Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 9, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
254171 4.3 警告 オラクル - Oracle Sun Product Suite の Sun Convergence コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-0893 2010-05-14 18:42 2010-04-13 Show GitHub Exploit DB Packet Storm
254172 4.9 警告 サン・マイクロシステムズ
オラクル		 - Oracle Sun Product Suite の Solaris コンポーネントにおける脆弱性 CWE-20
不適切な入力確認 		CVE-2010-0453 2010-05-14 18:42 2010-02-3 Show GitHub Exploit DB Packet Storm
254173 4.9 警告 サン・マイクロシステムズ
オラクル		 - Oracle Sun Product Suite の Solaris コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-0889 2010-05-14 18:41 2010-04-13 Show GitHub Exploit DB Packet Storm
254174 5.8 警告 オラクル - Oracle Sun Product Suite の Sun Management Center コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-0891 2010-05-14 18:41 2010-04-13 Show GitHub Exploit DB Packet Storm
254175 5.8 警告 オラクル - Oracle Sun Product Suite の Sun Java System Access Manager コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-0894 2010-05-14 18:41 2010-04-13 Show GitHub Exploit DB Packet Storm
254176 6.8 警告 オラクル - Oracle Sun Product Suite の Sun Java System Communications Express コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-0885 2010-05-14 18:41 2010-04-13 Show GitHub Exploit DB Packet Storm
254177 7.1 危険 オラクル - Oracle Sun Product Suite の Sun Convergence コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-0896 2010-05-14 18:41 2010-04-13 Show GitHub Exploit DB Packet Storm
254178 7.2 危険 サン・マイクロシステムズ
オラクル		 - Oracle Sun Product Suite の Solaris コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-0882 2010-05-14 18:40 2010-04-13 Show GitHub Exploit DB Packet Storm
254179 7.5 危険 オラクル - Oracle Sun Product Suite の Sun Java System Directory Server コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-0897 2010-05-14 18:40 2010-04-13 Show GitHub Exploit DB Packet Storm
254180 10 危険 オラクル - Oracle Sun Product Suite の Sun Ray Server Software コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-0888 2010-05-14 18:40 2010-04-13 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 9, 2026, 5:07 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
222121 6.1 MEDIUM
Network 		dolibarr dolibarr_erp\/crm There is HTML Injection in the Note field in Dolibarr ERP/CRM 10.0.2 via user/note.php. CWE-79
Cross-site Scripting 		CVE-2019-17223 2024-11-21 13:31 2019-10-15 Show GitHub Exploit DB Packet Storm
222122 7.8 HIGH
Local 		bmc patrol_agent An issue was discovered in BMC Patrol Agent 9.0.10i. Weak execution permissions on the PatrolAgent SUID binary could allow an attacker with "patrol" privileges to elevate his/her privileges to the on… CWE-276
Incorrect Default Permissions  		CVE-2019-17044 2024-11-21 13:31 2019-10-15 Show GitHub Exploit DB Packet Storm
222123 7.8 HIGH
Local 		bmc patrol_agent An issue was discovered in BMC Patrol Agent 9.0.10i. Weak execution permissions on the best1collect.exe SUID binary could allow an attacker to elevate his/her privileges to the ones of the "patrol" u… CWE-276
Incorrect Default Permissions  		CVE-2019-17043 2024-11-21 13:31 2019-10-15 Show GitHub Exploit DB Packet Storm
222124 6.1 MEDIUM
Network 		genesys eservices_chat Genesys PureEngage Digital (eServices) 8.1.x allows XSS via HtmlChatPanel.jsp or HtmlChatFrameSet.jsp (ActionColor, ClientNickNameColor, Email, email, or email_address parameter). CWE-79
Cross-site Scripting 		CVE-2019-17176 2024-11-21 13:31 2019-10-12 Show GitHub Exploit DB Packet Storm
222125 9.8 CRITICAL
Network 		connect2id
apache
oracle 		nimbus_jose\+jwt
hadoop
solaris_cluster
weblogic_server
peoplesoft_enterprise_peopletools
enterprise_manager_base_platform
primavera_gateway
data_integrator
communications_pri… 		Connect2id Nimbus JOSE+JWT before v7.9 can throw various uncaught exceptions while parsing a JWT, which could result in an application crash (potential information disclosure) or a potential authenti… CWE-755
 Improper Handling of Exceptional Conditions 		CVE-2019-17195 2024-11-21 13:31 2019-10-15 Show GitHub Exploit DB Packet Storm
222126 9.8 CRITICAL
Network 		sophos cyberoamos A shell injection vulnerability on the Sophos Cyberoam firewall appliance with CyberoamOS before 10.6.6 MR-6 allows remote attackers to execute arbitrary commands via the Web Admin and SSL VPN consol… CWE-78
OS Command  		CVE-2019-17059 2024-11-21 13:31 2019-10-12 Show GitHub Exploit DB Packet Storm
222127 9.8 CRITICAL
Network 		awplife contact_form_widget The new-contact-form-widget (aka Contact Form Widget - Contact Query, Form Maker) plugin 1.0.9 for WordPress has SQL Injection via all-query-page.php. CWE-89
SQL Injection 		CVE-2019-17072 2024-11-21 13:31 2019-10-10 Show GitHub Exploit DB Packet Storm
222128 6.1 MEDIUM
Network 		realbigplugins client_dash The client-dash (aka Client Dash) plugin 2.1.4 for WordPress allows XSS. CWE-79
Cross-site Scripting 		CVE-2019-17071 2024-11-21 13:31 2019-10-10 Show GitHub Exploit DB Packet Storm
222129 6.1 MEDIUM
Network 		lqd liquid_speech_balloon The liquid-speech-balloon (aka LIQUID SPEECH BALLOON) plugin before 1.0.7 for WordPress allows XSS with Internet Explorer. CWE-79
Cross-site Scripting 		CVE-2019-17070 2024-11-21 13:31 2019-10-10 Show GitHub Exploit DB Packet Storm
222130 6.5 MEDIUM
Network 		koji_project koji Koji through 1.18.0 allows remote Directory Traversal, with resultant Privilege Escalation. CWE-22
Path Traversal 		CVE-2019-17109 2024-11-21 13:31 2019-10-10 Show GitHub Exploit DB Packet Storm