Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":July 1, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
260221 4.3 警告 トランスウエア - Active! mail 6 における HTTP ヘッダインジェクションの脆弱性 CWE-20
不適切な入力確認 		CVE-2010-3913 2010-10-29 16:01 2010-10-29 Show GitHub Exploit DB Packet Storm
260222 6.8 警告 Schezo - Lhaplus における実行ファイル読み込みに関する脆弱性 CWE-Other
その他 		CVE-2010-3158 2010-10-28 16:55 2010-10-15 Show GitHub Exploit DB Packet Storm
260223 7.6 危険 マイクロソフト - 複数の Microsoft 製品の Comctl32.dll におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2010-2746 2010-10-28 16:35 2010-10-12 Show GitHub Exploit DB Packet Storm
260224 9.3 危険 マイクロソフト - 複数の Microsoft 製品における任意のコードを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2010-3240 2010-10-28 16:35 2010-10-12 Show GitHub Exploit DB Packet Storm
260225 9.3 危険 マイクロソフト - Microsoft Excel および Microsoft Office における任意のコードを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2010-3238 2010-10-28 16:34 2010-10-12 Show GitHub Exploit DB Packet Storm
260226 9.3 危険 マイクロソフト - 複数の Microsoft 製品における任意のコードを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2010-3236 2010-10-28 16:34 2010-10-12 Show GitHub Exploit DB Packet Storm
260227 9.3 危険 マイクロソフト - Microsoft Excel における任意のコードを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2010-3233 2010-10-28 16:34 2010-10-12 Show GitHub Exploit DB Packet Storm
260228 9.3 危険 マイクロソフト - 複数の Microsoft 製品における任意のコードを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2010-3232 2010-10-28 16:33 2010-10-12 Show GitHub Exploit DB Packet Storm
260229 9.3 危険 マイクロソフト - 複数の Microsoft 製品における任意のコードを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2010-3242 2010-10-28 16:33 2010-10-12 Show GitHub Exploit DB Packet Storm
260230 9.3 危険 マイクロソフト - 複数の Microsoft 製品における任意のコードを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2010-3241 2010-10-28 16:33 2010-10-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:July 1, 2026, 4:27 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
245591 4.7 MEDIUM
Network 		sap netweaver_java_web_container_and_http_service_engine
j2ee_engine_server_core 		SAP NetWeaver Application Server Java Web Container and HTTP Service (Engine API, from 7.10 to 7.11, 7.30, 7.31, 7.40, 7.50; J2EE Engine Server Core 7.11, 7.30, 7.31, 7.40, 7.50) do not sufficiently … CWE-172
 Encoding Error 		CVE-2018-2415 2024-11-21 13:03 2018-05-10 Show GitHub Exploit DB Packet Storm
245592 6.5 MEDIUM
Network 		oracle access_manager
adaptive_access_manager 		Vulnerability in the Oracle Access Manager component of Oracle Fusion Middleware (subcomponent: Web Server Plugin). Supported versions that are affected are 10.1.4.3.0, 11.1.2.3.0 and 12.2.1.3.0. Dif… NVD-CWE-noinfo
CVE-2018-2587 2024-11-21 13:03 2018-04-19 Show GitHub Exploit DB Packet Storm
245593 6.1 MEDIUM
Network 		oracle agile_product_lifecycle_management_for_process Vulnerability in the Oracle Agile Product Lifecycle Management for Process component of Oracle Supply Chain Products Suite (subcomponent: Installation). Supported versions that are affected are 6.1.1… NVD-CWE-noinfo
CVE-2018-2572 2024-11-21 13:03 2018-04-19 Show GitHub Exploit DB Packet Storm
245594 4.2 MEDIUM
Network 		oracle solaris Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: LDAP Library). Supported versions that are affected are 10 and 11.3. Difficult to exploit vulnerability allo… NVD-CWE-noinfo
CVE-2018-2563 2024-11-21 13:03 2018-04-19 Show GitHub Exploit DB Packet Storm
245595 8.8 HIGH
Network 		sap disclosure_management SAP Disclosure Management 10.1 does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. CWE-862
 Missing Authorization 		CVE-2018-2413 2024-11-21 13:03 2018-04-11 Show GitHub Exploit DB Packet Storm
245596 8.8 HIGH
Network 		sap disclosure_management SAP Disclosure Management 10.1 does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. CWE-862
 Missing Authorization 		CVE-2018-2412 2024-11-21 13:03 2018-04-11 Show GitHub Exploit DB Packet Storm
245597 5.4 MEDIUM
Network 		sap business_one SAP Business One, 9.2, 9.3, browser access does not sufficiently encode user controlled inputs, which results in a Cross-Site Scripting (XSS) vulnerability. CWE-79
Cross-site Scripting 		CVE-2018-2410 2024-11-21 13:03 2018-04-11 Show GitHub Exploit DB Packet Storm
245598 8.8 HIGH
Network 		sap cloud_platform Improper session management when using SAP Cloud Platform 2.0 (Connectivity Service and Cloud Connector). Under certain conditions, data of some other user may be shown or modified when using an appl… CWE-384
 Session Fixation 		CVE-2018-2409 2024-11-21 13:03 2018-04-11 Show GitHub Exploit DB Packet Storm
245599 7.3 HIGH
Network 		sap businessobjects Improper Session Management in SAP Business Objects, 4.0, from 4.10, from 4.20, 4.30, CMC/BI Launchpad/Fiorified BI Launchpad. In case of password change for a user, all other active sessions created… CWE-384
 Session Fixation 		CVE-2018-2408 2024-11-21 13:03 2018-04-11 Show GitHub Exploit DB Packet Storm
245600 5.3 MEDIUM
Local 		sap crystal_reports_server Unquoted windows search path (directory/path traversal) vulnerability in Crystal Reports Server, OEM Edition (CRSE), 4.0, 4.10, 4.20, 4.30, startup path. CWE-428
 Unquoted Search Path or Element 		CVE-2018-2406 2024-11-21 13:03 2018-04-11 Show GitHub Exploit DB Packet Storm