Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 17, 2026, noon

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
258671	2.6	注意	オラクル	-	Windows 上で稼働する Oracle Database Server の Network Layer コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0900	2010-08-2 19:32	2010-07-13	Show	GitHub Exploit DB Packet Storm

258672	4.3	警告	オラクル	-	Oracle Database Server の Application Express コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0892	2010-08-2 19:32	2010-07-13	Show	GitHub Exploit DB Packet Storm

258673	6	警告	オラクル	-	Oracle Database Server の Oracle OLAP コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0902	2010-08-2 19:31	2010-07-13	Show	GitHub Exploit DB Packet Storm

258674	7.8	危険	オラクル	-	Windows 上で稼働する Oracle Database Server の Net Foundation Layer コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0903	2010-08-2 19:31	2010-07-13	Show	GitHub Exploit DB Packet Storm

258675	7.8	危険	オラクル	-	Oracle Database Server の Listener コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0911	2010-08-2 19:30	2010-07-13	Show	GitHub Exploit DB Packet Storm

258676	5.5	警告	PostgreSQL.org サイバートラスト株式会社サン・マイクロシステムズレッドハット	-	PostgreSQL における任意のパラメータ設定を削除される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-1975	2010-08-2 17:13	2010-05-19	Show	GitHub Exploit DB Packet Storm

258677	5	警告	MySQL AB	-	MySQL の mysql_uninstall_plugin 関数における任意のプラグインを削除される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-1621	2010-08-2 17:13	2010-04-6	Show	GitHub Exploit DB Packet Storm

258678	3.5	注意	オラクル	-	Oracle Fusion Middleware の Application Server Control コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-2381	2010-07-30 17:43	2010-07-13	Show	GitHub Exploit DB Packet Storm

258679	3.5	注意	オラクル	-	Oracle Fusion Middleware の Application Server Control コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0081	2010-07-30 17:42	2010-07-13	Show	GitHub Exploit DB Packet Storm

258680	4.3	警告	オラクル	-	Oracle Fusion Middleware の Wireless コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0835	2010-07-30 17:42	2010-07-13	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 17, 2026, 4:19 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
253841	9.8	CRITICAL Network	php netapp	php storage_automation_store	PHP 7.x through 7.1.5 allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a long string because of an Integer ov…	CWE-190 Integer Overflow or Wraparound	CVE-2017-9120	2024-11-21 12:35	2018-08-3	Show	GitHub Exploit DB Packet Storm

253842	7.5	HIGH Network	php netapp	php storage_automation_store	PHP 7.1.5 has an Out of bounds access in php_pcre_replace_impl via a crafted preg_replace call.	CWE-125 Out-of-bounds Read	CVE-2017-9118	2024-11-21 12:35	2018-08-3	Show	GitHub Exploit DB Packet Storm

253843	7.5	HIGH Network	rockwellautomation	allen-bradley_l30erms_firmware	Improperly implemented option-field processing in the TCP/IP stack on Allen-Bradley L30ERMS safety devices v30 and earlier causes a denial of service. When a crafted TCP packet is received, the devic…	CWE-20 Improper Input Validation	CVE-2017-9312	2024-11-21 12:35	2018-06-26	Show	GitHub Exploit DB Packet Storm

253844	8.8	HIGH Network	dahuasecurity	xvr5x16_firmware xvr5x08_firmware xvr5x04_firmware xvr7x16_firmware ipc-hdbw4xxx_firmware ipc-hdbw5xxx_firmware	Privilege escalation vulnerability found in some Dahua IP devices. Attacker in possession of low privilege account can gain access to credential information of high privilege account and further obta…	NVD-CWE-noinfo	CVE-2017-9317	2024-11-21 12:35	2018-05-24	Show	GitHub Exploit DB Packet Storm

253845	7.5	HIGH Network	netiq	identity_manager	IDM 4.6 Identity Applications prior to 4.6.2.1 may expose sensitive information.	CWE-200 Information Exposure	CVE-2017-9284	2024-11-21 12:35	2018-04-27	Show	GitHub Exploit DB Packet Storm

253846	6.1	MEDIUM Network	netiq	identity_reporting	NetIQ Identity Reporting, in versions prior to 5.5 Service Pack 1, is susceptible to an XSS attack.	CWE-79 Cross-site Scripting	CVE-2017-9275	2024-11-21 12:35	2018-04-27	Show	GitHub Exploit DB Packet Storm

253847	9.8	CRITICAL Network	netiq microfocus	edirectory	NetIQ eDirectory before 9.0 SP4 did not enforce login restrictions when "ebaclient" was used, allowing unpermitted access to eDirectory services.	CWE-287 Improper Authentication	CVE-2017-9285	2024-11-21 12:35	2018-03-3	Show	GitHub Exploit DB Packet Storm

253848	7.5	HIGH Network	netiq	identity_manager	Some NetIQ Identity Manager Applications before Identity Manager 4.5.6.1 included the session token in GET URLs, potentially allowing exposure of user sessions to untrusted third parties via proxies,…	CWE-200 Information Exposure	CVE-2017-9280	2024-11-21 12:35	2018-03-3	Show	GitHub Exploit DB Packet Storm

253849	7.2	HIGH Network	netiq	identity_manager	NetIQ Identity Manager before 4.5.6.1 allowed uploading files with double extensions or non-image content in the Themes handling of the User Application Administration, allowing malicious user admini…	CWE-20 Improper Input Validation	CVE-2017-9279	2024-11-21 12:35	2018-03-3	Show	GitHub Exploit DB Packet Storm

253850	9.8	CRITICAL Network	netiq	identity_manager	The NetIQ Identity Manager Oracle EBS driver before 4.0.2.0 sent EBS logs containing the driver authentication password, potentially disclosing this to attackers able to read the EBS tables.	CWE-532 Inclusion of Sensitive Information in Log Files	CVE-2017-9278	2024-11-21 12:35	2018-03-3	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed