:28	2010-07-13	Show	GitHub Exploit DB Packet Storm

255386	5.5	警告	オラクル	-	Oracle PeopleSoft and JDEdwards Suite の PeopleSoft Enterprise PeopleTools コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-2402	2010-08-6 18:28	2010-07-13	Show	GitHub Exploit DB Packet Storm

255387	5.5	警告	オラクル	-	Oracle PeopleSoft and JDEdwards Suite の PeopleSoft Enterprise HCM - eProfile Mgr コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-2401	2010-08-6 18:28	2010-07-13	Show	GitHub Exploit DB Packet Storm

255388	1.9	注意	オラクル	-	Oracle Supply Chain Products Suite の Oracle Transportation Management コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-2371	2010-08-6 18:27	2010-07-13	Show	GitHub Exploit DB Packet Storm

255389	4.3	警告	オラクル	-	Oracle Supply Chain Products Suite の Oracle Transportation Management コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-2372	2010-08-6 18:27	2010-07-13	Show	GitHub Exploit DB Packet Storm

255390	10	危険	アップルサイバートラスト株式会社サン・マイクロシステムズレッドハット	-	複数の Oracle 製品の New Java Plug-in コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0887	2010-08-5 17:16	2010-04-15	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 19, 2026, 4:16 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
288461	-	htmlcleaner_project open-xchange	htmlcleaner open-xchange_appsuite	Multiple race conditions in HtmlCleaner before 2.6, as used in Open-Xchange AppSuite 7.2.2 before rev13 and other products, allow remote authenticated users to read the private e-mail of other person…	CWE-362 Race Condition	CVE-2013-5035	2024-11-21 10:56	2013-09-5	Show	GitHub Exploit DB Packet Storm

288462	-	open-xchange	open-xchange_appsuite	Open-Xchange AppSuite before 7.0.2 rev14, 7.2.0 before rev11, 7.2.1 before rev10, and 7.2.2 before rev9 relies on user-supplied data to predict the IMAP server hostname for an external domain name, w…	CWE-255 Credentials Management	CVE-2013-4790	2024-11-21 10:56	2013-09-5	Show	GitHub Exploit DB Packet Storm

288463	-	lockon	ec-cube	Multiple directory traversal vulnerabilities in the doApiAction function in data/class/api/SC_Api_Operation.php in LOCKON EC-CUBE 2.12.0 through 2.12.5 on Windows allow remote attackers to read arbit…	CWE-22 Path Traversal	CVE-2013-4702	2024-11-21 10:56	2013-08-31	Show	GitHub Exploit DB Packet Storm

288464	-	strongswan opensuse	strongswan opensuse	The is_asn1 function in strongSwan 4.1.11 through 5.0.4 does not properly validate the return value of the asn1_length function, which allows remote attackers to cause a denial of service (segmentati…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2013-5018	2024-11-21 10:56	2013-08-29	Show	GitHub Exploit DB Packet Storm

288465	-	realnetworks	realplayer realplayer_sp	RealNetworks RealPlayer before 16.0.3.51, and RealPlayer SP 1.0 through 1.1.5, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a malformed RealM…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2013-4974	2024-11-21 10:56	2013-08-27	Show	GitHub Exploit DB Packet Storm

288466	-	realnetworks	realplayer realplayer_sp	Stack-based buffer overflow in RealNetworks RealPlayer before 16.0.3.51, and RealPlayer SP 1.0 through 1.1.5, allows remote attackers to execute arbitrary code via a crafted .rmp file.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2013-4973	2024-11-21 10:56	2013-08-27	Show	GitHub Exploit DB Packet Storm

288467	-	janrain	php-openid	Auth/Yadis/XML.php in PHP OpenID Library 2.2.2 and earlier allows remote attackers to read arbitrary files, send HTTP requests to intranet servers, or cause a denial of service (CPU and memory consum…	NVD-CWE-noinfo	CVE-2013-4701	2024-11-21 10:56	2013-08-22	Show	GitHub Exploit DB Packet Storm

288468	-	yahoo	japan_shopping	The Yahoo! Japan Shopping application 1.4 and earlier for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive i…	CWE-310 Cryptographic Issues	CVE-2013-4700	2024-11-21 10:56	2013-08-22	Show	GitHub Exploit DB Packet Storm

288469	-	yahoo	yafuoku\!	The Yahoo! Japan Yafuoku! application 4.3.0 and earlier for iOS and Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain s…	CWE-310 Cryptographic Issues	CVE-2013-4699	2024-11-21 10:56	2013-08-22	Show	GitHub Exploit DB Packet Storm

288470	-	puppet	puppet_enterprise	Puppet Enterprise before 3.0.1 allows remote attackers to obtain the database password via vectors related to how the password is "seeded as a console parameter," External Node Classifiers, and the l…	CWE-255 Credentials Management	CVE-2013-4967	2024-11-21 10:56	2013-08-21	Show	GitHub Exploit DB Packet Storm