Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 25, 2026, 12:07 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
224881	5.5	警告	オラクル	-	Oracle Fusion Middleware の Oracle Endeca Server における脆弱性	CWE-noinfo 情報不足	CVE-2013-3763	2013-07-18 14:19	2013-07-16	Show	GitHub Exploit DB Packet Storm

224882	5.5	警告	オラクル	-	Oracle Fusion Middleware の Oracle Endeca Server における脆弱性	CWE-noinfo 情報不足	CVE-2013-3764	2013-07-18 14:19	2013-07-16	Show	GitHub Exploit DB Packet Storm

224883	4.3	警告	オラクル	-	Oracle Fusion Middleware の Oracle WebCenter Content における Site Studio に関する脆弱性	CWE-noinfo 情報不足	CVE-2013-3769	2013-07-18 14:19	2013-07-16	Show	GitHub Exploit DB Packet Storm

224884	5.5	警告	オラクル	-	Oracle Fusion Middleware の Oracle WebCenter Content における Content Server に関する脆弱性	CWE-noinfo 情報不足	CVE-2013-3770	2013-07-18 14:19	2013-07-16	Show	GitHub Exploit DB Packet Storm

224885	4.3	警告	オラクル	-	Oracle Fusion Middleware の Oracle WebCenter Content における Web Forms に関する脆弱性	CWE-noinfo 情報不足	CVE-2013-3772	2013-07-18 14:19	2013-07-16	Show	GitHub Exploit DB Packet Storm

224886	4.3	警告	オラクル	-	Oracle PeopleSoft Products の PeopleSoft Enterprise PeopleTools における PIA Search Functionality に関する脆弱性	CWE-noinfo 情報不足	CVE-2013-3759	2013-07-18 13:58	2013-07-16	Show	GitHub Exploit DB Packet Storm

224887	4.3	警告	オラクル	-	Oracle PeopleSoft Products の PeopleSoft Enterprise Portal および PeopleTools における PIA Core Technology に関する脆弱性	CWE-noinfo 情報不足	CVE-2013-3761	2013-07-18 13:58	2013-07-16	Show	GitHub Exploit DB Packet Storm

224888	4.3	警告	オラクル	-	Oracle PeopleSoft Products の PeopleSoft Enterprise PeopleTools における Rich Text Editor に関する脆弱性	CWE-noinfo 情報不足	CVE-2013-3768	2013-07-18 13:58	2013-07-16	Show	GitHub Exploit DB Packet Storm

224889	4	警告	オラクル	-	Oracle PeopleSoft Products の PeopleSoft Enterprise Portal における Saved Search に関する脆弱性	CWE-noinfo 情報不足	CVE-2013-3780	2013-07-18 13:58	2013-07-16	Show	GitHub Exploit DB Packet Storm

224890	5.5	警告	オラクル	-	Oracle PeopleSoft Products の PeopleSoft Enterprise HRMS における Time および Labor に関する脆弱性	CWE-noinfo 情報不足	CVE-2013-3784	2013-07-18 13:58	2013-07-16	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 25, 2026, 4:01 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
199231	9.8	CRITICAL Network	karma-mojo_project	karma-mojo	karma-mojo through 1.0.1 is vulnerable to Command Injection. It allows execution of arbitrary commands via the config argument.	CWE-78 OS Command	CVE-2020-7626	2024-11-21 14:37	2020-04-3	Show	GitHub Exploit DB Packet Storm

199232	9.8	CRITICAL Network	op-browser_project	op-browser	op-browser through 1.0.6 is vulnerable to Command Injection. It allows execution of arbitrary commands via the url function.	CWE-78 OS Command	CVE-2020-7625	2024-11-21 14:37	2020-04-3	Show	GitHub Exploit DB Packet Storm

199233	9.8	CRITICAL Network	effect_project	effect	effect through 1.0.4 is vulnerable to Command Injection. It allows execution of arbitrary command via the options argument.	CWE-78 OS Command	CVE-2020-7624	2024-11-21 14:37	2020-04-3	Show	GitHub Exploit DB Packet Storm

199234	9.8	CRITICAL Network	jscover_project	jscover	jscover through 1.0.0 is vulnerable to Command Injection. It allows execution of arbitrary command via the source argument.	CWE-78 OS Command	CVE-2020-7623	2024-11-21 14:37	2020-04-3	Show	GitHub Exploit DB Packet Storm

199235	9.8	CRITICAL Network	ibm	strongloop_nginx_controller	strong-nginx-controller through 1.0.2 is vulnerable to Command Injection. It allows execution of arbitrary command as part of the '_nginxCmd()' function.	CWE-78 OS Command	CVE-2020-7621	2024-11-21 14:37	2020-04-3	Show	GitHub Exploit DB Packet Storm

199236	9.8	CRITICAL Network	netease	pomelo-monitor	pomelo-monitor through 0.3.7 is vulnerable to Command Injection.It allows injection of arbitrary commands as part of 'pomelo-monitor' params.	CWE-78 OS Command	CVE-2020-7620	2024-11-21 14:37	2020-04-3	Show	GitHub Exploit DB Packet Storm

199237	9.8	CRITICAL Network	get-git-data_project	get-git-data	get-git-data through 1.3.1 is vulnerable to Command Injection. It is possible to inject arbitrary commands as part of the arguments provided to get-git-data.	CWE-78 OS Command	CVE-2020-7619	2024-11-21 14:37	2020-04-3	Show	GitHub Exploit DB Packet Storm

199238	9.8	CRITICAL Network	ini-parser_project	ini-parser	ini-parser through 0.0.2 is vulnerable to Prototype Pollution.The library could be tricked into adding or modifying properties of Object.prototype using a '__proto__' payload.	CWE-1321 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')	CVE-2020-7617	2024-11-21 14:37	2020-04-3	Show	GitHub Exploit DB Packet Storm

199239	9.8	CRITICAL Network	objectcomputing	micronaut	All versions of io.micronaut:micronaut-http-client before 1.2.11 and all versions from 1.3.0 before 1.3.2 are vulnerable to HTTP Request Header Injection due to not validating request headers passed …	CWE-444 HTTP Request Smuggling	CVE-2020-7611	2024-11-21 14:37	2020-03-31	Show	GitHub Exploit DB Packet Storm

199240	9.8	CRITICAL Network	mongodb	bson	All versions of bson before 1.1.4 are vulnerable to Deserialization of Untrusted Data. The package will ignore an unknown value for an object's _bsotype, leading to cases where an object is serialize…	CWE-502 Deserialization of Untrusted Data	CVE-2020-7610	2024-11-21 14:37	2020-03-31	Show	GitHub Exploit DB Packet Storm