Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 23, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
254761	5	警告	オラクル	-	Oracle Sun Management Center の Web コンソールにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-4436	2011-02-17 14:00	2011-01-18	Show	GitHub Exploit DB Packet Storm

254762	5	警告	オラクル	-	Oracle Solaris 10 の Ethernet および Driver sub-component における脆弱性	CWE-noinfo 情報不足	CVE-2010-4433	2011-02-17 13:59	2011-01-18	Show	GitHub Exploit DB Packet Storm

254763	5.7	警告	オラクル	-	Oracle GlassFish および Java System Message Queue における脆弱性	CWE-noinfo 情報不足	CVE-2010-4438	2011-02-17 13:59	2011-01-18	Show	GitHub Exploit DB Packet Storm

254764	6.4	警告	オラクル	-	Oracle Sun Convergence の Web メールにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-4464	2011-02-17 13:59	2011-01-18	Show	GitHub Exploit DB Packet Storm

254765	6.8	警告	サン・マイクロシステムズオラクル	-	Oracle Sun Java System Access Manager および Oracle OpenSSO における脆弱性	CWE-noinfo 情報不足	CVE-2010-4444	2011-02-17 13:58	2011-01-18	Show	GitHub Exploit DB Packet Storm

254766	6.8	警告	オラクル	-	Oracle VM VirtualBox の拡張モジュールにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-4414	2011-02-16 14:13	2011-01-18	Show	GitHub Exploit DB Packet Storm

254767	7.8	危険	オラクル	-	Oracle Solaris 11 Express の SMB および CIFS における脆弱性	CWE-noinfo 情報不足	CVE-2010-4457	2011-02-16 14:11	2011-01-18	Show	GitHub Exploit DB Packet Storm

254768	10	危険	ヒューレット・パッカード IBM オラクル	-	Oracle Solaris の CDE Calendar Manager Service Daemon および RPC における脆弱性	CWE-noinfo 情報不足	CVE-2010-4435	2011-02-16 14:07	2011-01-18	Show	GitHub Exploit DB Packet Storm

254769	2.1	注意	Apache Software Foundation オラクル	-	Apache Derby の BUILTIN 認証機能であるパスワードハッシュ生成アルゴリズムにおけるパスワードを解読される脆弱性	CWE-310 暗号の問題	CVE-2009-4269	2011-02-16 14:00	2011-01-18	Show	GitHub Exploit DB Packet Storm

254770	7.5	危険	オラクル	-	Oracle Industry Applications の Health Sciences - Oracle Argus Safety コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-3593	2011-02-16 13:57	2011-01-18	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 23, 2026, 4:08 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
220401	6.1	MEDIUM Network	mybb	mybb	MyBB 1.8.19 has XSS in the resetpassword function.	CWE-79 Cross-site Scripting	CVE-2019-3578	2024-11-21 13:42	2019-06-7	Show	GitHub Exploit DB Packet Storm

220402	8.0	HIGH Network	openstack redhat	octavia openstack	An access-control flaw was found in the Octavia service when the cloud platform was deployed using Red Hat OpenStack Platform Director. An attacker could cause new amphorae to run based on any arbitr…	NVD-CWE-Other	CVE-2019-3895	2024-11-21 13:42	2019-06-4	Show	GitHub Exploit DB Packet Storm

220403	8.8	HIGH Adjacent	linux redhat canonical netapp fedoraproject debian opensuse	linux_kernel enterprise_linux ubuntu_linux a700s_firmware cn1610_firmware h610s_firmware solidfire hci_management_node active_iq_unified_manager_for_vmware_vsphere fedora	A flaw that allowed an attacker to corrupt memory and possibly escalate privileges was found in the mwifiex kernel module while connecting to a malicious wireless network.	-	CVE-2019-3846	2024-11-21 13:42	2019-06-4	Show	GitHub Exploit DB Packet Storm

220404	8.1	HIGH Network	linuxfoundation	osquery	In some configurations an attacker can inject a new executable path into the extensions.load file for osquery and hard link a parent folder of a malicious binary to a folder with known 'safe' permiss…	CWE-59 Link Following	CVE-2019-3567	2024-11-21 13:42	2019-06-4	Show	GitHub Exploit DB Packet Storm

220405	5.3	MEDIUM Network	pivotal_software	spring_data_java_persistance_api	This affects Spring Data JPA in versions up to and including 2.1.6, 2.0.14 and 1.11.20. ExampleMatcher using ExampleMatcher.StringMatcher.STARTING, ExampleMatcher.StringMatcher.ENDING or ExampleMatch…	NVD-CWE-Other	CVE-2019-3802	2024-11-21 13:42	2019-06-3	Show	GitHub Exploit DB Packet Storm

220406	9.1	CRITICAL Network	atlassian	bitbucket	Atlassian Bitbucket Data Center licensed instances starting with version 5.13.0 before 5.13.6 (the fixed version for 5.13.x), from 5.14.0 before 5.14.4 (fixed version for 5.14.x), from 5.15.0 before …	CWE-22 Path Traversal	CVE-2019-3397	2024-11-21 13:42	2019-06-3	Show	GitHub Exploit DB Packet Storm

220407	5.3	MEDIUM Network	atlassian	jira jira_server	The /rest/api/2/user/picker rest resource in Jira before version 7.13.3, from version 8.0.0 before version 8.0.4, and from version 8.1.0 before version 8.1.1 allows remote attackers to enumerate user…	CWE-863 Incorrect Authorization	CVE-2019-3403	2024-11-21 13:42	2019-05-23	Show	GitHub Exploit DB Packet Storm

220408	6.1	MEDIUM Network	atlassian	jira jira_server	The ConfigurePortalPages.jspa resource in Jira before version 7.13.3 and from version 8.0.0 before version 8.1.1 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site script…	CWE-79 Cross-site Scripting	CVE-2019-3402	2024-11-21 13:42	2019-05-23	Show	GitHub Exploit DB Packet Storm

220409	5.3	MEDIUM Network	atlassian	jira jira_server	The ManageFilters.jspa resource in Jira before version 7.13.3 and from version 8.0.0 before version 8.1.1 allows remote attackers to enumerate usernames via an incorrect authorisation check.	CWE-863 Incorrect Authorization	CVE-2019-3401	2024-11-21 13:42	2019-05-23	Show	GitHub Exploit DB Packet Storm

220410	7.8	HIGH Local	artifex debian opensuse fedoraproject canonical redhat	ghostscript debian_linux leap fedora ubuntu_linux enterprise_linux	It was found that in ghostscript some privileged operators remained accessible from various places after the CVE-2019-6116 fix. A specially crafted PostScript file could use this flaw in order to, fo…	NVD-CWE-noinfo	CVE-2019-3839	2024-11-21 13:42	2019-05-17	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed