Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 20, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
255971	3.5	注意	オラクル	-	Oracle E-Business Suite の Oracle Workflow Cartridge コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0857	2010-05-13 15:10	2010-04-13	Show	GitHub Exploit DB Packet Storm

255972	3.5	注意	オラクル	-	Oracle E-Business Suite の E-Business Intelligence コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0858	2010-05-13 15:10	2010-04-13	Show	GitHub Exploit DB Packet Storm

255973	4.3	警告	オラクル	-	Oracle E-Business Suite の Oracle Transportation Management コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0869	2010-05-13 15:10	2010-04-13	Show	GitHub Exploit DB Packet Storm

255974	4.3	警告	オラクル	-	Oracle E-Business Suite の Oracle Agile Engineering Data Management コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0871	2010-05-13 15:10	2010-04-13	Show	GitHub Exploit DB Packet Storm

255975	4.3	警告	オラクル	-	Oracle E-Business Suite の Oracle Agile Engineering Data Management コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0865	2010-05-13 15:09	2010-04-13	Show	GitHub Exploit DB Packet Storm

255976	5	警告	オラクル	-	Oracle E-Business Suite の Oracle HRMS (Self Service) コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0861	2010-05-13 15:09	2010-04-13	Show	GitHub Exploit DB Packet Storm

255977	7.6	危険	マイクロソフト	-	Internet Explorer において VBScript および Windows Help を使用する際に任意のコードが実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-0483	2010-05-12 15:20	2010-03-2	Show	GitHub Exploit DB Packet Storm

255978	7.1	危険	マイクロソフト	-	Microsoft Windows の kernel における SMB 応答パケットの処理に関するサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2009-3676	2010-05-12 15:20	2009-11-13	Show	GitHub Exploit DB Packet Storm

255979	5.8	警告	オラクル	-	Oracle E-Business Suite の Oracle iStore コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0868	2010-05-12 15:19	2010-04-13	Show	GitHub Exploit DB Packet Storm

255980	6.4	警告	オラクル	-	Oracle E-Business Suite の Oracle Application Object Library コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0859	2010-05-12 15:19	2010-04-13	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 20, 2026, 4:14 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
274651	-	innominate	mguard_firmware	The IPsec SA establishment process on Innominate mGuard devices with firmware 8.x before 8.1.7 allows remote authenticated users to cause a denial of service (VPN service restart) by leveraging a pee…	CWE-20 Improper Input Validation	CVE-2015-3966	2024-11-21 11:30	2015-08-30	Show	GitHub Exploit DB Packet Storm

274652	-	sonicwall	netextender	Unquoted Windows search path vulnerability in the autorun value in Dell SonicWall NetExtender before 7.5.227 and 8.0.x before 8.0.238, as used in the SRA firmware before 7.5.1.2-40sv and 8.x before 8…	CWE-428 Unquoted Search Path or Element	CVE-2015-4173	2024-11-21 11:30	2015-08-27	Show	GitHub Exploit DB Packet Storm

274653	-	qemu	qemu	The slirp_smb function in net/slirp.c in QEMU 2.3.0 and earlier creates temporary files with predictable names, which allows local users to cause a denial of service (instantiation failure) by creati…	CWE-17 Code	CVE-2015-4037	2024-11-21 11:30	2015-08-27	Show	GitHub Exploit DB Packet Storm

274654	-	oracle rubygems	solaris rubygems	RubyGems 2.0.x before 2.0.17, 2.2.x before 2.2.5, and 2.4.x before 2.4.8 does not validate the hostname when fetching gems or making API requests, which allows remote attackers to redirect requests t…	CWE-20 Improper Input Validation	CVE-2015-4020	2024-11-21 11:30	2015-08-26	Show	GitHub Exploit DB Packet Storm

274655	-	cisco	prime_infrastructure	Cisco Prime Infrastructure (PI) 1.4(0.45) and earlier, when AAA authentication is used, allows remote authenticated users to bypass intended access restrictions via a username with a modified composi…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2015-4331	2024-11-21 11:30	2015-08-23	Show	GitHub Exploit DB Packet Storm

274656	-	cisco	telepresence_video_communication_server_software	Cisco TelePresence Video Communication Server (VCS) Expressway X8.5.2 allows remote attackers to cause a denial of service via invalid variables in a GET request, aka Bug ID CSCuv40528.	CWE-399 Resource Management Errors	CVE-2015-4318	2024-11-21 11:30	2015-08-21	Show	GitHub Exploit DB Packet Storm

274657	-	cisco	telepresence_video_communication_server_software	The administrator web interface in Cisco TelePresence Video Communication Server (VCS) X8.5.2 allows remote authenticated users to execute arbitrary OS commands via crafted HTTP requests, aka Bug ID …	CWE-20 Improper Input Validation	CVE-2015-4329	2024-11-21 11:30	2015-08-20	Show	GitHub Exploit DB Packet Storm

274658	-	cisco	adaptive_security_appliance_software	The Unicast Reverse Path Forwarding (uRPF) implementation in Cisco Adaptive Security Appliance (ASA) Software 9.3(1.50), 9.3(2.100), 9.3(3), and 9.4(1) mishandles cases where an IP address belongs to…	CWE-20 Improper Input Validation	CVE-2015-4321	2024-11-21 11:30	2015-08-20	Show	GitHub Exploit DB Packet Storm

274659	-	cisco	telepresence_video_communication_server_software	The password-change feature in the administrative web interface in Cisco TelePresence Video Communication Server (VCS) Expressway X8.5.1 improperly performs authorization, which allows remote authent…	CWE-255 Credentials Management	CVE-2015-4319	2024-11-21 11:30	2015-08-20	Show	GitHub Exploit DB Packet Storm

274660	-	cisco	telepresence_video_communication_server_software	The Mobile and Remote Access (MRA) endpoint-validation feature in Cisco TelePresence Video Communication Server (VCS) Expressway X8.5.2 improperly validates the phone line used for registration, whic…	CWE-20 Improper Input Validation	CVE-2015-4316	2024-11-21 11:30	2015-08-20	Show	GitHub Exploit DB Packet Storm