Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 17, 2026, 2:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
258671	7.5	危険	ターボリナックス MySQL AB	-	MySQL で使用される yaSSL における複数のスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2009-4484	2010-08-3 18:59	2009-12-30	Show	GitHub Exploit DB Packet Storm

258672	2.1	注意	オラクル	-	Oracle Database Server の Export コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0901	2010-08-2 19:32	2010-07-13	Show	GitHub Exploit DB Packet Storm

258673	2.6	注意	オラクル	-	Windows 上で稼働する Oracle Database Server の Network Layer コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0900	2010-08-2 19:32	2010-07-13	Show	GitHub Exploit DB Packet Storm

258674	4.3	警告	オラクル	-	Oracle Database Server の Application Express コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0892	2010-08-2 19:32	2010-07-13	Show	GitHub Exploit DB Packet Storm

258675	6	警告	オラクル	-	Oracle Database Server の Oracle OLAP コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0902	2010-08-2 19:31	2010-07-13	Show	GitHub Exploit DB Packet Storm

258676	7.8	危険	オラクル	-	Windows 上で稼働する Oracle Database Server の Net Foundation Layer コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0903	2010-08-2 19:31	2010-07-13	Show	GitHub Exploit DB Packet Storm

258677	7.8	危険	オラクル	-	Oracle Database Server の Listener コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0911	2010-08-2 19:30	2010-07-13	Show	GitHub Exploit DB Packet Storm

258678	5.5	警告	PostgreSQL.org サイバートラスト株式会社サン・マイクロシステムズレッドハット	-	PostgreSQL における任意のパラメータ設定を削除される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-1975	2010-08-2 17:13	2010-05-19	Show	GitHub Exploit DB Packet Storm

258679	5	警告	MySQL AB	-	MySQL の mysql_uninstall_plugin 関数における任意のプラグインを削除される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-1621	2010-08-2 17:13	2010-04-6	Show	GitHub Exploit DB Packet Storm

258680	3.5	注意	オラクル	-	Oracle Fusion Middleware の Application Server Control コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-2381	2010-07-30 17:43	2010-07-13	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 17, 2026, 4:19 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
248101	5.4	MEDIUM Network	vectra	cognito	Vectra Networks Cognito Brain and Sensor before 4.2 contains a cross-site scripting (XSS) vulnerability in the Web Management Console.	CWE-79 Cross-site Scripting	CVE-2018-14890	2024-11-21 12:50	2018-09-22	Show	GitHub Exploit DB Packet Storm

248102	7.8	HIGH Local	apache	couchdb	CouchDB in Vectra Networks Cognito Brain and Sensor before 4.3 contains a local code execution vulnerability.	CWE-20 Improper Input Validation	CVE-2018-14889	2024-11-21 12:50	2018-09-22	Show	GitHub Exploit DB Packet Storm

248103	4.3	MEDIUM Network	f5	big-ip_access_policy_manager	A vulnerability in BIG-IP APM portal access 11.5.1-11.5.7, 11.6.0-11.6.3, and 12.1.0-12.1.3 discloses the BIG-IP software version in rewritten pages.	CWE-200 Information Exposure	CVE-2018-15310	2024-11-21 12:50	2018-09-13	Show	GitHub Exploit DB Packet Storm

248104	7.5	HIGH Network	lwolf	loading_docs	Insecure permissions in Lone Wolf Technologies loadingDOCS 2018-08-13 allow remote attackers to download any confidential files via https requests for predictable URLs.	CWE-732 Incorrect Permission Assignment for Critical Resource	CVE-2018-15502	2024-11-21 12:50	2018-09-13	Show	GitHub Exploit DB Packet Storm

248105	9.1	CRITICAL Network	kone	group_controller_firmware	An issue was discovered on KONE Group Controller (KGC) devices before 4.6.5. Unauthenticated Local File Inclusion and File modification is possible through the open HTTP interface by modifying the na…	CWE-829 Inclusion of Functionality from Untrusted Control Sphere	CVE-2018-15486	2024-11-21 12:50	2018-09-8	Show	GitHub Exploit DB Packet Storm

248106	9.1	CRITICAL Network	kone	group_controller_firmware	An issue was discovered on KONE Group Controller (KGC) devices before 4.6.5. FTP does not require authentication or authorization, aka KONE-03.	CWE-287 Improper Authentication	CVE-2018-15485	2024-11-21 12:50	2018-09-8	Show	GitHub Exploit DB Packet Storm

248107	9.8	CRITICAL Network	kone	group_controller_firmware	An issue was discovered on KONE Group Controller (KGC) devices before 4.6.5. Unauthenticated Remote Code Execution is possible through the open HTTP interface by modifying autoexec.bat, aka KONE-01.	CWE-78 OS Command	CVE-2018-15484	2024-11-21 12:50	2018-09-8	Show	GitHub Exploit DB Packet Storm

248108	7.5	HIGH Network	kone	group_controller_firmware	An issue was discovered on KONE Group Controller (KGC) devices before 4.6.5. Denial of Service can occur through the open HTTP interface, aka KONE-04.	CWE-20 Improper Input Validation	CVE-2018-15483	2024-11-21 12:50	2018-09-8	Show	GitHub Exploit DB Packet Storm

248109	9.6	CRITICAL Network	dokuwiki	dokuwiki	CSV Injection (aka Excel Macro Injection or Formula Injection) in /lib/plugins/usermanager/admin.php in DokuWiki 2018-04-22a and earlier allows remote attackers to exfiltrate sensitive data and to ex…	CWE-1236 Improper Neutralization of Formula Elements in a CSV File	CVE-2018-15474	2024-11-21 12:50	2018-09-8	Show	GitHub Exploit DB Packet Storm

248110	6.5	MEDIUM Network	libesedb_project	libesedb	The libesedb_key_append_data function in libesedb_key.c in libesedb through 2018-04-01 allows remote attackers to cause a heap-based buffer over-read via a crafted esedb file. NOTE: the vendor has di…	CWE-125 Out-of-bounds Read	CVE-2018-15161	2024-11-21 12:50	2018-09-1	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed