Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 16, 2026, 4:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
259011 4 警告 オラクル - Oracle Database の JavaVM コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-0867 2010-05-12 15:17 2010-04-13 Show GitHub Exploit DB Packet Storm
259012 5.5 警告 オラクル - Oracle Database の XML DB コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-0852 2010-05-12 15:17 2010-04-13 Show GitHub Exploit DB Packet Storm
259013 6.5 警告 オラクル - Oracle Database の JavaVM コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-0866 2010-05-12 15:17 2010-04-13 Show GitHub Exploit DB Packet Storm
259014 7.1 危険 オラクル - Oracle Database の Core RDBMS コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-0860 2010-05-12 15:16 2010-04-13 Show GitHub Exploit DB Packet Storm
259015 7.5 危険 オラクル - 複数の Oracle 製品の Oracle Internet Directory コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-0853 2010-05-12 15:16 2010-04-13 Show GitHub Exploit DB Packet Storm
259016 2.6 注意 シックス・アパート株式会社 - Movable Type におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-1985 2010-05-12 12:01 2010-05-12 Show GitHub Exploit DB Packet Storm
259017 10 危険 日立 - 複数の EUR Form 製品 および EUR 製品における任意のコードが実行される脆弱性 CWE-noinfo
情報不足 		- 2010-05-11 15:16 2010-03-31 Show GitHub Exploit DB Packet Storm
259018 6.4 警告 マイクロソフト - Microsoft Windows における ISATAP パケットの処理に関する IPv4 ソースアドレスの制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-0812 2010-05-11 15:16 2010-04-13 Show GitHub Exploit DB Packet Storm
259019 7.6 危険 マイクロソフト - Microsoft Office Visio における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2010-0256 2010-05-11 15:16 2010-04-13 Show GitHub Exploit DB Packet Storm
259020 7.6 危険 マイクロソフト - Microsoft Office Visio における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2010-0254 2010-05-11 15:15 2010-04-13 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 16, 2026, 4:13 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
196281 7.5 HIGH
Network 		apache shardingsphere-ui Deserialization of Untrusted Data vulnerability of Apache ShardingSphere-UI allows an attacker to inject outer link resources. This issue affects Apache ShardingSphere-UI Apache ShardingSphere-UI ver… CWE-502
 Deserialization of Untrusted Data 		CVE-2021-26558 2024-11-21 14:56 2021-11-11 Show GitHub Exploit DB Packet Storm
196282 3.3 LOW
Local 		microsoft azure_real_time_operating_system Azure RTOS Information Disclosure Vulnerability NVD-CWE-noinfo
CVE-2021-26444 2024-11-21 14:56 2021-11-10 Show GitHub Exploit DB Packet Storm
196283 9.0 CRITICAL
Adjacent 		microsoft windows_server_2019
windows_10
windows_server_2016
windows_server_2022
windows_11 		Microsoft Virtual Machine Bus (VMBus) Remote Code Execution Vulnerability NVD-CWE-noinfo
CVE-2021-26443 2024-11-21 14:56 2021-11-10 Show GitHub Exploit DB Packet Storm
196284 5.4 MEDIUM
Network 		poweradmin pa_server_monitor A cross-site scripting (XSS) vulnerability in Power Admin PA Server Monitor 8.2.1.1 allows remote attackers to inject arbitrary web script or HTML via Console.exe. CWE-79
Cross-site Scripting 		CVE-2021-26844 2024-11-21 14:56 2021-11-5 Show GitHub Exploit DB Packet Storm
196285 8.8 HIGH
Network 		playtuber_project playtuber An issue was discoverered in in customercentric-selling-poland PlayTube, allows authenticated attackers to execute arbitrary code via the purchace code to the config.php. NVD-CWE-noinfo
CVE-2021-26786 2024-11-21 14:56 2021-11-4 Show GitHub Exploit DB Packet Storm
196286 9.8 CRITICAL
Network 		doyocms_project doyocms Arbitrary file upload vulnerability sysupload.php in millken doyocms 2.3 allows attackers to execute arbitrary code. CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2021-26740 2024-11-21 14:56 2021-11-2 Show GitHub Exploit DB Packet Storm
196287 9.8 CRITICAL
Network 		doyocms_project doyocms SQL Injection vulnerability in pay.php in millken doyocms 2.3, allows attackers to execute arbitrary code, via the attribute parameter. CWE-89
SQL Injection 		CVE-2021-26739 2024-11-21 14:56 2021-11-2 Show GitHub Exploit DB Packet Storm
196288 8.8 HIGH
Network 		nhn-commerce godomall5 The move_uploaded_file function in godomall5 does not perform an integrity check of extension or authority when user upload file. This vulnerability allows an attacker to execute an remote arbitrary … CWE-345
 Insufficient Verification of Data Authenticity 		CVE-2021-26610 2024-11-21 14:56 2021-10-27 Show GitHub Exploit DB Packet Storm
196289 7.5 HIGH
Network 		mangboard mang_board A vulnerability was found in Mangboard(WordPress plugin). A SQL-Injection vulnerability was found in order_type parameter. The order_type parameter makes a SQL query using unfiltered data. This vulne… CWE-89
SQL Injection 		CVE-2021-26609 2024-11-21 14:56 2021-10-26 Show GitHub Exploit DB Packet Storm
196290 9.8 CRITICAL
Network 		tobesoft nexacro An Improper input validation in execDefaultBrowser method of NEXACRO17 allows a remote attacker to execute arbitrary command on affected systems. CWE-20
 Improper Input Validation  		CVE-2021-26607 2024-11-21 14:56 2021-10-26 Show GitHub Exploit DB Packet Storm