Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 9, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
257981	4.3	警告	オラクル	-	Oracle Industry Product Suite の Retail - Oracle Retail Plan In-Season コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0863	2010-05-13 15:13	2010-04-13	Show	GitHub Exploit DB Packet Storm

257982	4.3	警告	オラクル	-	Oracle Industry Product Suite の Retail - Oracle Retail Place In-Season コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0864	2010-05-13 15:13	2010-04-13	Show	GitHub Exploit DB Packet Storm

257983	4.3	警告	オラクル	-	Oracle Industry Product Suite の Retail - Oracle Retail Markdown Optimization コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0862	2010-05-13 15:13	2010-04-13	Show	GitHub Exploit DB Packet Storm

257984	4.3	警告	オラクル	-	Oracle Industry Product Suite の Life Sciences - Oracle Thesaurus Management System コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0875	2010-05-13 15:12	2010-04-13	Show	GitHub Exploit DB Packet Storm

257985	4.3	警告	オラクル	-	Oracle Industry Product Suite の Life Sciences - Oracle Clinical Remote Data Capture Option コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0876	2010-05-13 15:12	2010-04-13	Show	GitHub Exploit DB Packet Storm

257986	4.3	警告	オラクル	-	Oracle Industry Product Suite の Communications - Oracle Communications Unified Inventory Management コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0874	2010-05-13 15:12	2010-04-13	Show	GitHub Exploit DB Packet Storm

257987	4	警告	オラクル	-	複数の Oracle 製品の PeopleTools コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0879	2010-05-13 15:12	2010-04-13	Show	GitHub Exploit DB Packet Storm

257988	4	警告	オラクル	-	複数の Oracle 製品の PeopleTools コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0878	2010-05-13 15:11	2010-04-13	Show	GitHub Exploit DB Packet Storm

257989	5	警告	オラクル	-	複数の Oracle 製品の PeopleTools コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0877	2010-05-13 15:11	2010-04-13	Show	GitHub Exploit DB Packet Storm

257990	4	警告	オラクル	-	複数の Oracle 製品の PeopleTools コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0880	2010-05-13 15:11	2010-04-13	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 10, 2026, 5 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
246611	9.8	CRITICAL Network	isweb	isweb	CMS ISWEB 3.5.3 is vulnerable to directory traversal and local file download, as demonstrated by moduli/downloadFile.php?file=oggetto_documenti/../.././inc/config.php (one can take the control of the…	CWE-22 Path Traversal	CVE-2018-14957	2024-11-21 12:50	2018-09-28	Show	GitHub Exploit DB Packet Storm

246612	9.8	CRITICAL Network	isweb	isweb	CMS ISWEB 3.5.3 is vulnerable to multiple SQL injection flaws. An attacker can inject malicious queries into the application and obtain sensitive information.	CWE-89 SQL Injection	CVE-2018-14956	2024-11-21 12:50	2018-09-28	Show	GitHub Exploit DB Packet Storm

246613	7.8	HIGH Local	vectra	cognito	Management Console in Vectra Networks Cognito Brain and Sensor before 4.3 contains a local privilege escalation vulnerability.	NVD-CWE-noinfo	CVE-2018-14891	2024-11-21 12:50	2018-09-22	Show	GitHub Exploit DB Packet Storm

246614	5.4	MEDIUM Network	vectra	cognito	Vectra Networks Cognito Brain and Sensor before 4.2 contains a cross-site scripting (XSS) vulnerability in the Web Management Console.	CWE-79 Cross-site Scripting	CVE-2018-14890	2024-11-21 12:50	2018-09-22	Show	GitHub Exploit DB Packet Storm

246615	7.8	HIGH Local	apache	couchdb	CouchDB in Vectra Networks Cognito Brain and Sensor before 4.3 contains a local code execution vulnerability.	CWE-20 Improper Input Validation	CVE-2018-14889	2024-11-21 12:50	2018-09-22	Show	GitHub Exploit DB Packet Storm

246616	4.3	MEDIUM Network	f5	big-ip_access_policy_manager	A vulnerability in BIG-IP APM portal access 11.5.1-11.5.7, 11.6.0-11.6.3, and 12.1.0-12.1.3 discloses the BIG-IP software version in rewritten pages.	CWE-200 Information Exposure	CVE-2018-15310	2024-11-21 12:50	2018-09-13	Show	GitHub Exploit DB Packet Storm

246617	7.5	HIGH Network	lwolf	loading_docs	Insecure permissions in Lone Wolf Technologies loadingDOCS 2018-08-13 allow remote attackers to download any confidential files via https requests for predictable URLs.	CWE-732 Incorrect Permission Assignment for Critical Resource	CVE-2018-15502	2024-11-21 12:50	2018-09-13	Show	GitHub Exploit DB Packet Storm

246618	9.1	CRITICAL Network	kone	group_controller_firmware	An issue was discovered on KONE Group Controller (KGC) devices before 4.6.5. Unauthenticated Local File Inclusion and File modification is possible through the open HTTP interface by modifying the na…	CWE-829 Inclusion of Functionality from Untrusted Control Sphere	CVE-2018-15486	2024-11-21 12:50	2018-09-8	Show	GitHub Exploit DB Packet Storm

246619	9.1	CRITICAL Network	kone	group_controller_firmware	An issue was discovered on KONE Group Controller (KGC) devices before 4.6.5. FTP does not require authentication or authorization, aka KONE-03.	CWE-287 Improper Authentication	CVE-2018-15485	2024-11-21 12:50	2018-09-8	Show	GitHub Exploit DB Packet Storm

246620	9.8	CRITICAL Network	kone	group_controller_firmware	An issue was discovered on KONE Group Controller (KGC) devices before 4.6.5. Unauthenticated Remote Code Execution is possible through the open HTTP interface by modifying autoexec.bat, aka KONE-01.	CWE-78 OS Command	CVE-2018-15484	2024-11-21 12:50	2018-09-8	Show	GitHub Exploit DB Packet Storm