Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 20, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
255981	4.3	警告	オラクル	-	Oracle Collaboration Suite の User Interface コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0881	2010-05-12 15:19	2010-04-13	Show	GitHub Exploit DB Packet Storm

255982	4.3	警告	オラクル	-	Oracle Fusion Middleware の Portal コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0855	2010-05-12 15:19	2010-04-13	Show	GitHub Exploit DB Packet Storm

255983	4.3	警告	オラクル	-	Oracle Fusion Middleware の Portal コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0086	2010-05-12 15:18	2010-04-13	Show	GitHub Exploit DB Packet Storm

255984	5	警告	オラクル	-	Oracle Fusion Middleware の Portal コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0856	2010-05-12 15:18	2010-04-13	Show	GitHub Exploit DB Packet Storm

255985	5	警告	オラクル	-	Oracle Fusion Middleware の Oracle Internet Directory コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0872	2010-05-12 15:18	2010-04-13	Show	GitHub Exploit DB Packet Storm

255986	2.1	注意	オラクル	-	Oracle Database の Audit コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0854	2010-05-12 15:18	2010-04-13	Show	GitHub Exploit DB Packet Storm

255987	3.6	注意	オラクル	-	Oracle Database の Change Data Capture コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0870	2010-05-12 15:18	2010-04-13	Show	GitHub Exploit DB Packet Storm

255988	4	警告	オラクル	-	Oracle Database の XML DB コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0851	2010-05-12 15:17	2010-04-13	Show	GitHub Exploit DB Packet Storm

255989	4	警告	オラクル	-	Oracle Database の JavaVM コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0867	2010-05-12 15:17	2010-04-13	Show	GitHub Exploit DB Packet Storm

255990	5.5	警告	オラクル	-	Oracle Database の XML DB コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0852	2010-05-12 15:17	2010-04-13	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 20, 2026, 4:14 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
249191	4.7	MEDIUM Network	drupal debian	drupal debian_linux	Drupal core 7.x versions before 7.57 has an external link injection vulnerability when the language switcher block is used. A similar vulnerability exists in various custom and contributed modules. T…	CWE-601 Open Redirect	CVE-2017-6932	2024-11-21 12:30	2018-03-2	Show	GitHub Exploit DB Packet Storm

249192	6.5	MEDIUM Network	drupal	drupal	In Drupal versions 8.4.x versions before 8.4.5 the Settings Tray module has a vulnerability that allows users to update certain data that they do not have the permissions for. If you have implemented…	CWE-434 Unrestricted Upload of File with Dangerous Type	CVE-2017-6931	2024-11-21 12:30	2018-03-2	Show	GitHub Exploit DB Packet Storm

249193	8.1	HIGH Network	drupal	drupal	In Drupal versions 8.4.x versions before 8.4.5 when using node access controls with a multilingual site, Drupal marks the untranslated version of a node as the default fallback for access queries. Th…	NVD-CWE-noinfo	CVE-2017-6930	2024-11-21 12:30	2018-03-2	Show	GitHub Exploit DB Packet Storm

249194	6.1	MEDIUM Network	drupal debian	drupal debian_linux	A jQuery cross site scripting vulnerability is present when making Ajax requests to untrusted domains. This vulnerability is mitigated by the fact that it requires contributed or custom modules in or…	CWE-79 Cross-site Scripting	CVE-2017-6929	2024-11-21 12:30	2018-03-2	Show	GitHub Exploit DB Packet Storm

249195	5.3	MEDIUM Network	drupal debian	drupal debian_linux	Drupal core 7.x versions before 7.57 when using Drupal's private file system, Drupal will check to make sure a user has access to a file before allowing the user to view or download it. This check fa…	CWE-732 Incorrect Permission Assignment for Critical Resource	CVE-2017-6928	2024-11-21 12:30	2018-03-2	Show	GitHub Exploit DB Packet Storm

249196	6.1	MEDIUM Network	drupal debian	drupal debian_linux	Drupal 8.4.x versions before 8.4.5 and Drupal 7.x versions before 7.57 has a Drupal.checkPlain() JavaScript function which is used to escape potentially dangerous text before outputting it to HTML (a…	CWE-79 Cross-site Scripting	CVE-2017-6927	2024-11-21 12:30	2018-03-2	Show	GitHub Exploit DB Packet Storm

249197	8.1	HIGH Network	drupal	drupal	In Drupal versions 8.4.x versions before 8.4.5 users with permission to post comments are able to view content and comments they do not have access to, and are also able to add comments to this conte…	CWE-200 Information Exposure	CVE-2017-6926	2024-11-21 12:30	2018-03-2	Show	GitHub Exploit DB Packet Storm

249198	6.4	MEDIUM Local	cisco	umbrella	The Cisco Umbrella Virtual Appliance Version 2.0.3 and prior contained an undocumented encrypted remote support tunnel (SSH) which auto initiated from the customer's appliance to Cisco's SSH Hubs in …	NVD-CWE-noinfo	CVE-2017-6679	2024-11-21 12:30	2017-12-2	Show	GitHub Exploit DB Packet Storm

249199	6.5	MEDIUM Network	cisco	sf302-08pp_firmware sf302-08mpp_firmware sg300-10pp_firmware sg300-10mpp_firmware sf300-24pp_firmware sf300-48pp_firmware sg300-28pp_firmware sf300-08_firmware sf300-48p_firmw…	A vulnerability in the Secure Shell (SSH) subsystem of Cisco Small Business Managed Switches software could allow an authenticated, remote attacker to cause a reload of the affected switch, resulting…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2017-6720	2024-11-21 12:30	2017-09-21	Show	GitHub Exploit DB Packet Storm

249200	6.7	MEDIUM Local	cisco	ios_xe	A vulnerability in the USB-modem code of Cisco IOS XE Software running on Cisco ASR 920 Series Aggregation Services Routers could allow an authenticated, local attacker to inject and execute arbitrar…	CWE-78 OS Command	CVE-2017-6796	2024-11-21 12:30	2017-09-8	Show	GitHub Exploit DB Packet Storm