Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 16, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
254391 6.3 警告 オラクル - Oracle Solaris における su の処理に関する脆弱性 CWE-noinfo
情報不足
CVE-2010-3503 2010-11-2 15:51 2010-10-12 Show GitHub Exploit DB Packet Storm
254392 9.3 危険 アップル
サイバートラスト株式会社
ターボリナックス
FreeType Project
オラクル
レッドハット
- FreeType 2 における CFF フォントの処理に脆弱性 CWE-119
バッファエラー
CVE-2010-1797 2010-11-2 15:24 2010-08-9 Show GitHub Exploit DB Packet Storm
254393 6.6 警告 オラクル - Oracle Solaris における Live Upgrade の処理に関する脆弱性 CWE-noinfo
情報不足
CVE-2010-3507 2010-11-1 15:41 2010-10-12 Show GitHub Exploit DB Packet Storm
254394 10 危険 オラクル - Oracle Solaris における Scheduler の処理に関する脆弱性 CWE-noinfo
情報不足
CVE-2010-3509 2010-11-1 15:41 2010-10-12 Show GitHub Exploit DB Packet Storm
254395 4.3 警告 オラクル - Oracle Fusion Middleware の Forms コンポーネントにおける脆弱性 CWE-noinfo
情報不足
CVE-2010-2396 2010-11-1 15:41 2010-10-12 Show GitHub Exploit DB Packet Storm
254396 4.3 警告 オラクル - Oracle Fusion Middleware の Cabo/UIX コンポーネントにおける脆弱性 CWE-noinfo
情報不足
CVE-2010-2410 2010-11-1 15:41 2010-10-12 Show GitHub Exploit DB Packet Storm
254397 4.3 警告 オラクル - Oracle Fusion Middleware の Cabo/UIX コンポーネントにおける脆弱性 CWE-noinfo
情報不足
CVE-2010-2409 2010-11-1 15:40 2010-10-12 Show GitHub Exploit DB Packet Storm
254398 4.3 警告 オラクル - Oracle Fusion Middleware の Cabo/UIX コンポーネントにおける脆弱性 CWE-noinfo
情報不足
CVE-2010-2395 2010-11-1 15:39 2010-10-12 Show GitHub Exploit DB Packet Storm
254399 5 警告 オラクル - Oracle Fusion Middleware の OID コンポーネントにおける脆弱性 CWE-noinfo
情報不足
CVE-2010-3501 2010-11-1 15:39 2010-10-12 Show GitHub Exploit DB Packet Storm
254400 1 注意 オラクル - 複数の Oracle 製品の Perl コンポーネントにおける脆弱性 CWE-noinfo
情報不足
CVE-2010-2389 2010-11-1 15:38 2010-10-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 17, 2026, 4:15 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
221451 9.8 CRITICAL
Network
fasterxml
oracle
debian
netapp
jackson-databind
retail_xstore_point_of_service
primavera_unifier
weblogic_server
webcenter_portal
enterprise_manager_base_platform
communications_instant_messaging_server
commun…
FasterXML jackson-databind 2.x before 2.9.10.2 lacks certain net.sf.ehcache blocking. CWE-502
 Deserialization of Untrusted Data
CVE-2019-20330 2024-11-21 13:38 2020-01-3 Show GitHub Exploit DB Packet Storm
221452 8.1 HIGH
Network
openlambda_project openlambda OpenLambda 2019-09-10 allows DNS rebinding attacks against the OL server for the REST API on TCP port 5000. CWE-346
 Origin Validation Error
CVE-2019-20329 2024-11-21 13:38 2020-01-3 Show GitHub Exploit DB Packet Storm
221453 6.1 MEDIUM
Network
mybb mybb MyBB before 1.8.22 allows an open redirect on login. CWE-601
Open Redirect
CVE-2019-20225 2024-11-21 13:38 2020-01-3 Show GitHub Exploit DB Packet Storm
221454 8.8 HIGH
Network
miniupnp_project ngiflib ngiflib 0.4 has a heap-based buffer over-read in GifIndexToTrueColor in ngiflib.c. CWE-125
Out-of-bounds Read
CVE-2019-20219 2024-11-21 13:38 2020-01-3 Show GitHub Exploit DB Packet Storm
221455 6.1 MEDIUM
Network
sitracker support_incident_tracker In Support Incident Tracker (SiT!) 3.67, the id parameter is affected by XSS on all endpoints that use this parameter, a related issue to CVE-2012-2235. CWE-79
Cross-site Scripting
CVE-2019-20223 2024-11-21 13:38 2020-01-2 Show GitHub Exploit DB Packet Storm
221456 6.1 MEDIUM
Network
sitracker support_incident_tracker In Support Incident Tracker (SiT!) 3.67, the Short Application Name and Application Name inputs in the config.php page are affected by XSS. CWE-79
Cross-site Scripting
CVE-2019-20222 2024-11-21 13:38 2020-01-2 Show GitHub Exploit DB Packet Storm
221457 6.1 MEDIUM
Network
sitracker support_incident_tracker In Support Incident Tracker (SiT!) 3.67, Load Plugins input in the config.php page is affected by XSS. The XSS payload is, for example, executed on the about.php page. CWE-79
Cross-site Scripting
CVE-2019-20221 2024-11-21 13:38 2020-01-2 Show GitHub Exploit DB Packet Storm
221458 6.1 MEDIUM
Network
sitracker support_incident_tracker In Support Incident Tracker (SiT!) 3.67, the search_id parameter in the search_incidents_advanced.php page is affected by XSS. CWE-79
Cross-site Scripting
CVE-2019-20220 2024-11-21 13:38 2020-01-2 Show GitHub Exploit DB Packet Storm
221459 7.5 HIGH
Network
sqlite
debian
canonical
oracle
sqlite
debian_linux
ubuntu_linux
mysql_workbench
selectExpander in select.c in SQLite 3.30.1 proceeds with WITH stack unwinding even after a parsing error. NVD-CWE-Other
CWE-755
 Improper Handling of Exceptional Conditions
CVE-2019-20218 2024-11-21 13:38 2020-01-2 Show GitHub Exploit DB Packet Storm
221460 7.5 HIGH
Network
dlink dir-859_firmware
dir-822_firmware
dir-823_firmware
dir-865l_firmware
dir-868l_firmware
dir-869_firmware
dir-880l_firmware
dir-890l_firmware
dir-890r_firmware
dir-885l_firmw…
D-Link DIR-859 routers before v1.07b03_beta allow Unauthenticated Information Disclosure via the AUTHORIZED_GROUP=1%0a value, as demonstrated by vpnconfig.php. CWE-74
CWE-863
Injection
 Incorrect Authorization
CVE-2019-20213 2024-11-21 13:38 2020-01-2 Show GitHub Exploit DB Packet Storm