Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 6, 2026, 4 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
252571	4.9	警告	オラクル	-	Oracle Solaris および OpenSolaris における Kernel/X86 の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2010-3517	2010-11-2 15:51	2010-10-12	Show	GitHub Exploit DB Packet Storm

252572	5.8	警告	オラクル	-	Oracle Sun Products Suite の Oracle iPlanet Web Server コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-3545	2010-11-2 15:51	2010-10-12	Show	GitHub Exploit DB Packet Storm

252573	6.3	警告	オラクル	-	Oracle Solaris における su の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2010-3503	2010-11-2 15:51	2010-10-12	Show	GitHub Exploit DB Packet Storm

252574	9.3	危険	アップルサイバートラスト株式会社ターボリナックス FreeType Project オラクルレッドハット	-	FreeType 2 における CFF フォントの処理に脆弱性	CWE-119 バッファエラー	CVE-2010-1797	2010-11-2 15:24	2010-08-9	Show	GitHub Exploit DB Packet Storm

252575	6.6	警告	オラクル	-	Oracle Solaris における Live Upgrade の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2010-3507	2010-11-1 15:41	2010-10-12	Show	GitHub Exploit DB Packet Storm

252576	10	危険	オラクル	-	Oracle Solaris における Scheduler の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2010-3509	2010-11-1 15:41	2010-10-12	Show	GitHub Exploit DB Packet Storm

252577	4.3	警告	オラクル	-	Oracle Fusion Middleware の Forms コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-2396	2010-11-1 15:41	2010-10-12	Show	GitHub Exploit DB Packet Storm

252578	4.3	警告	オラクル	-	Oracle Fusion Middleware の Cabo/UIX コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-2410	2010-11-1 15:41	2010-10-12	Show	GitHub Exploit DB Packet Storm

252579	4.3	警告	オラクル	-	Oracle Fusion Middleware の Cabo/UIX コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-2409	2010-11-1 15:40	2010-10-12	Show	GitHub Exploit DB Packet Storm

252580	4.3	警告	オラクル	-	Oracle Fusion Middleware の Cabo/UIX コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-2395	2010-11-1 15:39	2010-10-12	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 6, 2026, 4:08 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
223741	7.3	HIGH Network	auth0	passport-sharepoint	Auth0 Passport-SharePoint before 0.4.0 does not validate the JWT signature of an Access Token before processing. This allows attackers to forge tokens and bypass authentication and authorization mech…	CWE-345 Insufficient Verification of Data Authenticity	CVE-2019-13483	2024-11-21 13:24	2019-07-26	Show	GitHub Exploit DB Packet Storm

223742	7.5	HIGH Network	cat_runner\	_decorate_home_project	The application API of Cat Runner Decorate Home version 2.8.0 for Android does not sufficiently verify inputs that are assumed to be immutable but are actually externally controllable. Attackers can …	CWE-20 Improper Input Validation	CVE-2019-13097	2024-11-21 13:24	2019-07-23	Show	GitHub Exploit DB Packet Storm

223743	9.8	CRITICAL Network	tronlink	wallet	TronLink Wallet 2.2.0 stores user wallet keystore in plaintext and places them in insecure storage. An attacker can read and reuse the user keystore of a valid user via /data/data/com.tronlink.wallet…	CWE-312 Cleartext Storage of Sensitive Information	CVE-2019-13096	2024-11-21 13:24	2019-07-23	Show	GitHub Exploit DB Packet Storm

223744	6.5	MEDIUM Network	send-anywhere	send_anywhere	The Send Anywhere application 9.4.18 for Android stores confidential information insecurely on the system (i.e., in cleartext), which allows a non-root user to find out the username/password of a val…	CWE-312 Cleartext Storage of Sensitive Information	CVE-2019-13100	2024-11-21 13:24	2019-07-23	Show	GitHub Exploit DB Packet Storm

223745	6.5	MEDIUM Network	momo_project	momo	The Momo application 2.1.9 for Android stores confidential information insecurely on the system (i.e., in cleartext), which allows a non-root user to find out the username/password of a valid user an…	CWE-312 Cleartext Storage of Sensitive Information	CVE-2019-13099	2024-11-21 13:24	2019-07-23	Show	GitHub Exploit DB Packet Storm

223746	6.5	MEDIUM Network	tronlink	wallet	The user password via the registration form of TronLink Wallet 2.2.0 is stored in the log when the class CreateWalletTwoActivity is called. Other authenticated users can read it in the log later. The…	CWE-532 Inclusion of Sensitive Information in Log Files	CVE-2019-13098	2024-11-21 13:24	2019-07-23	Show	GitHub Exploit DB Packet Storm

223747	6.1	MEDIUM Network	sertek	xpare	An issue was discovered in Sertek Xpare 3.67. The login form does not sanitize input data. Because of this, a malicious agent could exploit the vulnerable function in order to prepare an XSS payload …	CWE-79 Cross-site Scripting	CVE-2019-13448	2024-11-21 13:24	2019-07-18	Show	GitHub Exploit DB Packet Storm

223748	9.8	CRITICAL Network	sertek	xpare	An issue was discovered in Sertek Xpare 3.67. The login form does not sanitize input data. Because of this, a malicious agent could access the backend database via SQL injection.	CWE-89 SQL Injection	CVE-2019-13447	2024-11-21 13:24	2019-07-18	Show	GitHub Exploit DB Packet Storm

223749	7.5	HIGH Network	temenos	cwx	Temenos CWX version 8.9 has an Broken Access Control vulnerability in the module /CWX/Employee/EmployeeEdit2.aspx, leading to the viewing of user information.	NVD-CWE-noinfo	CVE-2019-13403	2024-11-21 13:24	2019-07-18	Show	GitHub Exploit DB Packet Storm

223750	6.1	MEDIUM Network	myt_project	myt	In MyT 1.5.1, the User[username] parameter has XSS.	CWE-79 Cross-site Scripting	CVE-2019-13346	2024-11-21 13:24	2019-07-18	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed