Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 21, 2026, 4 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
256161 4.3 警告 オラクル - Oracle Fusion Middleware の Portal コンポーネントにおける脆弱性 CWE-noinfo
情報不足
CVE-2010-0086 2010-05-12 15:18 2010-04-13 Show GitHub Exploit DB Packet Storm
256162 5 警告 オラクル - Oracle Fusion Middleware の Portal コンポーネントにおける脆弱性 CWE-noinfo
情報不足
CVE-2010-0856 2010-05-12 15:18 2010-04-13 Show GitHub Exploit DB Packet Storm
256163 5 警告 オラクル - Oracle Fusion Middleware の Oracle Internet Directory コンポーネントにおける脆弱性 CWE-noinfo
情報不足
CVE-2010-0872 2010-05-12 15:18 2010-04-13 Show GitHub Exploit DB Packet Storm
256164 2.1 注意 オラクル - Oracle Database の Audit コンポーネントにおける脆弱性 CWE-noinfo
情報不足
CVE-2010-0854 2010-05-12 15:18 2010-04-13 Show GitHub Exploit DB Packet Storm
256165 3.6 注意 オラクル - Oracle Database の Change Data Capture コンポーネントにおける脆弱性 CWE-noinfo
情報不足
CVE-2010-0870 2010-05-12 15:18 2010-04-13 Show GitHub Exploit DB Packet Storm
256166 4 警告 オラクル - Oracle Database の XML DB コンポーネントにおける脆弱性 CWE-noinfo
情報不足
CVE-2010-0851 2010-05-12 15:17 2010-04-13 Show GitHub Exploit DB Packet Storm
256167 4 警告 オラクル - Oracle Database の JavaVM コンポーネントにおける脆弱性 CWE-noinfo
情報不足
CVE-2010-0867 2010-05-12 15:17 2010-04-13 Show GitHub Exploit DB Packet Storm
256168 5.5 警告 オラクル - Oracle Database の XML DB コンポーネントにおける脆弱性 CWE-noinfo
情報不足
CVE-2010-0852 2010-05-12 15:17 2010-04-13 Show GitHub Exploit DB Packet Storm
256169 6.5 警告 オラクル - Oracle Database の JavaVM コンポーネントにおける脆弱性 CWE-noinfo
情報不足
CVE-2010-0866 2010-05-12 15:17 2010-04-13 Show GitHub Exploit DB Packet Storm
256170 7.1 危険 オラクル - Oracle Database の Core RDBMS コンポーネントにおける脆弱性 CWE-noinfo
情報不足
CVE-2010-0860 2010-05-12 15:16 2010-04-13 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 21, 2026, 4:10 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
224861 9.8 CRITICAL
Network
wolfssl wolfssl In wolfSSL through 4.1.0, there is a missing sanity check of memory accesses in parsing ASN.1 certificate data while handshaking. Specifically, there is a one-byte heap-based buffer over-read in Chec… CWE-125
Out-of-bounds Read
CVE-2019-16748 2024-11-21 13:31 2019-09-24 Show GitHub Exploit DB Packet Storm
224862 9.8 CRITICAL
Network
linux
debian
canonical
fedoraproject
opensuse
linux_kernel
debian_linux
ubuntu_linux
fedora
leap
An issue was discovered in net/wireless/nl80211.c in the Linux kernel through 5.2.17. It does not check the length of variable elements in a beacon head, leading to a buffer overflow. CWE-120
Classic Buffer Overflow
CVE-2019-16746 2024-11-21 13:31 2019-09-24 Show GitHub Exploit DB Packet Storm
224863 7.8 HIGH
Local
pam-python_project
debian
canonical
pam-python
debian_linux
ubuntu_linux
pam-python before 1.0.7-1 has an issue in regard to the default environment variable handling of Python, which could allow for local root escalation in certain PAM setups. NVD-CWE-noinfo
CVE-2019-16729 2024-11-21 13:31 2019-09-24 Show GitHub Exploit DB Packet Storm
224864 6.1 MEDIUM
Network
cure53
debian
dompurify
debian_linux
DOMPurify before 2.0.1 allows XSS because of innerHTML mutation XSS (mXSS) for an SVG element or a MATH element, as demonstrated by Chrome and Safari. CWE-79
Cross-site Scripting
CVE-2019-16728 2024-11-21 13:31 2019-09-24 Show GitHub Exploit DB Packet Storm
224865 4.3 MEDIUM
Network
cacti cacti In Cacti through 1.2.6, authenticated users may bypass authorization checks (for viewing a graph) via a direct graph_json.php request with a modified local_graph_id parameter. CWE-639
 Authorization Bypass Through User-Controlled Key
CVE-2019-16723 2024-11-21 13:31 2019-09-24 Show GitHub Exploit DB Packet Storm
224866 9.8 CRITICAL
Network
zzzcms zzzphp ZZZCMS zzzphp v1.7.2 has an insufficient protection mechanism against PHP Code Execution, because passthru bypasses an str_ireplace operation. NVD-CWE-noinfo
CVE-2019-16722 2024-11-21 13:31 2019-09-23 Show GitHub Exploit DB Packet Storm
224867 6.5 MEDIUM
Network
5none nonecms NoneCMS v1.3 has CSRF in public/index.php/admin/admin/dele.html, as demonstrated by deleting the admin user. CWE-352
 Origin Validation Error
CVE-2019-16721 2024-11-21 13:31 2019-09-23 Show GitHub Exploit DB Packet Storm
224868 7.5 HIGH
Network
zzzcms zzzphp ZZZCMS zzzphp v1.7.2 does not properly restrict file upload in plugins/ueditor/php/controller.php?upfolder=news&action=catchimage, as demonstrated by uploading a .htaccess or .php5 file. CWE-434
 Unrestricted Upload of File with Dangerous Type 
CVE-2019-16720 2024-11-21 13:31 2019-09-23 Show GitHub Exploit DB Packet Storm
224869 6.5 MEDIUM
Network
wtcms_project wtcms WTCMS 1.0 allows index.php?g=admin&m=index&a=index CSRF with resultant XSS. CWE-352
CWE-79
 Origin Validation Error
Cross-site Scripting
CVE-2019-16719 2024-11-21 13:31 2019-09-23 Show GitHub Exploit DB Packet Storm
224870 7.8 HIGH
Local
radare radare2 In radare2 before 3.9.0, a command injection vulnerability exists in bin_symbols() in libr/core/cbin.c. By using a crafted executable file, it's possible to execute arbitrary shell commands with the … CWE-78
OS Command 
CVE-2019-16718 2024-11-21 13:31 2019-09-23 Show GitHub Exploit DB Packet Storm