Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 1, 2026, 4:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
251131	3.5	注意	オラクル	-	Oracle Fusion Middleware の BPEL Console コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-3581	2012-03-27 18:42	2010-10-14	Show	GitHub Exploit DB Packet Storm

251132	4.6	警告	オラクル	-	Oracle OpenSolaris における Kernel/File System の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2010-3580	2012-03-27 18:42	2010-10-14	Show	GitHub Exploit DB Packet Storm

251133	6.4	警告	オラクル	-	Oracle Sun Products Suite の Sun Convergence 1 コンポーネントにおける Webmail の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2010-3579	2012-03-27 18:42	2010-10-14	Show	GitHub Exploit DB Packet Storm

251134	9	危険	オラクル	-	Oracle OpenSolaris における Depot サーバの処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2010-3578	2012-03-27 18:42	2010-10-14	Show	GitHub Exploit DB Packet Storm

251135	6.4	警告	オラクル	-	Oracle OpenSolaris における Kernel/CIFS の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2010-3577	2012-03-27 18:42	2010-10-14	Show	GitHub Exploit DB Packet Storm

251136	6.4	警告	オラクル	-	Oracle Sun Products Suite の Oracle Communications Messaging Server コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-3575	2012-03-27 18:42	2010-10-14	Show	GitHub Exploit DB Packet Storm

251137	5.5	警告	オラクル	-	Oracle PeopleSoft および JDEdwards Suite の PeopleSoft FMS ESA - EX コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-3547	2012-03-27 18:42	2010-10-14	Show	GitHub Exploit DB Packet Storm

251138	5.8	警告	オラクル	-	Oracle Sun Products Suite の Sun Java System Identity Manager コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-3546	2012-03-27 18:42	2010-10-14	Show	GitHub Exploit DB Packet Storm

251139	5.5	警告	オラクル	-	Oracle PeopleSoft および JDEdwards Suite の PeopleSoft Enterprise FMS - GL コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-3539	2012-03-27 18:42	2010-10-14	Show	GitHub Exploit DB Packet Storm

251140	5.5	警告	オラクル	-	Oracle PeopleSoft および JDEdwards Suite の PeopleSoft Enterprise FMS - GL コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-3538	2012-03-27 18:42	2010-10-14	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 1, 2026, 4:12 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
223931	9.8	CRITICAL Network	nlnetlabs debian	unbound debian_linux	Unbound before 1.9.5 allows an integer overflow in sldns_str2wire_dname_buf_origin, leading to an out-of-bounds write. NOTE: The vendor disputes that this is a vulnerability. Although the code may be…	CWE-190 Integer Overflow or Wraparound	CVE-2019-25034	2024-11-21 13:39	2021-04-27	Show	GitHub Exploit DB Packet Storm

223932	9.8	CRITICAL Network	nlnetlabs debian	unbound debian_linux	Unbound before 1.9.5 allows an integer overflow in the regional allocator via the ALIGN_UP macro. NOTE: The vendor disputes that this is a vulnerability. Although the code may be vulnerable, a runnin…	CWE-190 Integer Overflow or Wraparound	CVE-2019-25033	2024-11-21 13:39	2021-04-27	Show	GitHub Exploit DB Packet Storm

223933	9.8	CRITICAL Network	nlnetlabs debian	unbound debian_linux	Unbound before 1.9.5 allows an integer overflow in the regional allocator via regional_alloc. NOTE: The vendor disputes that this is a vulnerability. Although the code may be vulnerable, a running Un…	CWE-190 Integer Overflow or Wraparound	CVE-2019-25032	2024-11-21 13:39	2021-04-27	Show	GitHub Exploit DB Packet Storm

223934	5.9	MEDIUM Network	nlnetlabs debian	unbound debian_linux	Unbound before 1.9.5 allows configuration injection in create_unbound_ad_servers.sh upon a successful man-in-the-middle attack against a cleartext HTTP session. NOTE: The vendor does not consider thi…	CWE-74 Injection	CVE-2019-25031	2024-11-21 13:39	2021-04-27	Show	GitHub Exploit DB Packet Storm

223935	6.1	MEDIUM Network	vaadin	vaadin	Missing variable sanitization in Grid component in com.vaadin:vaadin-server versions 7.4.0 through 7.7.19 (Vaadin 7.4.0 through 7.7.19), and 8.0.0 through 8.8.4 (Vaadin 8.0.0 through 8.8.4) allows at…	CWE-79 Cross-site Scripting	CVE-2019-25028	2024-11-21 13:39	2021-04-24	Show	GitHub Exploit DB Packet Storm

223936	6.1	MEDIUM Network	vaadin	flow vaadin	Missing output sanitization in default RouteNotFoundError view in com.vaadin:flow-server versions 1.0.0 through 1.0.10 (Vaadin 10.0.0 through 10.0.13), and 1.1.0 through 1.4.2 (Vaadin 11.0.0 through …	CWE-79 Cross-site Scripting	CVE-2019-25027	2024-11-21 13:39	2021-04-24	Show	GitHub Exploit DB Packet Storm

223937	5.3	MEDIUM Network	redmine debian	redmine debian_linux	Redmine before 3.4.13 and 4.x before 4.0.6 mishandles markup data during Textile formatting.	NVD-CWE-noinfo	CVE-2019-25026	2024-11-21 13:39	2021-04-6	Show	GitHub Exploit DB Packet Storm

223938	5.3	MEDIUM Network	rubyonrails	active_record_session_store	The activerecord-session_store (aka Active Record Session Store) component through 1.1.3 for Ruby on Rails does not use a constant-time approach when delivering information about whether a guessed se…	NVD-CWE-Other	CVE-2019-25025	2024-11-21 13:39	2021-03-5	Show	GitHub Exploit DB Packet Storm

223939	6.5	MEDIUM Network	scytl	secure_vote	An issue was discovered in Scytl sVote 2.1. Because the IP address from an X-Forwarded-For header (which can be manipulated client-side) is used for the internal application logs, an attacker can inj…	CWE-290 Authentication Bypass by Spoofing	CVE-2019-25023	2024-11-21 13:39	2021-02-27	Show	GitHub Exploit DB Packet Storm

223940	9.8	CRITICAL Network	scytl	secure_vote	An issue was discovered in Scytl sVote 2.1. An attacker can inject code that gets executed by creating an election-event and injecting a payload over an event alias, because the application calls Run…	CWE-78 OS Command	CVE-2019-25022	2024-11-21 13:39	2021-02-27	Show	GitHub Exploit DB Packet Storm