Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 15, 2026, 10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
258671	3.5	注意	オラクル	-	Oracle E-Business Suite の E-Business Intelligence コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0858	2010-05-13 15:10	2010-04-13	Show	GitHub Exploit DB Packet Storm

258672	4.3	警告	オラクル	-	Oracle E-Business Suite の Oracle Transportation Management コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0869	2010-05-13 15:10	2010-04-13	Show	GitHub Exploit DB Packet Storm

258673	4.3	警告	オラクル	-	Oracle E-Business Suite の Oracle Agile Engineering Data Management コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0871	2010-05-13 15:10	2010-04-13	Show	GitHub Exploit DB Packet Storm

258674	4.3	警告	オラクル	-	Oracle E-Business Suite の Oracle Agile Engineering Data Management コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0865	2010-05-13 15:09	2010-04-13	Show	GitHub Exploit DB Packet Storm

258675	5	警告	オラクル	-	Oracle E-Business Suite の Oracle HRMS (Self Service) コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0861	2010-05-13 15:09	2010-04-13	Show	GitHub Exploit DB Packet Storm

258676	7.6	危険	マイクロソフト	-	Internet Explorer において VBScript および Windows Help を使用する際に任意のコードが実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-0483	2010-05-12 15:20	2010-03-2	Show	GitHub Exploit DB Packet Storm

258677	7.1	危険	マイクロソフト	-	Microsoft Windows の kernel における SMB 応答パケットの処理に関するサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2009-3676	2010-05-12 15:20	2009-11-13	Show	GitHub Exploit DB Packet Storm

258678	5.8	警告	オラクル	-	Oracle E-Business Suite の Oracle iStore コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0868	2010-05-12 15:19	2010-04-13	Show	GitHub Exploit DB Packet Storm

258679	6.4	警告	オラクル	-	Oracle E-Business Suite の Oracle Application Object Library コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0859	2010-05-12 15:19	2010-04-13	Show	GitHub Exploit DB Packet Storm

258680	4.3	警告	オラクル	-	Oracle Collaboration Suite の User Interface コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0881	2010-05-12 15:19	2010-04-13	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 15, 2026, 4:10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
194661	7.5	HIGH Network	cesnet	libyang	In function ext_get_plugin() in libyang <= v1.0.225, it doesn't check whether the value of revision is NULL. If revision is NULL, the operation of strcmp(revision, ext_plugins[u].revision) will lead …	CWE-252 Unchecked Return Value	CVE-2021-28904	2024-11-21 15:00	2021-05-21	Show	GitHub Exploit DB Packet Storm

194662	7.5	HIGH Network	cesnet	libyang	A stack overflow in libyang <= v1.0.225 can cause a denial of service through function lyxml_parse_mem(). lyxml_parse_elem() function will be called recursively, which will consume stack space and le…	CWE-674 Uncontrolled Recursion	CVE-2021-28903	2024-11-21 15:00	2021-05-21	Show	GitHub Exploit DB Packet Storm

194663	7.5	HIGH Network	cesnet	libyang	In function read_yin_container() in libyang <= v1.0.225, it doesn't check whether the value of retval->ext[r] is NULL. In some cases, it can be NULL, which leads to the operation of retval->ext[r]->f…	CWE-252 Unchecked Return Value	CVE-2021-28902	2024-11-21 15:00	2021-05-21	Show	GitHub Exploit DB Packet Storm

194664	7.5	HIGH Network	envoyproxy	envoy	An issue was discovered in Envoy 1.14.0. There is a remotely exploitable crash for HTTP2 Metadata, because an empty METADATA map triggers a Reachable Assertion.	CWE-617 Reachable Assertion	CVE-2021-29258	2024-11-21 15:00	2021-05-21	Show	GitHub Exploit DB Packet Storm

194665	7.5	HIGH Network	envoyproxy	envoy	An issue was discovered in Envoy through 1.71.1. There is a remotely exploitable NULL pointer dereference and crash in TLS when an unknown TLS alert code is received.	CWE-476 NULL Pointer Dereference	CVE-2021-28683	2024-11-21 15:00	2021-05-21	Show	GitHub Exploit DB Packet Storm

194666	7.5	HIGH Network	envoyproxy	envoy	An issue was discovered in Envoy through 1.71.1. There is a remotely exploitable integer overflow in which a very large grpc-timeout value leads to unexpected timeout calculations.	CWE-190 Integer Overflow or Wraparound	CVE-2021-28682	2024-11-21 15:00	2021-05-21	Show	GitHub Exploit DB Packet Storm

194667	7.5	HIGH Network	invoiceplane	invoiceplane	In InvoicePlane 1.5.11 a misconfigured web server allows unauthenticated directory listing and file download. Allowing an attacker to directory traversal and download files suppose to be private with…	CWE-552 Files or Directories Accessible to External Parties	CVE-2021-29024	2024-11-21 15:00	2021-05-18	Show	GitHub Exploit DB Packet Storm

194668	5.3	MEDIUM Network	invoiceplane	invoiceplane	InvoicePlane 1.5.11 doesn't have any rate-limiting for password reset and the reset token is generated using a weak mechanism that is predictable.	CWE-307 mproper Restriction of Excessive Authentication Attempts	CVE-2021-29023	2024-11-21 15:00	2021-05-18	Show	GitHub Exploit DB Packet Storm

194669	4.3	MEDIUM Network	liferay	dxp liferay_portal	The Data Engine module in Liferay Portal 7.3.0 through 7.3.5, and Liferay DXP 7.3 before fix pack 1 does not check permissions in DataDefinitionResourceImpl.getSiteDataDefinitionByContentTypeByDataDe…	CWE-276 Incorrect Default Permissions	CVE-2021-29052	2024-11-21 15:00	2021-05-17	Show	GitHub Exploit DB Packet Storm

194670	6.1	MEDIUM Network	liferay	dxp liferay_portal	Cross-site scripting (XSS) vulnerability in the Asset module's Asset Publisher app in Liferay Portal 7.2.1 through 7.3.5, and Liferay DXP 7.1 before fix pack 21, 7.2 before fix pack 10 and 7.3 before…	CWE-79 Cross-site Scripting	CVE-2021-29051	2024-11-21 15:00	2021-05-17	Show	GitHub Exploit DB Packet Storm