Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":July 1, 2026, 4:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
258901 5 警告 オラクル - Oracle Database Server の Network Foundation コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2011-0806 2011-05-11 11:00 2011-04-19 Show GitHub Exploit DB Packet Storm
258902 4.3 警告 オラクル - Oracle Database Server の UIX コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2011-0805 2011-05-11 10:58 2011-04-19 Show GitHub Exploit DB Packet Storm
258903 3.6 注意 オラクル - Oracle Database Server の Database Vault コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2011-0804 2011-05-11 10:58 2011-04-19 Show GitHub Exploit DB Packet Storm
258904 6.5 警告 オラクル - Oracle Database Server の Oracle Warehouse Builder コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2011-0799 2011-05-11 10:57 2011-04-19 Show GitHub Exploit DB Packet Storm
258905 3.6 注意 オラクル - Oracle Database Server の Database Vault コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2011-0793 2011-05-11 10:55 2011-04-19 Show GitHub Exploit DB Packet Storm
258906 6.5 警告 オラクル - Oracle Database Server の Oracle Warehouse Builder コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2011-0792 2011-05-11 10:54 2011-04-19 Show GitHub Exploit DB Packet Storm
258907 5.5 警告 オラクル - 複数の Oracle 製品の Application Service Level Management コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2011-0787 2011-05-11 10:53 2011-04-19 Show GitHub Exploit DB Packet Storm
258908 4.3 警告 オラクル - 複数の Oracle 製品の Oracle Help コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2011-0785 2011-05-11 10:52 2011-04-19 Show GitHub Exploit DB Packet Storm
258909 - - Wireshark - Wireshark に脆弱性 - - 2011-05-11 10:51 2011-04-19 Show GitHub Exploit DB Packet Storm
258910 6.8 警告 LibTIFF
レッドハット		 - LibTIFF の OJPEG デコーダにおけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2009-5022 2011-05-11 10:50 2011-04-18 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:July 1, 2026, 4:27 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
249501 9.8 CRITICAL
Network 		debian
hylafax 		debian_linux
hylafax\+
hylafax 		HylaFAX 6.0.6 and HylaFAX+ 5.6.0 allow remote attackers to execute arbitrary code via a dial-in session that provides a FAX page with the JPEG bit enabled, which is mishandled in FaxModem::writeECMDa… CWE-824
CWE-787
 Access of Uninitialized Pointer
 Out-of-bounds Write 		CVE-2018-17141 2024-11-21 12:53 2018-09-22 Show GitHub Exploit DB Packet Storm
249502 7.5 HIGH
Network 		polyai_project polyai The mintToken function of a smart contract implementation for PolyAi (AI), an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to … CWE-190
 Integer Overflow or Wraparound 		CVE-2018-17050 2024-11-21 12:53 2018-09-22 Show GitHub Exploit DB Packet Storm
249503 6.1 MEDIUM
Network 		limesurvey limesurvey In LimeSurvey 3.14.7, HTML Injection and Stored XSS have been discovered in the appendix via the surveyls_title parameter to /index.php?r=admin/survey/sa/insert. CWE-79
Cross-site Scripting 		CVE-2018-17003 2024-11-21 12:53 2018-09-22 Show GitHub Exploit DB Packet Storm
249504 6.1 MEDIUM
Network 		ricoh mp_2001sp_firmware On the RICOH MP 2001 printer, HTML Injection and Stored XSS vulnerabilities have been discovered in the area of adding addresses via the entryNameIn parameter to /web/entry/en/address/adrsSetUserWiza… CWE-79
Cross-site Scripting 		CVE-2018-17002 2024-11-21 12:53 2018-09-22 Show GitHub Exploit DB Packet Storm
249505 6.1 MEDIUM
Network 		ricoh sp_4510sf_firmware On the RICOH SP 4510SF printer, HTML Injection and Stored XSS vulnerabilities have been discovered in the area of adding addresses via the entryNameIn parameter to /web/entry/en/address/adrsSetUserWi… CWE-79
Cross-site Scripting 		CVE-2018-17001 2024-11-21 12:53 2018-09-22 Show GitHub Exploit DB Packet Storm
249506 6.1 MEDIUM
Network 		zohocorp manageengine_supportcenter_plus In Zoho ManageEngine SupportCenter Plus before 8.1 Build 8109, there is HTML Injection and Stored XSS via the /ServiceContractDef.do contractName parameter. CWE-79
Cross-site Scripting 		CVE-2018-16965 2024-11-21 12:53 2018-09-22 Show GitHub Exploit DB Packet Storm
249507 6.1 MEDIUM
Network 		zohocorp manageengine_desktop_central Zoho ManageEngine Desktop Central 10.0.271 has XSS via the "Features & Articles" search field to the /advsearch.do?SUBREQUEST=XMLHTTP URI. CWE-79
Cross-site Scripting 		CVE-2018-16833 2024-11-21 12:53 2018-09-22 Show GitHub Exploit DB Packet Storm
249508 9.8 CRITICAL
Network 		seacms seacms SeaCMS 6.64 allows SQL Injection via the upload/admin/admin_video.php order parameter. CWE-89
SQL Injection 		CVE-2018-16822 2024-11-21 12:53 2018-09-22 Show GitHub Exploit DB Packet Storm
249509 5.3 MEDIUM
Network 		seacms seacms SeaCMS 6.64 allows arbitrary directory listing via upload/admin/admin_template.php?path=../templets/../../ requests. CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2018-16821 2024-11-21 12:53 2018-09-22 Show GitHub Exploit DB Packet Storm
249510 8.6 HIGH
Network 		microsoft exchange_server Rollup 18 for Microsoft Exchange Server 2010 SP3 and previous versions has an SSRF vulnerability via the username parameter in /owa/auth/logon.aspx in the OWA (Outlook Web Access) login page. CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2018-16793 2024-11-21 12:53 2018-09-22 Show GitHub Exploit DB Packet Storm