Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 18, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
255391	2.6	注意	オラクル	-	Oracle E-Business Suite の Oracle Knowledge Management コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0836	2010-08-5 16:36	2010-07-13	Show	GitHub Exploit DB Packet Storm

255392	3.5	注意	オラクル	-	Oracle E-Business Suite の Oracle Applications Framework コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0909	2010-08-5 16:35	2010-07-13	Show	GitHub Exploit DB Packet Storm

255393	4.3	警告	オラクル	-	Oracle E-Business Suite の Oracle Applications Manager コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0913	2010-08-5 16:35	2010-07-13	Show	GitHub Exploit DB Packet Storm

255394	4.3	警告	オラクル	-	Oracle E-Business Suite の Oracle Applications Manager コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0905	2010-08-5 16:35	2010-07-13	Show	GitHub Exploit DB Packet Storm

255395	4.3	警告	オラクル	-	Oracle E-Business Suite の Oracle Applications Framework コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0912	2010-08-5 16:35	2010-07-13	Show	GitHub Exploit DB Packet Storm

255396	5.5	警告	オラクル	-	Oracle E-Business Suite の Oracle Advanced Product Catalog コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0915	2010-08-5 16:34	2010-07-13	Show	GitHub Exploit DB Packet Storm

255397	7.5	危険	オラクル	-	Oracle E-Business Suite の Oracle Applications Framework コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0908	2010-08-5 16:34	2010-07-13	Show	GitHub Exploit DB Packet Storm

255398	4.3	警告	オラクル	-	Oracle Enterprise Manager Grid Control の Console コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-2373	2010-08-5 16:33	2010-07-13	Show	GitHub Exploit DB Packet Storm

255399	4.3	警告	オラクル	-	Oracle Fusion Middleware の Oracle Business Process Management コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-2370	2010-08-5 16:33	2010-07-13	Show	GitHub Exploit DB Packet Storm

255400	5	警告	オラクル	-	Oracle Secure Backup における脆弱性	CWE-noinfo 情報不足	CVE-2010-0904	2010-08-5 16:33	2010-07-13	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 18, 2026, 4:12 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
298401	-	cocsoft	stream_down	Stack-based buffer overflow in CoCSoft Stream Down 6.8.0 allows remote web servers to execute arbitrary code via a long response to a download request.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2011-5052	2024-11-21 10:33	2012-01-5	Show	GitHub Exploit DB Packet Storm

298402	-	wpsymposium	wp_symposium	Multiple unrestricted file upload vulnerabilities in the WP Symposium plugin before 11.12.24 for WordPress allow remote attackers to execute arbitrary code by uploading a file with an executable exte…	NVD-CWE-Other	CVE-2011-5051	2024-11-21 10:33	2012-01-5	Show	GitHub Exploit DB Packet Storm

298403	-	elitecore	cyberoam_unified_threat_management	SQL injection vulnerability in corporate/Controller in Elitecore Technologies Cyberoam UTM before 10.01.2 build 059 allows remote authenticated administrators to execute arbitrary SQL commands via th…	CWE-89 SQL Injection	CVE-2011-5050	2024-11-21 10:33	2012-01-5	Show	GitHub Exploit DB Packet Storm

298404	-	-	-	MySQL 5.5.8, when running on Windows, allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted packet to TCP port 3306.	CWE-399 Resource Management Errors	CVE-2011-5049	2024-11-21 10:33	2012-01-5	Show	GitHub Exploit DB Packet Storm

298405	-	e107	e107	SQL injection vulnerability in usersettings.php in e107 0.7.26, and possibly other versions before 1.0.0, allows remote attackers to execute arbitrary SQL commands via the username parameter.	CWE-89 SQL Injection	CVE-2011-4921	2024-11-21 10:33	2012-01-5	Show	GitHub Exploit DB Packet Storm

298406	-	e107	e107	Multiple cross-site scripting (XSS) vulnerabilities in e107 0.7.26, and other versions before 1.0.0, allow remote attackers to inject arbitrary web script or HTML via the URL to (1) e107_images/thumb…	CWE-79 Cross-site Scripting	CVE-2011-4920	2024-11-21 10:33	2012-01-5	Show	GitHub Exploit DB Packet Storm

298407	-	ibm	web_experience_factory	Multiple cross-site scripting (XSS) vulnerabilities in IBM Web Experience Factory (aka WEF, formerly WebSphere Portlet Factory) 7.0 and 7.0.1 allow remote attackers to inject arbitrary web script or …	CWE-79 Cross-site Scripting	CVE-2011-5048	2024-11-21 10:33	2012-01-4	Show	GitHub Exploit DB Packet Storm

298408	-	pfsense	pfsense	Cross-site scripting (XSS) vulnerability in status_rrd_graph.php in pfSense before 2.0.1 allows remote attackers to inject arbitrary web script or HTML via the style parameter.	CWE-79 Cross-site Scripting	CVE-2011-5047	2024-11-21 10:33	2012-01-4	Show	GitHub Exploit DB Packet Storm

298409	-	microsoft	windows_xp windows_server_2008 windows_7 windows_server_2003 windows_vista	The Graphics Device Interface (GDI) in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, …	CWE-20 Improper Input Validation	CVE-2011-5046	2024-11-21 10:33	2011-12-31	Show	GitHub Exploit DB Packet Storm

298410	-	jjwdesign	php_booking_calendar	Cross-site scripting (XSS) vulnerability in details_view.php in PHP Booking Calendar 10e allows remote attackers to inject arbitrary web script or HTML via the page_info_message parameter.	CWE-79 Cross-site Scripting	CVE-2011-5045	2024-11-21 10:33	2011-12-31	Show	GitHub Exploit DB Packet Storm