Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":April 30, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
253201	4.3	警告	オラクル	-	Oracle Fusion Middleware の Portal コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0086	2010-05-12 15:18	2010-04-13	Show	GitHub Exploit DB Packet Storm

253202	5	警告	オラクル	-	Oracle Fusion Middleware の Portal コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0856	2010-05-12 15:18	2010-04-13	Show	GitHub Exploit DB Packet Storm

253203	5	警告	オラクル	-	Oracle Fusion Middleware の Oracle Internet Directory コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0872	2010-05-12 15:18	2010-04-13	Show	GitHub Exploit DB Packet Storm

253204	2.1	注意	オラクル	-	Oracle Database の Audit コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0854	2010-05-12 15:18	2010-04-13	Show	GitHub Exploit DB Packet Storm

253205	3.6	注意	オラクル	-	Oracle Database の Change Data Capture コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0870	2010-05-12 15:18	2010-04-13	Show	GitHub Exploit DB Packet Storm

253206	4	警告	オラクル	-	Oracle Database の XML DB コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0851	2010-05-12 15:17	2010-04-13	Show	GitHub Exploit DB Packet Storm

253207	4	警告	オラクル	-	Oracle Database の JavaVM コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0867	2010-05-12 15:17	2010-04-13	Show	GitHub Exploit DB Packet Storm

253208	5.5	警告	オラクル	-	Oracle Database の XML DB コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0852	2010-05-12 15:17	2010-04-13	Show	GitHub Exploit DB Packet Storm

253209	6.5	警告	オラクル	-	Oracle Database の JavaVM コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0866	2010-05-12 15:17	2010-04-13	Show	GitHub Exploit DB Packet Storm

253210	7.1	危険	オラクル	-	Oracle Database の Core RDBMS コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0860	2010-05-12 15:16	2010-04-13	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 1, 2026, 4:54 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
213381	8.8	HIGH Adjacent	abb	pb610_panel_builder_600_firmware	The ABB IDAL FTP server mishandles format strings in a username during the authentication process. Attempting to authenticate with the username %s%p%x%d will crash the server. Sending %08x.AAAA.%08x.…	CWE-134 Use of Externally-Controlled Format String	CVE-2019-7230	2024-11-21 13:47	2019-06-25	Show	GitHub Exploit DB Packet Storm

213382	8.3	HIGH Adjacent	abb	board_support_package_un31 cp620_firmware cp620-web_firmware cp630_firmware cp630-web_firmware cp635_firmware cp635-b_firmware cp635-web_firmware	The ABB CP635 HMI uses two different transmission methods to upgrade its firmware and its software components: "Utilization of USB/SD Card to flash the device" and "Remote provisioning process via AB…	CWE-494 Download of Code Without Integrity Check	CVE-2019-7229	2024-11-21 13:47	2019-06-25	Show	GitHub Exploit DB Packet Storm

213383	8.8	HIGH Network	rdkcentral	rdkb_ccsppandm	A heap-based buffer overflow in cosa_dhcpv4_dml.c in the RDK RDKB-20181217-1 CcspPandM module may allow attackers with login credentials to achieve remote code execution by crafting a long buffer in …	CWE-787 Out-of-bounds Write	CVE-2019-6963	2024-11-21 13:47	2019-06-20	Show	GitHub Exploit DB Packet Storm

213384	7.5	HIGH Network	rdkcentral	rdkb_ccsppandm	A shell injection issue in cosa_wifi_apis.c in the RDK RDKB-20181217-1 CcspWifiAgent module allows attackers with login credentials to execute arbitrary shell commands under the CcspWifiSsp process (…	CWE-78 OS Command	CVE-2019-6962	2024-11-21 13:47	2019-06-20	Show	GitHub Exploit DB Packet Storm

213385	8.8	HIGH Network	rdkcentral	rdkb_ccsppandm	A heap-based buffer over-read in Service_SetParamStringValue in cosa_x_cisco_com_ddns_dml.c of the RDK RDKB-20181217-1 CcspPandM module may allow attackers with login credentials to achieve informati…	CWE-125 Out-of-bounds Read	CVE-2019-6964	2024-11-21 13:47	2019-06-20	Show	GitHub Exploit DB Packet Storm

213386	6.5	MEDIUM Network	rdkcentral	rdkb_ccsppandm	Incorrect access control in actionHandlerUtility.php in the RDK RDKB-20181217-1 WebUI module allows a logged in user to control DDNS, QoS, RIP, and other privileged configurations (intended only for …	CWE-862 Missing Authorization	CVE-2019-6961	2024-11-21 13:47	2019-06-20	Show	GitHub Exploit DB Packet Storm

213387	7.5	HIGH Network	tp-link	tl-wr1043nd_firmware	An issue was discovered on TP-Link TL-WR1043ND V2 devices. The credentials can be easily decoded and cracked by brute-force, WordList, or Rainbow Table attacks. Specifically, credentials in the "Auth…	CWE-326 Inadequate Encryption Strength	CVE-2019-6972	2024-11-21 13:47	2019-06-20	Show	GitHub Exploit DB Packet Storm

213388	9.8	CRITICAL Network	tp-link	tl-wr1043nd_firmware	An issue was discovered on TP-Link TL-WR1043ND V2 devices. An attacker can send a cookie in an HTTP authentication packet to the router management web interface, and fully control the router without …	NVD-CWE-noinfo	CVE-2019-6971	2024-11-21 13:47	2019-06-20	Show	GitHub Exploit DB Packet Storm

213389	7.5	HIGH Network	open-xchange	open-xchange_appsuite	OX App Suite 7.10.1 and earlier allows Information Exposure.	NVD-CWE-noinfo	CVE-2019-7159	2024-11-21 13:47	2019-06-18	Show	GitHub Exploit DB Packet Storm

213390	6.1	MEDIUM Network	i-doit	i-doit	An XSS issue was discovered in i-doit Open 1.12 via the src/tools/php/qr/qr.php url parameter.	CWE-79 Cross-site Scripting	CVE-2019-6965	2024-11-21 13:47	2019-06-18	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed