Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 18, 2026, 2:16 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
255391 3.5 注意 オラクル - Oracle E-Business Suite の Oracle Applications Framework コンポーネントにおける脆弱性 CWE-noinfo
情報不足
CVE-2010-0909 2010-08-5 16:35 2010-07-13 Show GitHub Exploit DB Packet Storm
255392 4.3 警告 オラクル - Oracle E-Business Suite の Oracle Applications Manager コンポーネントにおける脆弱性 CWE-noinfo
情報不足
CVE-2010-0913 2010-08-5 16:35 2010-07-13 Show GitHub Exploit DB Packet Storm
255393 4.3 警告 オラクル - Oracle E-Business Suite の Oracle Applications Manager コンポーネントにおける脆弱性 CWE-noinfo
情報不足
CVE-2010-0905 2010-08-5 16:35 2010-07-13 Show GitHub Exploit DB Packet Storm
255394 4.3 警告 オラクル - Oracle E-Business Suite の Oracle Applications Framework コンポーネントにおける脆弱性 CWE-noinfo
情報不足
CVE-2010-0912 2010-08-5 16:35 2010-07-13 Show GitHub Exploit DB Packet Storm
255395 5.5 警告 オラクル - Oracle E-Business Suite の Oracle Advanced Product Catalog コンポーネントにおける脆弱性 CWE-noinfo
情報不足
CVE-2010-0915 2010-08-5 16:34 2010-07-13 Show GitHub Exploit DB Packet Storm
255396 7.5 危険 オラクル - Oracle E-Business Suite の Oracle Applications Framework コンポーネントにおける脆弱性 CWE-noinfo
情報不足
CVE-2010-0908 2010-08-5 16:34 2010-07-13 Show GitHub Exploit DB Packet Storm
255397 4.3 警告 オラクル - Oracle Enterprise Manager Grid Control の Console コンポーネントにおける脆弱性 CWE-noinfo
情報不足
CVE-2010-2373 2010-08-5 16:33 2010-07-13 Show GitHub Exploit DB Packet Storm
255398 4.3 警告 オラクル - Oracle Fusion Middleware の Oracle Business Process Management コンポーネントにおける脆弱性 CWE-noinfo
情報不足
CVE-2010-2370 2010-08-5 16:33 2010-07-13 Show GitHub Exploit DB Packet Storm
255399 5 警告 オラクル - Oracle Secure Backup における脆弱性 CWE-noinfo
情報不足
CVE-2010-0904 2010-08-5 16:33 2010-07-13 Show GitHub Exploit DB Packet Storm
255400 9 危険 オラクル - Oracle Secure Backup における脆弱性 CWE-noinfo
情報不足
CVE-2010-0906 2010-08-5 16:32 2010-07-13 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 18, 2026, 4:12 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
223851 6.1 MEDIUM
Network
hongcms_project hongcms HongCMS 3.0.0 has XSS via the install/index.php dbusername parameter. CWE-79
Cross-site Scripting
CVE-2019-17609 2024-11-21 13:32 2019-10-17 Show GitHub Exploit DB Packet Storm
223852 6.1 MEDIUM
Network
hongcms_project hongcms HongCMS 3.0.0 has XSS via the install/index.php dbname parameter. CWE-79
Cross-site Scripting
CVE-2019-17608 2024-11-21 13:32 2019-10-17 Show GitHub Exploit DB Packet Storm
223853 6.1 MEDIUM
Network
hongcms_project hongcms HongCMS 3.0.0 has XSS via the install/index.php servername parameter. CWE-79
Cross-site Scripting
CVE-2019-17607 2024-11-21 13:32 2019-10-17 Show GitHub Exploit DB Packet Storm
223854 7.8 HIGH
Local
nsa ghidra NSA Ghidra before 9.0.2 is vulnerable to DLL hijacking because it loads jansi.dll from the current working directory. CWE-427
 Uncontrolled Search Path Element
CVE-2019-17665 2024-11-21 13:32 2019-10-17 Show GitHub Exploit DB Packet Storm
223855 7.8 HIGH
Local
nsa ghidra NSA Ghidra through 9.0.4 uses a potentially untrusted search path. When executing Ghidra from a given path, the Java process working directory is set to this path. Then, when launching the Python int… CWE-426
 Untrusted Search Path
CVE-2019-17664 2024-11-21 13:32 2019-10-17 Show GitHub Exploit DB Packet Storm
223856 9.1 CRITICAL
Network
dlink dir-412_firmware There are some web interfaces without authentication requirements on D-Link DIR-412 A1-1.14WW routers. An attacker can clear the router's log file via act=clear&logtype=sysact to log_clear.php, which… CWE-306
Missing Authentication for Critical Function
CVE-2019-17512 2024-11-21 13:32 2019-10-17 Show GitHub Exploit DB Packet Storm
223857 7.1 HIGH
Local
paloaltonetworks globalprotect A Local Privilege Escalation vulnerability exists in GlobalProtect Agent for Linux and Mac OS X version 5.0.4 and earlier and version 4.1.12 and earlier, that can allow non-root users to overwrite ro… NVD-CWE-noinfo
CVE-2019-17436 2024-11-21 13:32 2019-10-17 Show GitHub Exploit DB Packet Storm
223858 5.5 MEDIUM
Local
paloaltonetworks globalprotect A Local Privilege Escalation vulnerability exists in the GlobalProtect Agent for Windows 5.0.3 and earlier, and GlobalProtect Agent for Windows 4.1.12 and earlier, in which the auto-update feature ca… NVD-CWE-noinfo
CVE-2019-17435 2024-11-21 13:32 2019-10-17 Show GitHub Exploit DB Packet Storm
223859 6.1 MEDIUM
Network
d-link dir-866l_firmware D-Link DIR-866L 1.03B04 devices allow XSS via HtmlResponseMessage in the device common gateway interface, leading to common injection. CWE-79
Cross-site Scripting
CVE-2019-17663 2024-11-21 13:32 2019-10-17 Show GitHub Exploit DB Packet Storm
223860 9.8 CRITICAL
Network
cybelsoft thinvnc ThinVNC 1.0b1 is vulnerable to arbitrary file read, which leads to a compromise of the VNC server. The vulnerability exists even when authentication is turned on during the deployment of the VNC serv… CWE-22
CWE-522
Path Traversal
 Insufficiently Protected Credentials
CVE-2019-17662 2024-11-21 13:32 2019-10-17 Show GitHub Exploit DB Packet Storm