Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 19, 2026, 4 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
226441	5.1	警告	サン・マイクロシステムズ VMware ヒューレット・パッカードレッドハット	-	複数の Oracle 製品の Networking コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-3573	2012-12-21 16:36	2010-10-12	Show	GitHub Exploit DB Packet Storm

226442	10	危険	サン・マイクロシステムズ VMware ヒューレット・パッカードレッドハット	-	複数の Oracle 製品の Sound コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-3572	2012-12-21 16:35	2010-10-12	Show	GitHub Exploit DB Packet Storm

226443	10	危険	サン・マイクロシステムズ VMware 日立ヒューレット・パッカードレッドハット	-	複数の Oracle 製品の 2D コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-3571	2012-12-21 16:31	2010-10-12	Show	GitHub Exploit DB Packet Storm

226444	7.6	危険	サン・マイクロシステムズ VMware ヒューレット・パッカードレッドハット	-	複数の Oracle 製品の Deployment Toolkit コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-3570	2012-12-21 16:30	2010-10-12	Show	GitHub Exploit DB Packet Storm

226445	10	危険	サン・マイクロシステムズ VMware ヒューレット・パッカードレッドハット	-	複数の Oracle 製品の Java Runtime Environment コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-3569	2012-12-21 16:28	2010-10-12	Show	GitHub Exploit DB Packet Storm

226446	10	危険	サン・マイクロシステムズ VMware ヒューレット・パッカードレッドハット	-	複数の Oracle 製品の Java Runtime Environment コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-3568	2012-12-21 16:26	2010-10-12	Show	GitHub Exploit DB Packet Storm

226447	10	危険	サン・マイクロシステムズ VMware 日立ヒューレット・パッカードレッドハット	-	複数の Oracle 製品の 2D コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-3567	2012-12-21 16:24	2010-10-12	Show	GitHub Exploit DB Packet Storm

226448	6	警告	サイバートラスト株式会社 VMware Linux レッドハット	-	Linux kernel の ioc_general 関数における重要な情報を取得される脆弱性	CWE-189 数値処理の問題	CVE-2010-4157	2012-12-21 15:59	2010-11-22	Show	GitHub Exploit DB Packet Storm

226449	1.9	注意	サイバートラスト株式会社 VMware Linux レッドハット	-	Linux kernel の copy_semid_to_user 関数における重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2010-4083	2012-12-21 15:57	2010-10-20	Show	GitHub Exploit DB Packet Storm

226450	9.3	危険	アドビシステムズ	-	Adobe Shockwave Player におけるプラグインモジュールのインストールに関する問題	CWE-Other その他	CVE-2012-6271	2012-12-21 15:50	2012-12-19	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 19, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
210061	9.1	CRITICAL Network	auth0	omniauth-auth0	omniauth-auth0 (rubygems) versions >= 2.3.0 and < 2.4.1 improperly validate the JWT token signature when using the `jwt_validator.verify` method. Improper validation of the JWT token signature can al…	CWE-347 Improper Verification of Cryptographic Signature	CVE-2020-15240	2024-11-21 14:05	2020-10-22	Show	GitHub Exploit DB Packet Storm

210062	6.1	MEDIUM Network	orchid	platform	In platform before version 9.4.4, inline attributes are not properly escaped. If the data that came from users was not escaped, then an XSS vulnerability is possible. The issue was introduced in 9.0.…	-	CVE-2020-15263	2024-11-21 14:05	2020-10-20	Show	GitHub Exploit DB Packet Storm

210063	3.7	LOW Network	webpack-subresource-integrity_project	webpack-subresource-integrity	In webpack-subresource-integrity before version 1.5.1, all dynamically loaded chunks receive an invalid integrity hash that is ignored by the browser, and therefore the browser cannot validate their …	CWE-345 Insufficient Verification of Data Authenticity	CVE-2020-15262	2024-11-21 14:05	2020-10-20	Show	GitHub Exploit DB Packet Storm

210064	7.8	HIGH Local	chocolatey	boxstarter	The Boxstarter installer before version 2.13.0 configures C:\ProgramData\Boxstarter to be in the system-wide PATH environment variable. However, this directory is writable by normal, unprivileged use…	-	CVE-2020-15264	2024-11-21 14:05	2020-10-21	Show	GitHub Exploit DB Packet Storm

210065	6.7	MEDIUM Local	veyon	veyon	On Windows the Veyon Service before version 4.4.2 contains an unquoted service path vulnerability, allowing locally authenticated users with administrative privileges to run malicious executables wit…	-	CVE-2020-15261	2024-11-21 14:05	2020-10-20	Show	GitHub Exploit DB Packet Storm

210066	9.8	CRITICAL Network	object-path_project	object-path	A prototype pollution vulnerability has been found in `object-path` <= 0.11.4 affecting the `set()` method. The vulnerability is limited to the `includeInheritedProps` mode (if version >= 0.11.0 is u…	NVD-CWE-Other	CVE-2020-15256	2024-11-21 14:05	2020-10-20	Show	GitHub Exploit DB Packet Storm

210067	4.3	MEDIUM Network	sylius	sylius	In Sylius before versions 1.6.9, 1.7.9 and 1.8.3, the user may register in a shop by email mail@example.com, verify it, change it to the mail another@domain.com and stay verified and enabled. This ma…	CWE-862 Missing Authorization	CVE-2020-15245	2024-11-21 14:05	2020-10-20	Show	GitHub Exploit DB Packet Storm

210068	7.3	HIGH Local	anuko	time_tracker	In Anuko Time Tracker before verion 1.19.23.5325, due to not properly filtered user input a CSV export of a report could contain cells that are treated as formulas by spreadsheet software (for exampl…	CWE-1236 Improper Neutralization of Formula Elements in a CSV File	CVE-2020-15255	2024-11-21 14:05	2020-10-17	Show	GitHub Exploit DB Packet Storm

210069	8.8	HIGH Network	xwiki	xwiki	In XWiki before version 12.5 and 11.10.6, any user with SCRIPT right (EDIT right before XWiki 7.4) can gain access to the application server Servlet context which contains tools allowing to instantia…	CWE-74 Injection	CVE-2020-15252	2024-11-21 14:05	2020-10-17	Show	GitHub Exploit DB Packet Storm

210070	8.0	HIGH Network	wire	wire	In Wire before 3.20.x, `shell.openExternal` was used without checking the URL. This vulnerability allows an attacker to execute code on the victims machine by sending messages containing links with a…	-	CVE-2020-15258	2024-11-21 14:05	2020-10-17	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed