Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 30, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
258691	5.5	警告	オラクル	-	Oracle Industry Applications の InForm コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2011-0855	2011-05-17 09:45	2011-04-19	Show	GitHub Exploit DB Packet Storm

258692	5.5	警告	オラクル	-	Oracle PeopleSoft Enterprise HRMS における ePerformance に関する脆弱性	CWE-noinfo 情報不足	CVE-2011-0854	2011-05-17 09:44	2011-04-19	Show	GitHub Exploit DB Packet Storm

258693	5.5	警告	オラクル	-	Oracle PeopleSoft Enterprise HRMS における ePerformance に関する脆弱性	CWE-noinfo 情報不足	CVE-2011-0853	2011-05-17 09:43	2011-04-19	Show	GitHub Exploit DB Packet Storm

258694	5.5	警告	オラクル	-	Oracle PeopleSoft Enterprise ELS における Enterprise Learning Mgmt に関する脆弱性	CWE-noinfo 情報不足	CVE-2011-0851	2011-05-17 09:41	2011-04-19	Show	GitHub Exploit DB Packet Storm

258695	5.5	警告	オラクル	-	Oracle PeopleSoft Enterprise CRM における Order Capture に関する脆弱性	CWE-noinfo 情報不足	CVE-2011-0850	2011-05-17 09:28	2011-04-19	Show	GitHub Exploit DB Packet Storm

258696	4.3	警告	オラクル	-	Oracle Java Dynamic Management Kit の HTML Adaptor における脆弱性	CWE-noinfo 情報不足	CVE-2011-0849	2011-05-17 09:27	2011-04-19	Show	GitHub Exploit DB Packet Storm

258697	4.3	警告	サイバートラスト株式会社 Mozilla Foundation レッドハットオラクル	-	複数の Mozilla 製品におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-2769	2011-05-17 09:01	2010-09-7	Show	GitHub Exploit DB Packet Storm

258698	4.3	警告	サイバートラスト株式会社 Mozilla Foundation レッドハットオラクル	-	複数の Mozilla 製品におけるクロスサイトスクリプティングに対する保護メカニズムを回避される脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-2768	2011-05-17 09:00	2010-09-7	Show	GitHub Exploit DB Packet Storm

258699	4.3	警告	サイバートラスト株式会社 Mozilla Foundation レッドハットオラクル	-	複数の Mozilla 製品におけるイントラネット上の Web サーバの存在を発見される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-2764	2011-05-17 08:59	2010-09-7	Show	GitHub Exploit DB Packet Storm

258700	6.8	警告	サイバートラスト株式会社 Mozilla Foundation レッドハットオラクル	-	Mozilla 製品の SafeJSObjectWrapper 実装におけるクローム特権で任意の JavaScript コードを実行される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-2762	2011-05-17 08:56	2010-09-7	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:July 1, 2026, 4:27 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
271461	9.8	CRITICAL Network	cloudfoundry	cf-release routing-release	An issue was discovered in Cloud Foundry Foundation routing-release versions prior to 0.142.0 and cf-release versions 203 to 231. Incomplete validation logic in JSON Web Token (JWT) libraries can all…	CWE-20 Improper Input Validation	CVE-2016-8218	2024-11-21 11:59	2017-06-13	Show	GitHub Exploit DB Packet Storm

271462	7.5	HIGH Network	lenovo	lenovo_service_bridge	In Lenovo Service Bridge before version 4, a bug found in the signature verification logic of the code signing certificate could be exploited by an attacker to insert a forged code signing certificat…	CWE-295 Improper Certificate Validation	CVE-2016-8231	2024-11-21 11:59	2017-06-5	Show	GitHub Exploit DB Packet Storm

271463	7.5	HIGH Network	lenovo	lenovo_service_bridge	In Lenovo Service Bridge before version 4, an insecure HTTP connection is used by LSB to send system serial number, machine type and model and product name to Lenovo's servers.	CWE-200 Information Exposure	CVE-2016-8230	2024-11-21 11:59	2017-06-5	Show	GitHub Exploit DB Packet Storm

271464	8.8	HIGH Network	lenovo	lenovo_service_bridge	A cross-site request forgery vulnerability in Lenovo Service Bridge before version 4 could be exploited by an attacker with access to the DHCP server used by the system where LSB is installed.	CWE-352 Origin Validation Error	CVE-2016-8229	2024-11-21 11:59	2017-06-5	Show	GitHub Exploit DB Packet Storm

271465	7.8	HIGH Local	lenovo	lenovo_service_bridge	In Lenovo Service Bridge before version 4, a user with local privileges on a system could execute code with administrative privileges.	CWE-264 Permissions, Privileges, and Access Controls	CVE-2016-8228	2024-11-21 11:59	2017-06-5	Show	GitHub Exploit DB Packet Storm

271466	7.5	HIGH Network	apache	qpid_broker-j	The Apache Qpid Broker for Java can be configured to use different so called AuthenticationProviders to handle user authentication. Among the choices are the SCRAM-SHA-1 and SCRAM-SHA-256 Authenticat…	CWE-200 Information Exposure	CVE-2016-8741	2024-11-21 11:59	2017-05-15	Show	GitHub Exploit DB Packet Storm

271467	9.1	CRITICAL Network	linuxcontainers	lxc	lxc-attach in LXC before 1.0.9 and 2.x before 2.0.6 allows an attacker inside of an unprivileged container to use an inherited file descriptor, of the host's /proc, to access the rest of the host's f…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2016-8649	2024-11-21 11:59	2017-05-1	Show	GitHub Exploit DB Packet Storm

271468	8.8	HIGH Network	trendmicro	threat_discovery_appliance	Directory traversal vulnerability in upload.cgi in Trend Micro Threat Discovery Appliance 2.6.1062r1 and earlier allows remote authenticated users to execute arbitrary code via a .. (dot dot) in the …	CWE-22 Path Traversal	CVE-2016-8593	2024-11-21 11:59	2017-04-29	Show	GitHub Exploit DB Packet Storm

271469	8.8	HIGH Network	trendmicro	threat_discovery_appliance	log_query_system.cgi in Trend Micro Threat Discovery Appliance 2.6.1062r1 and earlier allows remote authenticated users to execute arbitrary code as the root user via shell metacharacters in the cach…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2016-8592	2024-11-21 11:59	2017-04-29	Show	GitHub Exploit DB Packet Storm

271470	8.8	HIGH Network	trendmicro	threat_discovery_appliance	log_query.cgi in Trend Micro Threat Discovery Appliance 2.6.1062r1 and earlier allows remote authenticated users to execute arbitrary code as the root user via shell metacharacters in the cache_id pa…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2016-8591	2024-11-21 11:59	2017-04-29	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed