Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 13, 2026, 10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
258661	4.3	警告	オラクル	-	Oracle Industry Product Suite の Retail - Oracle Retail Place In-Season コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0864	2010-05-13 15:13	2010-04-13	Show	GitHub Exploit DB Packet Storm

258662	4.3	警告	オラクル	-	Oracle Industry Product Suite の Retail - Oracle Retail Markdown Optimization コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0862	2010-05-13 15:13	2010-04-13	Show	GitHub Exploit DB Packet Storm

258663	4.3	警告	オラクル	-	Oracle Industry Product Suite の Life Sciences - Oracle Thesaurus Management System コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0875	2010-05-13 15:12	2010-04-13	Show	GitHub Exploit DB Packet Storm

258664	4.3	警告	オラクル	-	Oracle Industry Product Suite の Life Sciences - Oracle Clinical Remote Data Capture Option コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0876	2010-05-13 15:12	2010-04-13	Show	GitHub Exploit DB Packet Storm

258665	4.3	警告	オラクル	-	Oracle Industry Product Suite の Communications - Oracle Communications Unified Inventory Management コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0874	2010-05-13 15:12	2010-04-13	Show	GitHub Exploit DB Packet Storm

258666	4	警告	オラクル	-	複数の Oracle 製品の PeopleTools コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0879	2010-05-13 15:12	2010-04-13	Show	GitHub Exploit DB Packet Storm

258667	4	警告	オラクル	-	複数の Oracle 製品の PeopleTools コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0878	2010-05-13 15:11	2010-04-13	Show	GitHub Exploit DB Packet Storm

258668	5	警告	オラクル	-	複数の Oracle 製品の PeopleTools コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0877	2010-05-13 15:11	2010-04-13	Show	GitHub Exploit DB Packet Storm

258669	4	警告	オラクル	-	複数の Oracle 製品の PeopleTools コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0880	2010-05-13 15:11	2010-04-13	Show	GitHub Exploit DB Packet Storm

258670	3.5	注意	オラクル	-	Oracle E-Business Suite の Oracle Workflow Cartridge コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0857	2010-05-13 15:10	2010-04-13	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 13, 2026, 4:20 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
247401	5.4	MEDIUM Network	trendmicro	deep_discovery_inspector	A Reflected Cross-Site Scripting (XSS) vulnerability in Trend Micro Deep Discovery Inspector 3.85 and below could allow an attacker to bypass CSRF protection and conduct an attack on vulnerable insta…	CWE-79 Cross-site Scripting	CVE-2018-15365	2024-11-21 12:50	2018-09-29	Show	GitHub Exploit DB Packet Storm

247402	9.8	CRITICAL Network	isweb	isweb	CMS ISWEB 3.5.3 is vulnerable to directory traversal and local file download, as demonstrated by moduli/downloadFile.php?file=oggetto_documenti/../.././inc/config.php (one can take the control of the…	CWE-22 Path Traversal	CVE-2018-14957	2024-11-21 12:50	2018-09-28	Show	GitHub Exploit DB Packet Storm

247403	9.8	CRITICAL Network	isweb	isweb	CMS ISWEB 3.5.3 is vulnerable to multiple SQL injection flaws. An attacker can inject malicious queries into the application and obtain sensitive information.	CWE-89 SQL Injection	CVE-2018-14956	2024-11-21 12:50	2018-09-28	Show	GitHub Exploit DB Packet Storm

247404	7.8	HIGH Local	vectra	cognito	Management Console in Vectra Networks Cognito Brain and Sensor before 4.3 contains a local privilege escalation vulnerability.	NVD-CWE-noinfo	CVE-2018-14891	2024-11-21 12:50	2018-09-22	Show	GitHub Exploit DB Packet Storm

247405	5.4	MEDIUM Network	vectra	cognito	Vectra Networks Cognito Brain and Sensor before 4.2 contains a cross-site scripting (XSS) vulnerability in the Web Management Console.	CWE-79 Cross-site Scripting	CVE-2018-14890	2024-11-21 12:50	2018-09-22	Show	GitHub Exploit DB Packet Storm

247406	7.8	HIGH Local	apache	couchdb	CouchDB in Vectra Networks Cognito Brain and Sensor before 4.3 contains a local code execution vulnerability.	CWE-20 Improper Input Validation	CVE-2018-14889	2024-11-21 12:50	2018-09-22	Show	GitHub Exploit DB Packet Storm

247407	4.3	MEDIUM Network	f5	big-ip_access_policy_manager	A vulnerability in BIG-IP APM portal access 11.5.1-11.5.7, 11.6.0-11.6.3, and 12.1.0-12.1.3 discloses the BIG-IP software version in rewritten pages.	CWE-200 Information Exposure	CVE-2018-15310	2024-11-21 12:50	2018-09-13	Show	GitHub Exploit DB Packet Storm

247408	7.5	HIGH Network	lwolf	loading_docs	Insecure permissions in Lone Wolf Technologies loadingDOCS 2018-08-13 allow remote attackers to download any confidential files via https requests for predictable URLs.	CWE-732 Incorrect Permission Assignment for Critical Resource	CVE-2018-15502	2024-11-21 12:50	2018-09-13	Show	GitHub Exploit DB Packet Storm

247409	9.1	CRITICAL Network	kone	group_controller_firmware	An issue was discovered on KONE Group Controller (KGC) devices before 4.6.5. Unauthenticated Local File Inclusion and File modification is possible through the open HTTP interface by modifying the na…	CWE-829 Inclusion of Functionality from Untrusted Control Sphere	CVE-2018-15486	2024-11-21 12:50	2018-09-8	Show	GitHub Exploit DB Packet Storm

247410	9.1	CRITICAL Network	kone	group_controller_firmware	An issue was discovered on KONE Group Controller (KGC) devices before 4.6.5. FTP does not require authentication or authorization, aka KONE-03.	CWE-287 Improper Authentication	CVE-2018-15485	2024-11-21 12:50	2018-09-8	Show	GitHub Exploit DB Packet Storm