Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
228161	2.6	注意	アップルサン・マイクロシステムズヒューレット・パッカード VMware 日立レッドハット	-	複数の Oracle 製品の Java Runtime Environment における脆弱性	CWE-noinfo 情報不足	CVE-2010-4448	2012-12-18 16:36	2011-02-15	Show	GitHub Exploit DB Packet Storm

228162	4.3	警告	アップル VMware サン・マイクロシステムズヒューレット・パッカードレッドハット	-	複数の Oracle 製品の Java Runtime Environment における脆弱性	CWE-noinfo 情報不足	CVE-2010-4447	2012-12-18 16:34	2011-02-15	Show	GitHub Exploit DB Packet Storm

228163	10	危険	アップルサン・マイクロシステムズヒューレット・パッカード VMware 日立レッドハット	-	複数の Oracle 製品の Java Runtime Environment における脆弱性	CWE-noinfo 情報不足	CVE-2010-4469	2012-12-18 16:32	2011-02-15	Show	GitHub Exploit DB Packet Storm

228164	4	警告	アップルサン・マイクロシステムズヒューレット・パッカード VMware 日立レッドハット	-	複数の Oracle 製品の Java Runtime Environment における脆弱性	CWE-noinfo 情報不足	CVE-2010-4468	2012-12-18 16:30	2011-02-15	Show	GitHub Exploit DB Packet Storm

228165	5	警告	サン・マイクロシステムズ VMware ヒューレット・パッカードレッドハット	-	複数の Oracle 製品の Java Runtime Environment における脆弱性	CWE-noinfo 情報不足	CVE-2010-4466	2012-12-18 16:24	2011-02-15	Show	GitHub Exploit DB Packet Storm

228166	2.1	注意	サン・マイクロシステムズ VMware	-	複数の Oracle 製品の Java DB コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-4474	2012-12-18 12:31	2011-02-15	Show	GitHub Exploit DB Packet Storm

228167	5	警告	アップルサン・マイクロシステムズヒューレット・パッカード VMware 日立レッドハット	-	複数の Oracle 製品の Java Runtime Environment における脆弱性	CWE-noinfo 情報不足	CVE-2010-4471	2012-12-18 12:29	2011-02-15	Show	GitHub Exploit DB Packet Storm

228168	7.6	危険	アップル VMware サン・マイクロシステムズヒューレット・パッカードレッドハット	-	複数の Oracle 製品の Java Runtime Environment における脆弱性	CWE-noinfo 情報不足	CVE-2010-4467	2012-12-18 12:25	2011-02-15	Show	GitHub Exploit DB Packet Storm

228169	10	危険	アップル VMware サン・マイクロシステムズヒューレット・パッカードレッドハット	-	複数の Oracle 製品の Java Runtime Environment における脆弱性	CWE-noinfo 情報不足	CVE-2010-4463	2012-12-18 12:23	2011-02-15	Show	GitHub Exploit DB Packet Storm

228170	10	危険	サン・マイクロシステムズ VMware ヒューレット・パッカードレッドハット	-	複数の Oracle 製品の Deployment コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-4452	2012-12-18 12:18	2011-02-15	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:April 24, 2026, 4 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
199441	5.4	MEDIUM Network	quickappscms	quickapps_cms	QuickApps CMS version 2.0.0 is vulnerable to Stored Cross-site Scripting in the user's real name field resulting in denial of service and performing unauthorised actions with an administrator user's …	CWE-79 Cross-site Scripting	CVE-2017-1000495	2024-11-21 12:04	2018-01-3	Show	GitHub Exploit DB Packet Storm

199442	7.8	HIGH Local	miniupnp_project	miniupnpd	Uninitialized stack variable vulnerability in NameValueParserEndElt (upnpreplyparse.c) in miniupnpd < 2.0 allows an attacker to cause Denial of Service (Segmentation fault and Memory Corruption) or p…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2017-1000494	2024-11-21 12:04	2018-01-3	Show	GitHub Exploit DB Packet Storm

199443	9.8	CRITICAL Network	rocket.chat	rocket.chat	Rocket.Chat Server version 0.59 and prior is vulnerable to a NoSQL injection leading to administrator account takeover	CWE-74 Injection	CVE-2017-1000493	2024-11-21 12:04	2018-01-3	Show	GitHub Exploit DB Packet Storm

199444	6.1	MEDIUM Network	leanote	desktop	Leanote-desktop version v2.5 is vulnerable to a XSS which leads to code execution due to enabled node integration	CWE-79 Cross-site Scripting	CVE-2017-1000492	2024-11-21 12:04	2018-01-3	Show	GitHub Exploit DB Packet Storm

199445	6.1	MEDIUM Network	shiba_project	shiba	Shiba markdown live preview app version 1.1.0 is vulnerable to XSS which leads to code execution due to enabled node integration.	CWE-79 Cross-site Scripting	CVE-2017-1000491	2024-11-21 12:04	2018-01-3	Show	GitHub Exploit DB Packet Storm

199446	5.4	MEDIUM Network	invoiceninja	invoice_ninja	Invoice Ninja version 3.8.1 is vulnerable to stored cross-site scripting vulnerability, within the invoice creation page, which can result in disruption of service and execution of javascript code.	CWE-79 Cross-site Scripting	CVE-2017-1000466	2024-11-21 12:04	2018-01-3	Show	GitHub Exploit DB Packet Storm

199447	5.4	MEDIUM Network	leafpub	leafpub	Leafpub version 1.2.0-beta6 is vulnerable to stored cross-site scripting vulnerability, within the edit blog post page, which can result in disruption of service and execution of javascript code.	CWE-79 Cross-site Scripting	CVE-2017-1000463	2024-11-21 12:04	2018-01-3	Show	GitHub Exploit DB Packet Storm

199448	6.1	MEDIUM Network	leanote	leanote	Leanote version <= 2.5 is vulnerable to XSS due to not sanitized input in markdown notes	CWE-79 Cross-site Scripting	CVE-2017-1000459	2024-11-21 12:04	2018-01-3	Show	GitHub Exploit DB Packet Storm

199449	8.3	HIGH Network	openmicroscopy	omero	In OMERO 5.3.3 or earlier a user could create an OriginalFile and adjust its path such that it now points to another user's file on the underlying filesystem, then manipulate the user's data.	NVD-CWE-noinfo	CVE-2017-1000438	2024-11-21 12:04	2018-01-3	Show	GitHub Exploit DB Packet Storm

199450	9.8	CRITICAL Network	creolabs	gravity	Creolabs Gravity 1.0 contains a stack based buffer overflow in the operator_string_add function, resulting in remote code execution.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2017-1000437	2024-11-21 12:04	2018-01-3	Show	GitHub Exploit DB Packet Storm