Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 15, 2026, 12:08 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
258501 7.5 危険 OpenBSD
FreeBSD
オラクル
NetBSD		 - 複数の製品の ftpd におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2008-4247 2010-08-3 19:19 2008-09-25 Show GitHub Exploit DB Packet Storm
258502 7.5 危険 ターボリナックス
MySQL AB		 - MySQL で使用される yaSSL における複数のスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2009-4484 2010-08-3 18:59 2009-12-30 Show GitHub Exploit DB Packet Storm
258503 2.1 注意 オラクル - Oracle Database Server の Export コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-0901 2010-08-2 19:32 2010-07-13 Show GitHub Exploit DB Packet Storm
258504 2.6 注意 オラクル - Windows 上で稼働する Oracle Database Server の Network Layer コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-0900 2010-08-2 19:32 2010-07-13 Show GitHub Exploit DB Packet Storm
258505 4.3 警告 オラクル - Oracle Database Server の Application Express コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-0892 2010-08-2 19:32 2010-07-13 Show GitHub Exploit DB Packet Storm
258506 6 警告 オラクル - Oracle Database Server の Oracle OLAP コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-0902 2010-08-2 19:31 2010-07-13 Show GitHub Exploit DB Packet Storm
258507 7.8 危険 オラクル - Windows 上で稼働する Oracle Database Server の Net Foundation Layer コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-0903 2010-08-2 19:31 2010-07-13 Show GitHub Exploit DB Packet Storm
258508 7.8 危険 オラクル - Oracle Database Server の Listener コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-0911 2010-08-2 19:30 2010-07-13 Show GitHub Exploit DB Packet Storm
258509 5.5 警告 PostgreSQL.org
サイバートラスト株式会社
サン・マイクロシステムズ
レッドハット		 - PostgreSQL における任意のパラメータ設定を削除される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-1975 2010-08-2 17:13 2010-05-19 Show GitHub Exploit DB Packet Storm
258510 5 警告 MySQL AB - MySQL の mysql_uninstall_plugin 関数における任意のプラグインを削除される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-1621 2010-08-2 17:13 2010-04-6 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 15, 2026, 4:10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
247421 6.1 MEDIUM
Network 		cisco webex_business_suite A vulnerability in the MyWebex component of Cisco Webex Business Suite could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack. The vulnerability is due to insu… CWE-79
Cross-site Scripting 		CVE-2018-15461 2024-11-21 12:50 2019-01-11 Show GitHub Exploit DB Packet Storm
247422 8.6 HIGH
Network 		cisco asyncos A vulnerability in the email message filtering feature of Cisco AsyncOS Software for Cisco Email Security Appliances (ESA) could allow an unauthenticated, remote attacker to cause the CPU utilization… CWE-770
 Allocation of Resources Without Limits or Throttling 		CVE-2018-15460 2024-11-21 12:50 2019-01-11 Show GitHub Exploit DB Packet Storm
247423 7.5 HIGH
Network 		cisco firepower_management_center A vulnerability in the Shell Access Filter feature of Cisco Firepower Management Center (FMC), when used in conjunction with remote authentication, could allow an unauthenticated, remote attacker to … CWE-770
 Allocation of Resources Without Limits or Throttling 		CVE-2018-15458 2024-11-21 12:50 2019-01-11 Show GitHub Exploit DB Packet Storm
247424 6.1 MEDIUM
Network 		cisco prime_infrastructure A vulnerability in the web-based management interface of Cisco Prime Infrastructure could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of th… CWE-79
Cross-site Scripting 		CVE-2018-15457 2024-11-21 12:50 2019-01-11 Show GitHub Exploit DB Packet Storm
247425 4.9 MEDIUM
Network 		cisco identity_services_engine A vulnerability in the Admin Portal of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to view saved passwords in plain text. The vulnerability is due to the incorr… CWE-522
 Insufficiently Protected Credentials 		CVE-2018-15456 2024-11-21 12:50 2019-01-11 Show GitHub Exploit DB Packet Storm
247426 8.6 HIGH
Network 		cisco email_security_appliance_firmware A vulnerability in the Secure/Multipurpose Internet Mail Extensions (S/MIME) Decryption and Verification or S/MIME Public Key Harvesting features of Cisco AsyncOS Software for Cisco Email Security Ap… CWE-787
 Out-of-bounds Write 		CVE-2018-15453 2024-11-21 12:50 2019-01-11 Show GitHub Exploit DB Packet Storm
247427 7.1 HIGH
Local 		expressvpn expressvpn An issue was discovered in ExpressVPN on Windows. The Xvpnd.exe process (which runs as a service with SYSTEM privileges) listens on TCP port 2015, which is used as an RPC interface for communication … CWE-22
Path Traversal 		CVE-2018-15490 2024-11-21 12:50 2019-01-3 Show GitHub Exploit DB Packet Storm
247428 7.8 HIGH
Local 		skydevices sky_elite_6.0l\+_firmware The Sky Elite 6.0L+ Android device with a build fingerprint of SKY/x6069_trx_l601_sky/x6069_trx_l601_sky:6.0/MRA58K/1482897127:user/release-keys contains a pre-installed platform app with a package n… CWE-78
OS Command  		CVE-2018-15007 2024-11-21 12:50 2018-12-29 Show GitHub Exploit DB Packet Storm
247429 5.5 MEDIUM
Local 		zteusa zte_zmax_champ_firmware The ZTE ZMAX Champ Android device with a build fingerprint of ZTE/Z917VL/fortune:6.0.1/MMB29M/20170327.120922:user/release-keys contains a pre-installed platform app with a package name of com.androi… NVD-CWE-noinfo
CVE-2018-15006 2024-11-21 12:50 2018-12-29 Show GitHub Exploit DB Packet Storm
247430 7.1 HIGH
Local 		zteusa zte_zmax_champ_firmware The ZTE ZMAX Champ Android device with a build fingerprint of ZTE/Z917VL/fortune:6.0.1/MMB29M/20170327.120922:user/release-keys contains a pre-installed platform app with a package name of com.zte.zd… NVD-CWE-noinfo
CWE-862
 Missing Authorization 		CVE-2018-15005 2024-11-21 12:50 2018-12-29 Show GitHub Exploit DB Packet Storm