Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 27, 2026, 4 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
256501	4.3	警告	オラクル	-	Oracle Industry Product Suite の Retail - Oracle Retail Place In-Season コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0864	2010-05-13 15:13	2010-04-13	Show	GitHub Exploit DB Packet Storm

256502	4.3	警告	オラクル	-	Oracle Industry Product Suite の Retail - Oracle Retail Markdown Optimization コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0862	2010-05-13 15:13	2010-04-13	Show	GitHub Exploit DB Packet Storm

256503	4.3	警告	オラクル	-	Oracle Industry Product Suite の Life Sciences - Oracle Thesaurus Management System コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0875	2010-05-13 15:12	2010-04-13	Show	GitHub Exploit DB Packet Storm

256504	4.3	警告	オラクル	-	Oracle Industry Product Suite の Life Sciences - Oracle Clinical Remote Data Capture Option コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0876	2010-05-13 15:12	2010-04-13	Show	GitHub Exploit DB Packet Storm

256505	4.3	警告	オラクル	-	Oracle Industry Product Suite の Communications - Oracle Communications Unified Inventory Management コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0874	2010-05-13 15:12	2010-04-13	Show	GitHub Exploit DB Packet Storm

256506	4	警告	オラクル	-	複数の Oracle 製品の PeopleTools コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0879	2010-05-13 15:12	2010-04-13	Show	GitHub Exploit DB Packet Storm

256507	4	警告	オラクル	-	複数の Oracle 製品の PeopleTools コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0878	2010-05-13 15:11	2010-04-13	Show	GitHub Exploit DB Packet Storm

256508	5	警告	オラクル	-	複数の Oracle 製品の PeopleTools コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0877	2010-05-13 15:11	2010-04-13	Show	GitHub Exploit DB Packet Storm

256509	4	警告	オラクル	-	複数の Oracle 製品の PeopleTools コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0880	2010-05-13 15:11	2010-04-13	Show	GitHub Exploit DB Packet Storm

256510	3.5	注意	オラクル	-	Oracle E-Business Suite の Oracle Workflow Cartridge コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0857	2010-05-13 15:10	2010-04-13	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 27, 2026, 4:52 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
289561	7.8	HIGH Local	winamp	winamp	Winamp 5.63: Invalid Pointer Dereference leading to Arbitrary Code Execution	CWE-763 Release of Invalid Pointer or Reference	CVE-2013-4695	2024-11-21 10:56	2019-12-28	Show	GitHub Exploit DB Packet Storm

289562	6.1	MEDIUM Network	xorbin	digital_flash_clock	WordPress Xorbin Digital Flash Clock 1.0 has XSS	CWE-79 Cross-site Scripting	CVE-2013-4693	2024-11-21 10:56	2019-12-28	Show	GitHub Exploit DB Packet Storm

289563	6.1	MEDIUM Network	sencha	connect	Sencha Labs Connect has XSS with connect.methodOverride()	CWE-79 Cross-site Scripting	CVE-2013-4691	2024-11-21 10:56	2019-12-28	Show	GitHub Exploit DB Packet Storm

289564	6.5	MEDIUM Network	spbas	business_automation_software	SPBAS Business Automation Software 2012 has CSRF.	CWE-352 Origin Validation Error	CVE-2013-4665	2024-11-21 10:56	2019-12-28	Show	GitHub Exploit DB Packet Storm

289565	6.1	MEDIUM Network	spbas	business_automation_software	SPBAS Business Automation Software 2012 has XSS.	CWE-79 Cross-site Scripting	CVE-2013-4664	2024-11-21 10:56	2019-12-28	Show	GitHub Exploit DB Packet Storm

289566	6.1	MEDIUM Network	puppet	puppet_enterprise	Puppet Enterprise before 3.0.1 allows remote attackers to (1) conduct clickjacking attacks via unspecified vectors related to the console, and (2) conduct cross-site scripting (XSS) attacks via unspe…	CWE-79 Cross-site Scripting	CVE-2013-4968	2024-11-21 10:56	2019-12-12	Show	GitHub Exploit DB Packet Storm

289567	9.8	CRITICAL Network	netgear	wnr3500u_firmware wnr3500l_firmware	Symlink Traversal vulnerability in NETGEAR WNR3500U and WNR3500L due to misconfiguration in the SMB service.	CWE-22 Path Traversal	CVE-2013-4657	2024-11-21 10:56	2019-11-14	Show	GitHub Exploit DB Packet Storm

289568	9.8	CRITICAL Network	asus	rt-ac66u_firmware rt-n56u_firmware	Symlink Traversal vulnerability in ASUS RT-AC66U and RT-N56U due to misconfiguration in the SMB service.	CWE-22 Path Traversal	CVE-2013-4656	2024-11-21 10:56	2019-11-14	Show	GitHub Exploit DB Packet Storm

289569	8.1	HIGH Network	sensiolabs fedoraproject redhat	symfony fedora enterprise_linux	php-symfony2-Validator has loss of information during serialization	CWE-20 Improper Input Validation	CVE-2013-4751	2024-11-21 10:56	2019-11-1	Show	GitHub Exploit DB Packet Storm

289570	8.8	HIGH Network	tp-link	tl-wdr4300_firmware	TP-Link TL-WDR4300 version 3.13.31 has multiple CSRF vulnerabilities.	CWE-352 Origin Validation Error	CVE-2013-4848	2024-11-21 10:56	2019-10-26	Show	GitHub Exploit DB Packet Storm