Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 9, 2026, 4:11 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
257981	4.3	警告	オラクル	-	Oracle Industry Product Suite の Retail - Oracle Retail Plan In-Season コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0863	2010-05-13 15:13	2010-04-13	Show	GitHub Exploit DB Packet Storm

257982	4.3	警告	オラクル	-	Oracle Industry Product Suite の Retail - Oracle Retail Place In-Season コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0864	2010-05-13 15:13	2010-04-13	Show	GitHub Exploit DB Packet Storm

257983	4.3	警告	オラクル	-	Oracle Industry Product Suite の Retail - Oracle Retail Markdown Optimization コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0862	2010-05-13 15:13	2010-04-13	Show	GitHub Exploit DB Packet Storm

257984	4.3	警告	オラクル	-	Oracle Industry Product Suite の Life Sciences - Oracle Thesaurus Management System コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0875	2010-05-13 15:12	2010-04-13	Show	GitHub Exploit DB Packet Storm

257985	4.3	警告	オラクル	-	Oracle Industry Product Suite の Life Sciences - Oracle Clinical Remote Data Capture Option コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0876	2010-05-13 15:12	2010-04-13	Show	GitHub Exploit DB Packet Storm

257986	4.3	警告	オラクル	-	Oracle Industry Product Suite の Communications - Oracle Communications Unified Inventory Management コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0874	2010-05-13 15:12	2010-04-13	Show	GitHub Exploit DB Packet Storm

257987	4	警告	オラクル	-	複数の Oracle 製品の PeopleTools コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0879	2010-05-13 15:12	2010-04-13	Show	GitHub Exploit DB Packet Storm

257988	4	警告	オラクル	-	複数の Oracle 製品の PeopleTools コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0878	2010-05-13 15:11	2010-04-13	Show	GitHub Exploit DB Packet Storm

257989	5	警告	オラクル	-	複数の Oracle 製品の PeopleTools コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0877	2010-05-13 15:11	2010-04-13	Show	GitHub Exploit DB Packet Storm

257990	4	警告	オラクル	-	複数の Oracle 製品の PeopleTools コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0880	2010-05-13 15:11	2010-04-13	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 9, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
247271	7.4	HIGH Network	synology	ssl_vpn_client	Lack of administrator control over security vulnerability in client.cgi in Synology SSL VPN Client before 1.2.5-0226 allows remote attackers to conduct man-in-the-middle attacks via the (1) command, …	NVD-CWE-noinfo	CVE-2018-13283	2024-11-21 12:46	2019-04-2	Show	GitHub Exploit DB Packet Storm

247272	5.4	MEDIUM Network	open-xchange	open-xchange_appsuite	OX App Suite 7.8.4 and earlier allows XSS. Internal reference: 58742 (Bug ID)	CWE-79 Cross-site Scripting	CVE-2018-13104	2024-11-21 12:46	2019-03-22	Show	GitHub Exploit DB Packet Storm

247273	5.4	MEDIUM Network	open-xchange	open-xchange_appsuite	OX App Suite 7.8.4 and earlier allows SSRF.	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2018-13103	2024-11-21 12:46	2019-03-22	Show	GitHub Exploit DB Packet Storm

247274	4.3	MEDIUM Network	fortinet	fortiadc fortios	A Improper Access Control in Fortinet FortiOS 6.0.2, 5.6.7 and before, FortiADC 6.1.0, 6.0.0 to 6.0.1, 5.4.0 to 5.4.4 allows attacker to obtain the LDAP server login credentials configured in FortiGa…	CWE-732 Incorrect Permission Assignment for Critical Resource	CVE-2018-13374	2024-11-21 12:46	2019-01-22	Show	GitHub Exploit DB Packet Storm

247275	9.8	CRITICAL Network	yeswiki	cercopitheque	SQL injection vulnerability in the "Bazar" page in Yeswiki Cercopitheque 2018-06-19-1 and earlier allows attackers to execute arbitrary SQL commands via the "id" parameter.	CWE-89 SQL Injection	CVE-2018-13045	2024-11-21 12:46	2019-01-3	Show	GitHub Exploit DB Packet Storm

247276	5.3	MEDIUM Network	terra-master	terramaster_operating_system	User enumeration in usertable.php in TerraMaster TOS version 3.1.03 allows attackers to list all system users via the "modgroup" parameter.	CWE-20 Improper Input Validation	CVE-2018-13361	2024-11-21 12:46	2018-11-28	Show	GitHub Exploit DB Packet Storm

247277	6.1	MEDIUM Network	terra-master	terramaster_operating_system	Cross-site scripting in Text Editor in TerraMaster TOS version 3.1.03 allows attackers to execute JavaScript via the "filename" URL parameter.	CWE-79 Cross-site Scripting	CVE-2018-13360	2024-11-21 12:46	2018-11-28	Show	GitHub Exploit DB Packet Storm

247278	8.8	HIGH Network	terra-master	terramaster_operating_system	Cross-site scripting in usertable.php in TerraMaster TOS version 3.1.03 allows attackers to execute JavaScript via the "modgroup" parameter.	CWE-79 Cross-site Scripting	CVE-2018-13359	2024-11-21 12:46	2018-11-28	Show	GitHub Exploit DB Packet Storm

247279	8.8	HIGH Network	terra-master	terramaster_operating_system	System command injection in ajaxdata.php in TerraMaster TOS version 3.1.03 allows attackers to execute system commands via the "checkName" parameter.	CWE-78 OS Command	CVE-2018-13358	2024-11-21 12:46	2018-11-28	Show	GitHub Exploit DB Packet Storm

247280	5.4	MEDIUM Network	terra-master	terramaster_operating_system	Cross-site scripting in Control Panel in TerraMaster TOS version 3.1.03 allows attackers to execute JavaScript when viewing Shared Folders via JavaScript in Shared Folders' names.	CWE-79 Cross-site Scripting	CVE-2018-13357	2024-11-21 12:46	2018-11-28	Show	GitHub Exploit DB Packet Storm