Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 11, 2026, 2 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
258201 5 警告 オラクル - Oracle Fusion Middleware の Portal コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-0856 2010-05-12 15:18 2010-04-13 Show GitHub Exploit DB Packet Storm
258202 5 警告 オラクル - Oracle Fusion Middleware の Oracle Internet Directory コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-0872 2010-05-12 15:18 2010-04-13 Show GitHub Exploit DB Packet Storm
258203 2.1 注意 オラクル - Oracle Database の Audit コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-0854 2010-05-12 15:18 2010-04-13 Show GitHub Exploit DB Packet Storm
258204 3.6 注意 オラクル - Oracle Database の Change Data Capture コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-0870 2010-05-12 15:18 2010-04-13 Show GitHub Exploit DB Packet Storm
258205 4 警告 オラクル - Oracle Database の XML DB コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-0851 2010-05-12 15:17 2010-04-13 Show GitHub Exploit DB Packet Storm
258206 4 警告 オラクル - Oracle Database の JavaVM コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-0867 2010-05-12 15:17 2010-04-13 Show GitHub Exploit DB Packet Storm
258207 5.5 警告 オラクル - Oracle Database の XML DB コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-0852 2010-05-12 15:17 2010-04-13 Show GitHub Exploit DB Packet Storm
258208 6.5 警告 オラクル - Oracle Database の JavaVM コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-0866 2010-05-12 15:17 2010-04-13 Show GitHub Exploit DB Packet Storm
258209 7.1 危険 オラクル - Oracle Database の Core RDBMS コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-0860 2010-05-12 15:16 2010-04-13 Show GitHub Exploit DB Packet Storm
258210 7.5 危険 オラクル - 複数の Oracle 製品の Oracle Internet Directory コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-0853 2010-05-12 15:16 2010-04-13 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 11, 2026, 5:13 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
265481 6.1 MEDIUM
Network 		mautic
acquia 		mautic Mautic version 2.1.0 - 2.11.0 is vulnerable to an inline JS XSS attack when using Mautic forms on a Mautic landing page using GET parameters to pre-populate the form. CWE-79
Cross-site Scripting 		CVE-2017-1000488 2024-11-21 12:04 2018-01-4 Show GitHub Exploit DB Packet Storm
265482 9.8 CRITICAL
Network 		awstats
debian 		awstats
debian_linux 		Awstats version 7.6 and earlier is vulnerable to a path traversal flaw in the handling of the "config" and "migrate" parameters resulting in unauthenticated remote code execution. CWE-22
Path Traversal 		CVE-2017-1000501 2024-11-21 12:04 2018-01-4 Show GitHub Exploit DB Packet Storm
265483 5.4 MEDIUM
Network 		lavalite lavalite LavaLite version 5.2.4 is vulnerable to stored cross-site scripting vulnerability, within the blog creation page, which can result in disruption of service and execution of javascript code. CWE-79
Cross-site Scripting 		CVE-2017-1000467 2024-11-21 12:04 2018-01-4 Show GitHub Exploit DB Packet Storm
265484 8.8 HIGH
Network 		phpmyadmin phpmyadmin phpMyAdmin versions 4.7.x (prior to 4.7.6.1/4.7.7) are vulnerable to a CSRF weakness. By deceiving a user to click on a crafted URL, it is possible to perform harmful database operations such as dele… CWE-352
 Origin Validation Error 		CVE-2017-1000499 2024-11-21 12:04 2018-01-3 Show GitHub Exploit DB Packet Storm
265485 7.8 HIGH
Local 		androidsvg_project androidsvg AndroidSVG version 1.2.2 is vulnerable to XXE attacks in the SVG parsing component resulting in denial of service and possibly remote code execution CWE-611
XXE 		CVE-2017-1000498 2024-11-21 12:04 2018-01-3 Show GitHub Exploit DB Packet Storm
265486 9.8 CRITICAL
Network 		pepperminty-wiki_project pepperminty-wiki Pepperminty-Wiki version 0.15 is vulnerable to XXE attacks in the getsvgsize function resulting in denial of service and possibly remote code execution CWE-611
XXE 		CVE-2017-1000497 2024-11-21 12:04 2018-01-3 Show GitHub Exploit DB Packet Storm
265487 8.8 HIGH
Network 		commsy commsy Commsy version 9.0.0 is vulnerable to XXE attacks in the configuration import functionality resulting in denial of service and possibly remote execution of code. CWE-611
XXE 		CVE-2017-1000496 2024-11-21 12:04 2018-01-3 Show GitHub Exploit DB Packet Storm
265488 5.4 MEDIUM
Network 		quickappscms quickapps_cms QuickApps CMS version 2.0.0 is vulnerable to Stored Cross-site Scripting in the user's real name field resulting in denial of service and performing unauthorised actions with an administrator user's … CWE-79
Cross-site Scripting 		CVE-2017-1000495 2024-11-21 12:04 2018-01-3 Show GitHub Exploit DB Packet Storm
265489 7.8 HIGH
Local 		miniupnp_project miniupnpd Uninitialized stack variable vulnerability in NameValueParserEndElt (upnpreplyparse.c) in miniupnpd < 2.0 allows an attacker to cause Denial of Service (Segmentation fault and Memory Corruption) or p… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2017-1000494 2024-11-21 12:04 2018-01-3 Show GitHub Exploit DB Packet Storm
265490 9.8 CRITICAL
Network 		rocket.chat rocket.chat Rocket.Chat Server version 0.59 and prior is vulnerable to a NoSQL injection leading to administrator account takeover CWE-74
Injection 		CVE-2017-1000493 2024-11-21 12:04 2018-01-3 Show GitHub Exploit DB Packet Storm