Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 18, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
255391	2.6	注意	オラクル	-	Oracle E-Business Suite の Oracle Knowledge Management コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0836	2010-08-5 16:36	2010-07-13	Show	GitHub Exploit DB Packet Storm

255392	3.5	注意	オラクル	-	Oracle E-Business Suite の Oracle Applications Framework コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0909	2010-08-5 16:35	2010-07-13	Show	GitHub Exploit DB Packet Storm

255393	4.3	警告	オラクル	-	Oracle E-Business Suite の Oracle Applications Manager コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0913	2010-08-5 16:35	2010-07-13	Show	GitHub Exploit DB Packet Storm

255394	4.3	警告	オラクル	-	Oracle E-Business Suite の Oracle Applications Manager コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0905	2010-08-5 16:35	2010-07-13	Show	GitHub Exploit DB Packet Storm

255395	4.3	警告	オラクル	-	Oracle E-Business Suite の Oracle Applications Framework コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0912	2010-08-5 16:35	2010-07-13	Show	GitHub Exploit DB Packet Storm

255396	5.5	警告	オラクル	-	Oracle E-Business Suite の Oracle Advanced Product Catalog コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0915	2010-08-5 16:34	2010-07-13	Show	GitHub Exploit DB Packet Storm

255397	7.5	危険	オラクル	-	Oracle E-Business Suite の Oracle Applications Framework コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0908	2010-08-5 16:34	2010-07-13	Show	GitHub Exploit DB Packet Storm

255398	4.3	警告	オラクル	-	Oracle Enterprise Manager Grid Control の Console コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-2373	2010-08-5 16:33	2010-07-13	Show	GitHub Exploit DB Packet Storm

255399	4.3	警告	オラクル	-	Oracle Fusion Middleware の Oracle Business Process Management コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-2370	2010-08-5 16:33	2010-07-13	Show	GitHub Exploit DB Packet Storm

255400	5	警告	オラクル	-	Oracle Secure Backup における脆弱性	CWE-noinfo 情報不足	CVE-2010-0904	2010-08-5 16:33	2010-07-13	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 18, 2026, 4:12 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
282151	-	improved_user_search_in_backend_project	improved_user_search_in_backend	Cross-site request forgery (CSRF) vulnerability in improved-user-search-in-backend.php in the backend in the Improved user search in backend plugin before 1.2.5 for WordPress allows remote attackers …	CWE-79 Cross-site Scripting	CVE-2014-5196	2024-11-21 11:11	2014-08-13	Show	GitHub Exploit DB Packet Storm

282152	-	ayatana_project	unity	Unity before 7.2.3 and 7.3.x before 7.3.1, as used in Ubuntu, does not properly take focus of the keyboard when switching to the lock screen, which allows physically proximate attackers to bypass the…	CWE-362 Race Condition	CVE-2014-5195	2024-11-21 11:11	2014-08-7	Show	GitHub Exploit DB Packet Storm

282153	-	sphider	sphider	Static code injection vulnerability in admin/admin.php in Sphider 1.3.6 allows remote authenticated users to inject arbitrary PHP code into settings/conf.php via the _word_upper_bound parameter.	CWE-94 Code Injection	CVE-2014-5194	2024-11-21 11:11	2014-08-7	Show	GitHub Exploit DB Packet Storm

282154	-	sphider	sphider	Cross-site scripting (XSS) vulnerability in admin/admin.php in Sphider 1.3.6 allows remote attackers to inject arbitrary web script or HTML via the category parameter. NOTE: the url parameter vector…	CWE-79 Cross-site Scripting	CVE-2014-5193	2024-11-21 11:11	2014-08-7	Show	GitHub Exploit DB Packet Storm

282155	-	sphider	sphider	SQL injection vulnerability in admin/admin.php in Sphider 1.3.6 allows remote attackers to execute arbitrary SQL commands via the filter parameter.	CWE-89 SQL Injection	CVE-2014-5192	2024-11-21 11:11	2014-08-7	Show	GitHub Exploit DB Packet Storm

282156	-	ckeditor	ckeditor	Cross-site scripting (XSS) vulnerability in the Preview plugin before 4.4.3 in CKEditor allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.	CWE-79 Cross-site Scripting	CVE-2014-5191	2024-11-21 11:11	2014-08-7	Show	GitHub Exploit DB Packet Storm

282157	-	si_captcha_anti-spam_project	si_captcha_anti-spam	Cross-site scripting (XSS) vulnerability in captcha-secureimage/test/index.php in the SI CAPTCHA Anti-Spam plugin 2.7.4 for WordPress allows remote attackers to inject arbitrary web script or HTML vi…	CWE-79 Cross-site Scripting	CVE-2014-5190	2024-11-21 11:11	2014-08-7	Show	GitHub Exploit DB Packet Storm

282158	-	leadoctopus	lead_octopus	SQL injection vulnerability in lib/optin/optin_page.php in the Lead Octopus plugin for WordPress allows remote attackers to execute arbitrary SQL commands via the id parameter.	CWE-89 SQL Injection	CVE-2014-5189	2024-11-21 11:11	2014-08-7	Show	GitHub Exploit DB Packet Storm

282159	-	lyris	list_manager	Cross-site scripting (XSS) vulnerability in doemailpassword.tml in Lyris ListManager (LM) 8.95a allows remote attackers to inject arbitrary web script or HTML via the EmailAddr parameter.	CWE-79 Cross-site Scripting	CVE-2014-5188	2024-11-21 11:11	2014-08-7	Show	GitHub Exploit DB Packet Storm

282160	-	tom_m8te_plugin_project	tom-m8te_plugin	Directory traversal vulnerability in the Tom M8te (tom-m8te) plugin 1.5.3 for WordPress allows remote attackers to read arbitrary files via the file parameter to tom-download-file.php.	CWE-22 Path Traversal	CVE-2014-5187	2024-11-21 11:11	2014-08-7	Show	GitHub Exploit DB Packet Storm