Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 7, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
256991	7.5	危険	ターボリナックス MySQL AB	-	MySQL で使用される yaSSL における複数のスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2009-4484	2010-08-3 18:59	2009-12-30	Show	GitHub Exploit DB Packet Storm

256992	2.1	注意	オラクル	-	Oracle Database Server の Export コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0901	2010-08-2 19:32	2010-07-13	Show	GitHub Exploit DB Packet Storm

256993	2.6	注意	オラクル	-	Windows 上で稼働する Oracle Database Server の Network Layer コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0900	2010-08-2 19:32	2010-07-13	Show	GitHub Exploit DB Packet Storm

256994	4.3	警告	オラクル	-	Oracle Database Server の Application Express コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0892	2010-08-2 19:32	2010-07-13	Show	GitHub Exploit DB Packet Storm

256995	6	警告	オラクル	-	Oracle Database Server の Oracle OLAP コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0902	2010-08-2 19:31	2010-07-13	Show	GitHub Exploit DB Packet Storm

256996	7.8	危険	オラクル	-	Windows 上で稼働する Oracle Database Server の Net Foundation Layer コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0903	2010-08-2 19:31	2010-07-13	Show	GitHub Exploit DB Packet Storm

256997	7.8	危険	オラクル	-	Oracle Database Server の Listener コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0911	2010-08-2 19:30	2010-07-13	Show	GitHub Exploit DB Packet Storm

256998	5.5	警告	PostgreSQL.org サイバートラスト株式会社サン・マイクロシステムズレッドハット	-	PostgreSQL における任意のパラメータ設定を削除される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-1975	2010-08-2 17:13	2010-05-19	Show	GitHub Exploit DB Packet Storm

256999	5	警告	MySQL AB	-	MySQL の mysql_uninstall_plugin 関数における任意のプラグインを削除される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-1621	2010-08-2 17:13	2010-04-6	Show	GitHub Exploit DB Packet Storm

257000	3.5	注意	オラクル	-	Oracle Fusion Middleware の Application Server Control コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-2381	2010-07-30 17:43	2010-07-13	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 7, 2026, 4:13 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
246261	6.1	MEDIUM Network	seacms	seacms	SeaCMS 6.61 has two XSS issues in the admin_config.php file via certain form fields.	CWE-79 Cross-site Scripting	CVE-2018-14517	2024-11-21 12:49	2018-07-23	Show	GitHub Exploit DB Packet Storm

246262	9.8	CRITICAL Network	wuzhi_cms_project	wuzhi_cms	A SQL injection was discovered in WUZHI CMS 4.1.0 that allows remote attackers to inject a malicious SQL statement via the index.php?m=promote&f=index&v=search keywords parameter.	CWE-89 SQL Injection	CVE-2018-14515	2024-11-21 12:49	2018-07-23	Show	GitHub Exploit DB Packet Storm

246263	9.8	CRITICAL Network	icmsdev	icms	An SSRF vulnerability was discovered in idreamsoft iCMS V7.0.9 that allows attackers to read sensitive files, access an intranet, or possibly have unspecified other impact.	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2018-14514	2024-11-21 12:49	2018-07-23	Show	GitHub Exploit DB Packet Storm

246264	6.1	MEDIUM Network	wuzhi_cms_project	wuzhi_cms	An XSS vulnerability was discovered in WUZHI CMS 4.1.0. There is persistent XSS that allows remote attackers to inject arbitrary web script or HTML via the form[content] parameter to the index.php?m=…	CWE-79 Cross-site Scripting	CVE-2018-14513	2024-11-21 12:49	2018-07-23	Show	GitHub Exploit DB Packet Storm

246265	6.1	MEDIUM Network	wuzhicms	wuzhi_cms	An XSS vulnerability was discovered in WUZHI CMS 4.1.0. There is persistent XSS that allows remote attackers to inject arbitrary web script or HTML via the form[nickname] parameter to the index.php?m…	CWE-79 Cross-site Scripting	CVE-2018-14512	2024-11-21 12:49	2018-07-23	Show	GitHub Exploit DB Packet Storm

246266	8.8	HIGH Network	mitmproxy	mitmproxy	mitmweb in mitmproxy v4.0.3 allows DNS Rebinding attacks, related to tools/web/app.py.	CWE-20 Improper Input Validation	CVE-2018-14505	2024-11-21 12:49	2018-07-23	Show	GitHub Exploit DB Packet Storm

246267	9.8	CRITICAL Network	joyplus_project	joyplus-cms	manager/admin_ajax.php in joyplus-cms 1.6.0 has SQL Injection, as demonstrated by crafted POST data beginning with an "m_id=1 AND SLEEP(5)" substring.	CWE-89 SQL Injection	CVE-2018-14501	2024-11-21 12:49	2018-07-23	Show	GitHub Exploit DB Packet Storm

246268	6.1	MEDIUM Network	joyplus-cms_project	joyplus-cms	joyplus-cms 1.6.0 has XSS via the manager/collect/collect_vod_zhuiju.php keyword parameter.	CWE-79 Cross-site Scripting	CVE-2018-14500	2024-11-21 12:49	2018-07-23	Show	GitHub Exploit DB Packet Storm

246269	7.5	HIGH Network	tendacn	ac7_firmware ac9_firmware ac10_firmware ac15_firmware ac18_firmware	Tenda AC7 through V15.03.06.44_CN, AC9 through V15.03.05.19(6318)_CN, and AC10 through V15.03.06.23_CN devices have a Stack-based Buffer Overflow via a long limitSpeed or limitSpeedup parameter to an…	CWE-787 Out-of-bounds Write	CVE-2018-14492	2024-11-21 12:49	2018-07-21	Show	GitHub Exploit DB Packet Storm

246270	6.1	MEDIUM Network	goodoldweb	orange_forum	views/auth.go in Orange Forum 1.4.0 allows Open Redirection via the next parameter to /login or /signup.	CWE-601 Open Redirect	CVE-2018-14474	2024-11-21 12:49	2018-07-21	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed