Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 18, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
254181	5.7	警告	オラクル	-	Oracle GlassFish および Java System Message Queue における脆弱性	CWE-noinfo 情報不足	CVE-2010-4438	2011-02-17 13:59	2011-01-18	Show	GitHub Exploit DB Packet Storm

254182	6.4	警告	オラクル	-	Oracle Sun Convergence の Web メールにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-4464	2011-02-17 13:59	2011-01-18	Show	GitHub Exploit DB Packet Storm

254183	6.8	警告	サン・マイクロシステムズオラクル	-	Oracle Sun Java System Access Manager および Oracle OpenSSO における脆弱性	CWE-noinfo 情報不足	CVE-2010-4444	2011-02-17 13:58	2011-01-18	Show	GitHub Exploit DB Packet Storm

254184	6.8	警告	オラクル	-	Oracle VM VirtualBox の拡張モジュールにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-4414	2011-02-16 14:13	2011-01-18	Show	GitHub Exploit DB Packet Storm

254185	7.8	危険	オラクル	-	Oracle Solaris 11 Express の SMB および CIFS における脆弱性	CWE-noinfo 情報不足	CVE-2010-4457	2011-02-16 14:11	2011-01-18	Show	GitHub Exploit DB Packet Storm

254186	10	危険	ヒューレット・パッカード IBM オラクル	-	Oracle Solaris の CDE Calendar Manager Service Daemon および RPC における脆弱性	CWE-noinfo 情報不足	CVE-2010-4435	2011-02-16 14:07	2011-01-18	Show	GitHub Exploit DB Packet Storm

254187	2.1	注意	Apache Software Foundation オラクル	-	Apache Derby の BUILTIN 認証機能であるパスワードハッシュ生成アルゴリズムにおけるパスワードを解読される脆弱性	CWE-310 暗号の問題	CVE-2009-4269	2011-02-16 14:00	2011-01-18	Show	GitHub Exploit DB Packet Storm

254188	7.5	危険	オラクル	-	Oracle Industry Applications の Health Sciences - Oracle Argus Safety コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-3593	2011-02-16 13:57	2011-01-18	Show	GitHub Exploit DB Packet Storm

254189	4	警告	オラクル	-	Oracle PeopleSoft and JDEdwards Suite の PeopleSoft Enterprise PeopleTools コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-4434	2011-02-16 13:55	2011-01-18	Show	GitHub Exploit DB Packet Storm

254190	4	警告	オラクル	-	Oracle PeopleSoft and JDEdwards Suite の PeopleSoft Enterprise HRMS コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-4445	2011-02-16 13:52	2011-01-18	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 18, 2026, 4:12 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
208901	6.1	MEDIUM Network	get-simple	getsimplecms	GetSimpleCMS <=3.3.15 has an open redirect in admin/changedata.php via the redirect function to the url parameter.	CWE-601 Open Redirect	CVE-2020-18660	2024-11-21 14:08	2021-06-24	Show	GitHub Exploit DB Packet Storm

208902	6.1	MEDIUM Network	get-simple	getsimplecms	Cross Site Scripting vulnerability in GetSimpleCMS <=3.3.15 via the (1) sitename, (2) username, and (3) email parameters to /admin/setup.php	CWE-79 Cross-site Scripting	CVE-2020-18659	2024-11-21 14:08	2021-06-24	Show	GitHub Exploit DB Packet Storm

208903	6.1	MEDIUM Network	get-simple	getsimplecms	Cross Site Scriptiong (XSS) vulnerability in GetSimpleCMS <=3.3.15 via the timezone parameter to settings.php.	CWE-79 Cross-site Scripting	CVE-2020-18658	2024-11-21 14:08	2021-06-24	Show	GitHub Exploit DB Packet Storm

208904	6.1	MEDIUM Network	get-simple	getsimplecms	Cross Site Scripting (XSS) vulnerability in GetSimpleCMS <= 3.3.15 in admin/changedata.php via the redirect_url parameter and the headers_sent function.	CWE-79 Cross-site Scripting	CVE-2020-18657	2024-11-21 14:08	2021-06-24	Show	GitHub Exploit DB Packet Storm

208905	6.1	MEDIUM Network	wuzhicms	wuzhicms	Cross Site Scripting (XSS) in Wuzhi CMS v4.1.0 allows remote attackers to execute arbitrary code via the "Title" parameter in the component "/coreframe/app/guestbook/myissue.php".	CWE-79 Cross-site Scripting	CVE-2020-18654	2024-11-21 14:08	2021-06-23	Show	GitHub Exploit DB Packet Storm

208906	8.8	HIGH Network	juqingcms	juqingcms	Cross Site Request Forgery (CSRF) in JuQingCMS v1.0 allows remote attackers to gain local privileges via the component "JuQingCMS_v1.0/admin/index.php?c=administrator&a=add".	CWE-352 Origin Validation Error	CVE-2020-18648	2024-11-21 14:08	2021-06-23	Show	GitHub Exploit DB Packet Storm

208907	7.5	HIGH Network	5none	nonecms	Information Disclosure in NoneCMS v1.3 allows remote attackers to obtain sensitive information via the component "/nonecms/vendor".	CWE-668 Exposure of Resource to Wrong Sphere	CVE-2020-18647	2024-11-21 14:08	2021-06-23	Show	GitHub Exploit DB Packet Storm

208908	7.5	HIGH Network	5none	nonecms	Information Disclosure in NoneCMS v1.3 allows remote attackers to obtain sensitive information via the component "/public/index.php".	CWE-668 Exposure of Resource to Wrong Sphere	CVE-2020-18646	2024-11-21 14:08	2021-06-23	Show	GitHub Exploit DB Packet Storm

208909	3.3	LOW Local	zziplib_project debian fedoraproject	zziplib debian_linux fedora	Infinite Loop in zziplib v0.13.69 allows remote attackers to cause a denial of service via the return value "zzip_file_read" in the function "unzzip_cat_file".	CWE-835 Loop with Unreachable Exit Condition ('Infinite Loop')	CVE-2020-18442	2024-11-21 14:08	2021-06-19	Show	GitHub Exploit DB Packet Storm

208910	6.1	MEDIUM Network	zblogcn	z-blogphp	Open Redirect in Z-BlogPHP v1.5.2 and earlier allows remote attackers to obtain sensitive information via the "redirect" parameter in the component "zb_system/cmd.php."	CWE-601 Open Redirect	CVE-2020-18268	2024-11-21 14:08	2021-06-8	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed