Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":June 3, 2026, 6:08 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 257161 | 6.5 | 警告 | オラクル | - | Oracle Database の JavaVM コンポーネントにおける脆弱性 |
CWE-noinfo
情報不足 |
CVE-2010-0866 | 2010-05-12 15:17 | 2010-04-13 | Show | GitHub Exploit DB Packet Storm |
| 257162 | 7.1 | 危険 | オラクル | - | Oracle Database の Core RDBMS コンポーネントにおける脆弱性 |
CWE-noinfo
情報不足 |
CVE-2010-0860 | 2010-05-12 15:16 | 2010-04-13 | Show | GitHub Exploit DB Packet Storm |
| 257163 | 7.5 | 危険 | オラクル | - | 複数の Oracle 製品の Oracle Internet Directory コンポーネントにおける脆弱性 |
CWE-noinfo
情報不足 |
CVE-2010-0853 | 2010-05-12 15:16 | 2010-04-13 | Show | GitHub Exploit DB Packet Storm |
| 257164 | 2.6 | 注意 | シックス・アパート株式会社 | - | Movable Type におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2010-1985 | 2010-05-12 12:01 | 2010-05-12 | Show | GitHub Exploit DB Packet Storm |
| 257165 | 10 | 危険 | 日立 | - | 複数の EUR Form 製品 および EUR 製品における任意のコードが実行される脆弱性 |
CWE-noinfo
情報不足 |
- | 2010-05-11 15:16 | 2010-03-31 | Show | GitHub Exploit DB Packet Storm |
| 257166 | 6.4 | 警告 | マイクロソフト | - | Microsoft Windows における ISATAP パケットの処理に関する IPv4 ソースアドレスの制限を回避される脆弱性 |
CWE-264
認可・権限・アクセス制御 |
CVE-2010-0812 | 2010-05-11 15:16 | 2010-04-13 | Show | GitHub Exploit DB Packet Storm |
| 257167 | 7.6 | 危険 | マイクロソフト | - | Microsoft Office Visio における任意のコードを実行される脆弱性 |
CWE-94
コード・インジェクション |
CVE-2010-0256 | 2010-05-11 15:16 | 2010-04-13 | Show | GitHub Exploit DB Packet Storm |
| 257168 | 7.6 | 危険 | マイクロソフト | - | Microsoft Office Visio における任意のコードを実行される脆弱性 |
CWE-94
コード・インジェクション |
CVE-2010-0254 | 2010-05-11 15:15 | 2010-04-13 | Show | GitHub Exploit DB Packet Storm |
| 257169 | 5 | 警告 | マイクロソフト | - | Microsoft Windows の SMTP コンポーネントにおける情報漏えいの脆弱性 |
CWE-200
情報漏えい |
CVE-2010-0025 | 2010-05-11 15:15 | 2010-04-13 | Show | GitHub Exploit DB Packet Storm |
| 257170 | 5 | 警告 | マイクロソフト | - | Microsoft Windows の SMTP コンポーネントにおけるサービス運用妨害 (DoS) の脆弱性 |
CWE-20
不適切な入力確認 |
CVE-2010-0024 | 2010-05-11 15:15 | 2010-04-13 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:June 3, 2026, 4:18 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 248091 | 8.8 |
HIGH
Network |
trendmicro | email_encryption_gateway | A vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow a remote attacker to execute arbitrary SQL statements on vulnerable installations due to a flaw in the formRegistration2 class.… |
CWE-89
SQL Injection |
CVE-2018-10351 | 2024-11-21 12:41 | 2018-05-24 | Show | GitHub Exploit DB Packet Storm |
| 248092 | 6.1 |
MEDIUM
Network |
ilias | ilias | error.php in ILIAS 5.2.x through 5.3.x before 5.3.4 allows XSS via the text of a PDO exception. |
CWE-79
Cross-site Scripting |
CVE-2018-10307 | 2024-11-21 12:41 | 2018-05-18 | Show | GitHub Exploit DB Packet Storm |
| 248093 | 6.1 |
MEDIUM
Network |
ilias | ilias | Services/Form/classes/class.ilDateDurationInputGUI.php and Services/Form/classes/class.ilDateTimeInputGUI.php in ILIAS 5.1.x through 5.3.x before 5.3.4 allow XSS via an invalid date. |
CWE-79
Cross-site Scripting |
CVE-2018-10306 | 2024-11-21 12:41 | 2018-05-18 | Show | GitHub Exploit DB Packet Storm |
| 248094 | 7.0 |
HIGH
Local |
printeron | printeron | PrinterOn Enterprise 4.1.3 stores the Active Directory bind credentials using base64 encoding, which allows local users to obtain credentials for a domain user by reading the cps_config.xml file. |
CWE-522
Insufficiently Protected Credentials |
CVE-2018-10327 | 2024-11-21 12:41 | 2018-05-18 | Show | GitHub Exploit DB Packet Storm |
| 248095 | 5.4 |
MEDIUM
Network |
printeron | printeron | PrinterOn Enterprise 4.1.3 suffers from multiple authenticated stored XSS vulnerabilities via the (1) department field in the printer configuration, (2) description field in the print server configur… |
CWE-79
Cross-site Scripting |
CVE-2018-10326 | 2024-11-21 12:41 | 2018-05-18 | Show | GitHub Exploit DB Packet Storm |
| 248096 | 9.0 |
CRITICAL
Network |
phoenixcontact |
fl_switch_3005_firmware fl_switch_3005t_firmware fl_switch_3004t-fx_firmware fl_switch_3004t-fx_st_firmware fl_switch_3008_firmware fl_switch_3008t_firmware fl_switch_3006t-2fx_firm… |
All Phoenix Contact managed FL SWITCH 3xxx, 4xxx, 48xx products running firmware version 1.0 to 1.33 are prone to buffer overflows when handling very large cookies (a different vulnerability than CVE… |
CWE-119
Incorrect Access of Indexable Resource ('Range Error') |
CVE-2018-10731 | 2024-11-21 12:41 | 2018-05-18 | Show | GitHub Exploit DB Packet Storm |
| 248097 | 9.1 |
CRITICAL
Network |
phoenixcontact |
fl_switch_3005_firmware fl_switch_3005t_firmware fl_switch_3004t-fx_firmware fl_switch_3004t-fx_st_firmware fl_switch_3008_firmware fl_switch_3008t_firmware fl_switch_3006t-2fx_firm… |
All Phoenix Contact managed FL SWITCH 3xxx, 4xxx, 48xx products running firmware version 1.0 to 1.33 are prone to OS command injection. |
CWE-78
OS Command |
CVE-2018-10730 | 2024-11-21 12:41 | 2018-05-18 | Show | GitHub Exploit DB Packet Storm |
| 248098 | 5.3 |
MEDIUM
Network |
phoenixcontact |
fl_switch_3005_firmware fl_switch_3005t_firmware fl_switch_3004t-fx_firmware fl_switch_3004t-fx_st_firmware fl_switch_3008_firmware fl_switch_3008t_firmware fl_switch_3006t-2fx_firm… |
All Phoenix Contact managed FL SWITCH 3xxx, 4xxx, 48xx products running firmware version 1.0 to 1.33 allow reading the configuration file by an unauthenticated user. |
CWE-200
Information Exposure |
CVE-2018-10729 | 2024-11-21 12:41 | 2018-05-18 | Show | GitHub Exploit DB Packet Storm |
| 248099 | 8.1 |
HIGH
Network |
phoenixcontact |
fl_switch_3005_firmware fl_switch_3005t_firmware fl_switch_3004t-fx_firmware fl_switch_3004t-fx_st_firmware fl_switch_3008_firmware fl_switch_3008t_firmware fl_switch_3006t-2fx_firm… |
All Phoenix Contact managed FL SWITCH 3xxx, 4xxx, 48xx products running firmware version 1.0 to 1.33 are prone to buffer overflows (a different vulnerability than CVE-2018-10731). |
CWE-119
Incorrect Access of Indexable Resource ('Range Error') |
CVE-2018-10728 | 2024-11-21 12:41 | 2018-05-18 | Show | GitHub Exploit DB Packet Storm |
| 248100 | 8.8 |
HIGH
Network |
projectpier | projectpier | Unrestricted file upload vulnerability in the Files plugin in ProjectPier 0.88 and earlier allows remote authenticated users to execute arbitrary PHP code by uploading a file with an executable exten… |
CWE-434
Unrestricted Upload of File with Dangerous Type |
CVE-2018-10760 | 2024-11-21 12:41 | 2018-05-16 | Show | GitHub Exploit DB Packet Storm |