Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 10, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
257311 4 警告 オラクル - Oracle Solaris および OpenSolaris の Solaris コンポーネントにおける脆弱性 CWE-noinfo
情報不足
CVE-2010-3515 2010-11-2 15:52 2010-10-12 Show GitHub Exploit DB Packet Storm
257312 4.3 警告 オラクル - Oracle Sun Products Suite の Oracle iPlanet Web Server コンポーネントにおける脆弱性 CWE-noinfo
情報不足
CVE-2010-3514 2010-11-2 15:52 2010-10-12 Show GitHub Exploit DB Packet Storm
257313 4.9 警告 オラクル - Oracle Solaris および OpenSolaris における Kernel/X86 の処理に関する脆弱性 CWE-noinfo
情報不足
CVE-2010-3517 2010-11-2 15:51 2010-10-12 Show GitHub Exploit DB Packet Storm
257314 5.8 警告 オラクル - Oracle Sun Products Suite の Oracle iPlanet Web Server コンポーネントにおける脆弱性 CWE-noinfo
情報不足
CVE-2010-3545 2010-11-2 15:51 2010-10-12 Show GitHub Exploit DB Packet Storm
257315 6.3 警告 オラクル - Oracle Solaris における su の処理に関する脆弱性 CWE-noinfo
情報不足
CVE-2010-3503 2010-11-2 15:51 2010-10-12 Show GitHub Exploit DB Packet Storm
257316 9.3 危険 アップル
サイバートラスト株式会社
ターボリナックス
FreeType Project
オラクル
レッドハット
- FreeType 2 における CFF フォントの処理に脆弱性 CWE-119
バッファエラー
CVE-2010-1797 2010-11-2 15:24 2010-08-9 Show GitHub Exploit DB Packet Storm
257317 6.6 警告 オラクル - Oracle Solaris における Live Upgrade の処理に関する脆弱性 CWE-noinfo
情報不足
CVE-2010-3507 2010-11-1 15:41 2010-10-12 Show GitHub Exploit DB Packet Storm
257318 10 危険 オラクル - Oracle Solaris における Scheduler の処理に関する脆弱性 CWE-noinfo
情報不足
CVE-2010-3509 2010-11-1 15:41 2010-10-12 Show GitHub Exploit DB Packet Storm
257319 4.3 警告 オラクル - Oracle Fusion Middleware の Forms コンポーネントにおける脆弱性 CWE-noinfo
情報不足
CVE-2010-2396 2010-11-1 15:41 2010-10-12 Show GitHub Exploit DB Packet Storm
257320 4.3 警告 オラクル - Oracle Fusion Middleware の Cabo/UIX コンポーネントにおける脆弱性 CWE-noinfo
情報不足
CVE-2010-2410 2010-11-1 15:41 2010-10-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 10, 2026, 5 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
312181 9.8 CRITICAL
Network
gogs gogs A remote command execution vulnerability exists in gogs/gogs versions <=0.12.7 when deployed on a Windows server. The vulnerability arises due to improper validation of the `tree_path` parameter duri… CWE-77
Command Injection
CVE-2022-1884 2024-11-19 23:47 2024-11-15 Show GitHub Exploit DB Packet Storm
312182 5.4 MEDIUM
Network
usememos memos A stored cross-site scripting (XSS) vulnerability was discovered in usememos/memos version 0.9.1. This vulnerability allows an attacker to upload a JavaScript file containing a malicious script and r… CWE-79
Cross-site Scripting
CVE-2023-0109 2024-11-19 23:44 2024-11-15 Show GitHub Exploit DB Packet Storm
312183 6.5 MEDIUM
Network
wallabag wallabag wallabag version 2.5.2 contains a Cross-Site Request Forgery (CSRF) vulnerability that allows attackers to arbitrarily delete user accounts via the /account/delete endpoint. This issue is fixed in ve… CWE-352
 Origin Validation Error
CVE-2023-0737 2024-11-19 23:43 2024-11-15 Show GitHub Exploit DB Packet Storm
312184 - - - A vulnerability in the Incoming Goods Suite allows a user with unprivileged access to the underlying system (e.g. local or via SSH) a privilege escalation to the administrative level due to the usage… - CVE-2024-11075 2024-11-19 23:15 2024-11-19 Show GitHub Exploit DB Packet Storm
312185 - - - Heap-based Buffer Overflow and Uninitialized Variable vulnerabilities exist in the X_B and SAT file reading procedure in eDrawings from Release SOLIDWORKS 2024 through Release SOLIDWORKS 2025. These … - CVE-2024-10204 2024-11-19 23:15 2024-11-19 Show GitHub Exploit DB Packet Storm
312186 - - - Versions of the package cross-spawn before 7.0.5 are vulnerable to Regular Expression Denial of Service (ReDoS) due to improper input sanitization. An attacker can increase the CPU usage and crash th… - CVE-2024-21538 2024-11-19 23:15 2024-11-8 Show GitHub Exploit DB Packet Storm
312187 - - - The Bard theme for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and including, 2.216. This … CWE-79
Cross-site Scripting
CVE-2024-9830 2024-11-19 22:15 2024-11-19 Show GitHub Exploit DB Packet Storm
312188 6.1 MEDIUM
Network
- - The Ashe theme for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and including, 2.243. This … CWE-79
Cross-site Scripting
CVE-2024-9777 2024-11-19 22:15 2024-11-19 Show GitHub Exploit DB Packet Storm
312189 6.4 MEDIUM
Network
- - The Parallax Image plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘position’ parameter in all versions up to, and including, 1.9 due to insufficient input sanitization and … CWE-79
Cross-site Scripting
CVE-2024-11224 2024-11-19 22:15 2024-11-19 Show GitHub Exploit DB Packet Storm
312190 6.4 MEDIUM
Network
- - The GD Rating System plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘extra_class’ parameter in all versions up to, and including, 3.6.1 due to insufficient input sanitizati… CWE-79
Cross-site Scripting
CVE-2024-11198 2024-11-19 22:15 2024-11-19 Show GitHub Exploit DB Packet Storm