Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 27, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
260361 5 警告 オラクル - Oracle Fusion Middleware の Oracle Internet Directory コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-0872 2010-05-12 15:18 2010-04-13 Show GitHub Exploit DB Packet Storm
260362 2.1 注意 オラクル - Oracle Database の Audit コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-0854 2010-05-12 15:18 2010-04-13 Show GitHub Exploit DB Packet Storm
260363 3.6 注意 オラクル - Oracle Database の Change Data Capture コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-0870 2010-05-12 15:18 2010-04-13 Show GitHub Exploit DB Packet Storm
260364 4 警告 オラクル - Oracle Database の XML DB コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-0851 2010-05-12 15:17 2010-04-13 Show GitHub Exploit DB Packet Storm
260365 4 警告 オラクル - Oracle Database の JavaVM コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-0867 2010-05-12 15:17 2010-04-13 Show GitHub Exploit DB Packet Storm
260366 5.5 警告 オラクル - Oracle Database の XML DB コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-0852 2010-05-12 15:17 2010-04-13 Show GitHub Exploit DB Packet Storm
260367 6.5 警告 オラクル - Oracle Database の JavaVM コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-0866 2010-05-12 15:17 2010-04-13 Show GitHub Exploit DB Packet Storm
260368 7.1 危険 オラクル - Oracle Database の Core RDBMS コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-0860 2010-05-12 15:16 2010-04-13 Show GitHub Exploit DB Packet Storm
260369 7.5 危険 オラクル - 複数の Oracle 製品の Oracle Internet Directory コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-0853 2010-05-12 15:16 2010-04-13 Show GitHub Exploit DB Packet Storm
260370 2.6 注意 シックス・アパート株式会社 - Movable Type におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-1985 2010-05-12 12:01 2010-05-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 28, 2026, 4:01 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
197641 6.5 MEDIUM
Network 		hongdian h8922_firmware Hongdian H8922 3.0.5 devices allow Directory Traversal. The /log_download.cgi log export handler does not validate user input and allows a remote attacker with minimal privileges to download any file… CWE-22
Path Traversal 		CVE-2021-28149 2024-11-21 14:59 2021-05-7 Show GitHub Exploit DB Packet Storm
197642 8.1 HIGH
Network 		strapi strapi In Strapi through 3.6.0, the admin panel allows the changing of one's own password without entering the current password. An attacker who gains access to a valid session can use this to take over an … CWE-640
 Weak Password Recovery Mechanism for Forgotten Password 		CVE-2021-28128 2024-11-21 14:59 2021-05-6 Show GitHub Exploit DB Packet Storm
197643 6.1 MEDIUM
Network 		apache airflow The "origin" parameter passed to some of the endpoints like '/trigger' was vulnerable to XSS exploit. This issue affects Apache Airflow versions <1.10.15 in 1.x series and affects 2.0.0 and 2.0.1 and… CWE-79
Cross-site Scripting 		CVE-2021-28359 2024-11-21 14:59 2021-05-2 Show GitHub Exploit DB Packet Storm
197644 6.1 MEDIUM
Network 		php-fusion phpfusion CSRF + Cross-site scripting (XSS) vulnerability in search.php in PHPFusion 9.03.110 allows remote attackers to inject arbitrary web script or HTML CWE-352
CWE-79
 Origin Validation Error
Cross-site Scripting 		CVE-2021-28280 2024-11-21 14:59 2021-04-30 Show GitHub Exploit DB Packet Storm
197645 8.8 HIGH
Network 		soyal 701client Soyal Technology 701Client 9.0.1 is vulnerable to Insecure permissions via client.exe binary with Authenticated Users group with Full permissions. CWE-732
 Incorrect Permission Assignment for Critical Resource 		CVE-2021-28269 2024-11-21 14:59 2021-04-28 Show GitHub Exploit DB Packet Storm
197646 8.8 HIGH
Network 		soyal 701server
701clientsql
701serversql 		Soyal Technologies SOYAL 701Server 9.0.1 suffers from an elevation of privileges vulnerability which can be used by an authenticated user to change the executable file with a binary choice. The vulne… CWE-276
Incorrect Default Permissions  		CVE-2021-28271 2024-11-21 14:59 2021-04-27 Show GitHub Exploit DB Packet Storm
197647 6.1 MEDIUM
Network 		apache superset Apache Superset up to and including 1.0.1 allowed for the creation of an external URL that could be malicious. By not checking user input for open redirects the URL shortener functionality would allo… CWE-601
Open Redirect 		CVE-2021-28125 2024-11-21 14:59 2021-04-27 Show GitHub Exploit DB Packet Storm
197648 5.3 MEDIUM
Network 		orangehrm orangehrm OrangeHRM 4.7 allows an unauthenticated user to enumerate the valid username and email address via the forgot password function. NVD-CWE-noinfo
CVE-2021-28399 2024-11-21 14:59 2021-04-26 Show GitHub Exploit DB Packet Storm
197649 6.1 MEDIUM
Network 		jamovi jamovi Jamovi <=1.6.18 is affected by a cross-site scripting (XSS) vulnerability. The column-name is vulnerable to XSS in the ElectronJS Framework. An attacker can make a .omv (Jamovi) document containing a… CWE-79
Cross-site Scripting 		CVE-2021-28079 2024-11-21 14:59 2021-04-26 Show GitHub Exploit DB Packet Storm
197650 6.5 MEDIUM
Network 		eclipse openj9 In Eclipse Openj9 to version 0.25.0, usage of the jdk.internal.reflect.ConstantPool API causes the JVM in some cases to pre-resolve certain constant pool entries. This allows a user to call static me… CWE-909
 Missing Initialization of Resource 		CVE-2021-28167 2024-11-21 14:59 2021-04-22 Show GitHub Exploit DB Packet Storm