Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 19, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
258361	4.3	警告	オラクル	-	Oracle Fusion Middleware の Cabo/UIX コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-2409	2010-11-1 15:40	2010-10-12	Show	GitHub Exploit DB Packet Storm

258362	4.3	警告	オラクル	-	Oracle Fusion Middleware の Cabo/UIX コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-2395	2010-11-1 15:39	2010-10-12	Show	GitHub Exploit DB Packet Storm

258363	5	警告	オラクル	-	Oracle Fusion Middleware の OID コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-3501	2010-11-1 15:39	2010-10-12	Show	GitHub Exploit DB Packet Storm

258364	1	注意	オラクル	-	複数の Oracle 製品の Perl コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-2389	2010-11-1 15:38	2010-10-12	Show	GitHub Exploit DB Packet Storm

258365	3.6	注意	オラクル	-	Oracle Database Server の Core RDBMS コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-2391	2010-11-1 15:37	2010-10-12	Show	GitHub Exploit DB Packet Storm

258366	4.3	警告	オラクル	-	Oracle Database Server の XDK コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-2407	2010-11-1 15:37	2010-10-12	Show	GitHub Exploit DB Packet Storm

258367	6.8	警告	Vim	-	GVim における DLL 読み込みに関する脆弱性	CWE-Other その他	CVE-2010-3914	2010-11-1 12:00	2010-11-1	Show	GitHub Exploit DB Packet Storm

258368	9.3	危険	オラクル	-	Oracle Siebel Option Pack for IE の ActiveX コントロールのメモリ初期化処理に脆弱性	CWE-94 コード・インジェクション	CVE-2009-3737	2010-10-29 16:43	2010-08-9	Show	GitHub Exploit DB Packet Storm

258369	4.6	警告	オラクル	-	Oracle Database Server の Job Queue コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-2411	2010-10-29 16:35	2010-10-12	Show	GitHub Exploit DB Packet Storm

258370	4.9	警告	オラクル	-	Oracle Database Server の Change Data Capture コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-2415	2010-10-29 16:34	2010-10-12	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 19, 2026, 4:01 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
195811	4.7	MEDIUM Adjacent	ieee ietf	ieee_802.2 p802.1q	Layer 2 network filtering capabilities such as IPv6 RA guard can be bypassed using LLC/SNAP headers with invalid length (and optionally VLAN0 headers)	CWE-290 Authentication Bypass by Spoofing	CVE-2021-27861	2024-11-21 14:58	2022-09-28	Show	GitHub Exploit DB Packet Storm

195812	4.7	MEDIUM Adjacent	ieee ietf	ieee_802.2 p802.1q	Layer 2 network filtering capabilities such as IPv6 RA guard can be bypassed using combinations of VLAN 0 headers, LLC/SNAP headers, and converting frames from Ethernet to Wifi and its reverse.	CWE-290 Authentication Bypass by Spoofing	CVE-2021-27854	2024-11-21 14:58	2022-09-28	Show	GitHub Exploit DB Packet Storm

195813	4.7	MEDIUM Adjacent	ieee ietf cisco	ieee_802.2 p802.1q catalyst_6503-e_firmware catalyst_6504-e_firmware catalyst_6506-e_firmware catalyst_6509-e_firmware catalyst_6509-neb-a_firmware catalyst_6509-v-e_firmware …	Layer 2 network filtering capabilities such as IPv6 RA guard or ARP inspection can be bypassed using combinations of VLAN 0 headers and LLC/SNAP headers.	CWE-290 Authentication Bypass by Spoofing	CVE-2021-27853	2024-11-21 14:58	2022-09-28	Show	GitHub Exploit DB Packet Storm

195814	5.4	MEDIUM Network	hcltech	hcl_digital_experience	User input included in error response, which could be used in a phishing attack.	CWE-20 Improper Input Validation	CVE-2021-27774	2024-11-21 14:58	2022-09-23	Show	GitHub Exploit DB Packet Storm

195815	9.8	CRITICAL Network	publiccms	publiccms	Server-side Request Forgery (SSRF) vulnerability in PublicCMS before 4.0.202011.b via /publiccms/admin/ueditor when the action is catchimage.	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2021-27693	2024-11-21 14:58	2022-09-3	Show	GitHub Exploit DB Packet Storm

195816	5.5	MEDIUM Local	broadcom	fabric_operating_system	A vulnerability in Brocade Fabric OS versions v7.4.1b and v7.3.1d could allow local users to conduct privileged directory transversal. Brocade Fabric OS versions v7.4.1.x and v7.3.x have reached end …	CWE-22 Path Traversal	CVE-2021-27798	2024-11-21 14:58	2022-08-6	Show	GitHub Exploit DB Packet Storm

195817	5.0	MEDIUM Local	hcltechsw	hcl_commerce	HCL Commerce's Remote Store server could allow a local attacker to obtain sensitive personal information. The vulnerability requires the victim to first perform a particular operation on the website.	CWE-522 Insufficiently Protected Credentials	CVE-2021-27785	2024-11-21 14:58	2022-07-30	Show	GitHub Exploit DB Packet Storm

195818	9.8	CRITICAL Network	hcltech	onetest_server	Cross-origin resource sharing (CORS) enables browsers to perform cross domain requests in a controlled manner. This request has an Origin header that identifies the domain that is making the initial …	CWE-697 Incorrect Comparison	CVE-2021-27786	2024-11-21 14:58	2022-06-10	Show	GitHub Exploit DB Packet Storm

195819	4.8	MEDIUM Network	acquia	mautic	A cross-site scripting (XSS) vulnerability in the installer component of Mautic before 4.3.0 allows admins to inject executable javascript	CWE-79 Cross-site Scripting	CVE-2021-27914	2024-11-21 14:58	2022-06-2	Show	GitHub Exploit DB Packet Storm

195820	4.8	MEDIUM Network	hcltech	traveler	HCL Traveler is vulnerable to a cross-site scripting (XSS) caused by improper validation of the Name parameter for Approved Applications in the Traveler administration web pages. An attacker could ex…	CWE-79 Cross-site Scripting	CVE-2021-27778	2024-11-21 14:58	2022-06-1	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed