Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 13, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
258351 7.8 危険 オラクル - Windows 上で稼働する Oracle Database Server の Net Foundation Layer コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-0903 2010-08-2 19:31 2010-07-13 Show GitHub Exploit DB Packet Storm
258352 7.8 危険 オラクル - Oracle Database Server の Listener コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-0911 2010-08-2 19:30 2010-07-13 Show GitHub Exploit DB Packet Storm
258353 5.5 警告 PostgreSQL.org
サイバートラスト株式会社
サン・マイクロシステムズ
レッドハット		 - PostgreSQL における任意のパラメータ設定を削除される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-1975 2010-08-2 17:13 2010-05-19 Show GitHub Exploit DB Packet Storm
258354 5 警告 MySQL AB - MySQL の mysql_uninstall_plugin 関数における任意のプラグインを削除される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-1621 2010-08-2 17:13 2010-04-6 Show GitHub Exploit DB Packet Storm
258355 3.5 注意 オラクル - Oracle Fusion Middleware の Application Server Control コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-2381 2010-07-30 17:43 2010-07-13 Show GitHub Exploit DB Packet Storm
258356 3.5 注意 オラクル - Oracle Fusion Middleware の Application Server Control コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-0081 2010-07-30 17:42 2010-07-13 Show GitHub Exploit DB Packet Storm
258357 4.3 警告 オラクル - Oracle Fusion Middleware の Wireless コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-0835 2010-07-30 17:42 2010-07-13 Show GitHub Exploit DB Packet Storm
258358 6.4 警告 オラクル - Oracle Fusion Middleware の WebLogic Server コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-2375 2010-07-30 17:42 2010-07-13 Show GitHub Exploit DB Packet Storm
258359 9.3 危険 マイクロソフト - Microsoft Office Outlook における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2010-0266 2010-07-30 17:42 2010-07-13 Show GitHub Exploit DB Packet Storm
258360 9.3 危険 マイクロソフト - Microsoft Office Access の FieldList の ActiveX コントロール における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2010-1881 2010-07-30 17:41 2010-07-13 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 13, 2026, 4:20 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
246311 4.3 MEDIUM
Network 		wisetail learning_management_system Wisetail Learning Ecosystem (LE) through v4.11.6 allows insecure direct object reference (IDOR) attacks to access non-purchased course contents (quiz / test) via a modified id parameter. CWE-639
 Authorization Bypass Through User-Controlled Key 		CVE-2018-16971 2024-11-21 12:53 2018-09-13 Show GitHub Exploit DB Packet Storm
246312 4.3 MEDIUM
Network 		wisetail learning_management_system Wisetail Learning Ecosystem (LE) through v4.11.6 allows insecure direct object reference (IDOR) attacks to download non-purchased course files via a modified id parameter. CWE-538
 File and Directory Information Exposure 		CVE-2018-16970 2024-11-21 12:53 2018-09-13 Show GitHub Exploit DB Packet Storm
246313 7.8 HIGH
Local 		webroot secureanywhere Webroot SecureAnywhere before 9.0.8.34 on macOS mishandles access to the driver by a process that lacks root privileges. CWE-123
 Write-what-where Condition 		CVE-2018-16962 2024-11-21 12:53 2018-09-13 Show GitHub Exploit DB Packet Storm
246314 5.4 MEDIUM
Network 		pluck-cms pluck Pluck 4.7.7 allows XSS via an SVG file that contains Javascript in a SCRIPT element, and is uploaded via pages->manage under admin.php?action=files. CWE-79
Cross-site Scripting 		CVE-2018-16729 2024-11-21 12:53 2018-09-13 Show GitHub Exploit DB Packet Storm
246315 5.4 MEDIUM
Network 		feindura feindura feindura 2.0.7 allows XSS via the tags field of a new page created at index.php?category=0&page=new. CWE-79
Cross-site Scripting 		CVE-2018-16728 2024-11-21 12:53 2018-09-13 Show GitHub Exploit DB Packet Storm
246316 5.4 MEDIUM
Network 		razorcms razorcms razorCMS 3.4.7 allows Stored XSS via the keywords of the homepage within the settings component. CWE-79
Cross-site Scripting 		CVE-2018-16727 2024-11-21 12:53 2018-09-13 Show GitHub Exploit DB Packet Storm
246317 5.4 MEDIUM
Network 		razorcms razorcms razorCMS 3.4.7 allows HTML injection via the description of the homepage within the settings component. CWE-79
Cross-site Scripting 		CVE-2018-16726 2024-11-21 12:53 2018-09-13 Show GitHub Exploit DB Packet Storm
246318 5.4 MEDIUM
Network 		dlink dir-600m_firmware D-Link DIR-600M devices allow XSS via the Hostname and Username fields in the Dynamic DNS Configuration page. CWE-79
Cross-site Scripting 		CVE-2018-16605 2024-11-21 12:53 2018-09-13 Show GitHub Exploit DB Packet Storm
246319 6.5 MEDIUM
Adjacent 		inteno dg400_firmware Inteno DG400 WU7U_ELION3.11.6-170614_1328 devices allow remote attackers to cause a denial of service (connectivity loss) via a series of packets with random MAC addresses, as demonstrated by macof. NVD-CWE-noinfo
CVE-2018-16950 2024-11-21 12:53 2018-09-12 Show GitHub Exploit DB Packet Storm
246320 8.0 HIGH
Network 		xunfeng_project xunfeng xunfeng 0.2.0 allows command execution via CSRF because masscan.py mishandles backquote characters, a related issue to CVE-2018-16832. CWE-352
 Origin Validation Error 		CVE-2018-16951 2024-11-21 12:53 2018-09-12 Show GitHub Exploit DB Packet Storm