Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 21, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
258351	4	警告	オラクル	-	Oracle Solaris および OpenSolaris の Solaris コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-3515	2010-11-2 15:52	2010-10-12	Show	GitHub Exploit DB Packet Storm

258352	4.3	警告	オラクル	-	Oracle Sun Products Suite の Oracle iPlanet Web Server コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-3514	2010-11-2 15:52	2010-10-12	Show	GitHub Exploit DB Packet Storm

258353	4.9	警告	オラクル	-	Oracle Solaris および OpenSolaris における Kernel/X86 の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2010-3517	2010-11-2 15:51	2010-10-12	Show	GitHub Exploit DB Packet Storm

258354	5.8	警告	オラクル	-	Oracle Sun Products Suite の Oracle iPlanet Web Server コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-3545	2010-11-2 15:51	2010-10-12	Show	GitHub Exploit DB Packet Storm

258355	6.3	警告	オラクル	-	Oracle Solaris における su の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2010-3503	2010-11-2 15:51	2010-10-12	Show	GitHub Exploit DB Packet Storm

258356	9.3	危険	アップルサイバートラスト株式会社ターボリナックス FreeType Project オラクルレッドハット	-	FreeType 2 における CFF フォントの処理に脆弱性	CWE-119 バッファエラー	CVE-2010-1797	2010-11-2 15:24	2010-08-9	Show	GitHub Exploit DB Packet Storm

258357	6.6	警告	オラクル	-	Oracle Solaris における Live Upgrade の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2010-3507	2010-11-1 15:41	2010-10-12	Show	GitHub Exploit DB Packet Storm

258358	10	危険	オラクル	-	Oracle Solaris における Scheduler の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2010-3509	2010-11-1 15:41	2010-10-12	Show	GitHub Exploit DB Packet Storm

258359	4.3	警告	オラクル	-	Oracle Fusion Middleware の Forms コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-2396	2010-11-1 15:41	2010-10-12	Show	GitHub Exploit DB Packet Storm

258360	4.3	警告	オラクル	-	Oracle Fusion Middleware の Cabo/UIX コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-2410	2010-11-1 15:41	2010-10-12	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 22, 2026, 4 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
250541	9.1	CRITICAL Network	zohocorp	manageengine_applications_manager	Incorrect Access Control in CustomFieldsFeedServlet in Zoho ManageEngine Applications Manager Version 13 before build 13740 allows an attacker to delete any file and read certain files on the server …	CWE-20 Improper Input Validation	CVE-2018-11808	2024-11-21 12:44	2018-06-6	Show	GitHub Exploit DB Packet Storm

250542	8.8	HIGH Network	apache	hadoop	Web endpoint authentication check is broken in Apache Hadoop 3.0.0-alpha4, 3.0.0-beta1, and 3.0.0. Authenticated users may impersonate any user even if no proxy user is configured.	CWE-306 Missing Authentication for Critical Function	CVE-2018-11764	2024-11-21 12:43	2020-10-22	Show	GitHub Exploit DB Packet Storm

250543	7.5	HIGH Network	apache	hadoop	In Apache Hadoop versions 3.0.0-alpha2 to 3.0.0, 2.9.0 to 2.9.2, 2.8.0 to 2.8.5, any users can access some servlets without authentication when Kerberos authentication is enabled and SPNEGO through H…	CWE-287 Improper Authentication	CVE-2018-11765	2024-11-21 12:43	2020-10-1	Show	GitHub Exploit DB Packet Storm

250544	5.4	MEDIUM Adjacent	puppet	puppet_server	Previous versions of Puppet Agent didn't verify the peer in the SSL connection prior to downloading the CRL. This issue is resolved in Puppet Agent 6.4.0.	CWE-295 Improper Certificate Validation	CVE-2018-11751	2024-11-21 12:43	2019-12-17	Show	GitHub Exploit DB Packet Storm

250545	7.5	HIGH Network	apache	hadoop	In Apache Hadoop 3.1.0 to 3.1.1, 3.0.0-alpha1 to 3.0.3, 2.9.0 to 2.9.1, and 2.0.0-alpha to 2.8.4, the user/group information can be corrupted across storing in fsimage and reading back from fsimage.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2018-11768	2024-11-21 12:43	2019-10-4	Show	GitHub Exploit DB Packet Storm

250546	9.8	CRITICAL Network	eventum_project	eventum	Controller/ListController.php in Eventum 3.5.0 is vulnerable to Deserialization of Untrusted Data. Fixed in version 3.5.2.	CWE-502 Deserialization of Untrusted Data	CVE-2018-11569	2024-11-21 12:43	2019-09-6	Show	GitHub Exploit DB Packet Storm

250547	8.1	HIGH Network	cloudera	cloudera_manager	Cloudera Manager through 5.15 has Incorrect Access Control.	CWE-284 Improper Access Control	CVE-2018-11744	2024-11-21 12:43	2019-07-11	Show	GitHub Exploit DB Packet Storm

250548	6.1	MEDIUM Network	e107	e107	In e107 v2.1.7, output without filtering results in XSS.	CWE-79 Cross-site Scripting	CVE-2018-11734	2024-11-21 12:43	2019-07-11	Show	GitHub Exploit DB Packet Storm

250549	9.8	CRITICAL Network	fasterxml redhat oracle	jackson-databind openshift_container_platform retail_customer_management_and_segmentation_foundation clusterware global_lifecycle_management_opatch utilities_advanced_spatial_and_opera…	An issue was discovered in FasterXML jackson-databind 2.0.0 through 2.9.5. Use of Jackson default typing along with a gadget class from iBatis allows exfiltration of content. Fixed in 2.7.9.4, 2.8.11…	CWE-502 Deserialization of Untrusted Data	CVE-2018-11307	2024-11-21 12:43	2019-07-10	Show	GitHub Exploit DB Packet Storm

250550	4.6	MEDIUM Network	otrs debian	otrs debian_linux	An issue was discovered in Open Ticket Request System (OTRS) 6.0.x through 6.0.7. A carefully constructed email could be used to inject and execute arbitrary stylesheet or JavaScript code in a logged…	NVD-CWE-noinfo	CVE-2018-11563	2024-11-21 12:43	2019-07-8	Show	GitHub Exploit DB Packet Storm