Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 27, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
248871 3.5 注意 オラクル - Oracle PeopleSoft Enterprise Portal における Enterprise Portal の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2012-0531 2012-05-9 18:28 2012-04-17 Show GitHub Exploit DB Packet Storm
248872 3.5 注意 オラクル - Oracle PeopleSoft Enterprise PeopleTools における Core の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2012-0529 2012-05-9 18:27 2012-04-17 Show GitHub Exploit DB Packet Storm
248873 3.5 注意 オラクル - Oracle PeopleSoft Enterprise PeopleTools における PIA Core Technology の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2012-0561 2012-05-9 18:26 2012-04-17 Show GitHub Exploit DB Packet Storm
248874 4 警告 オラクル - Oracle PeopleSoft Enterprise SCM における eProcurement の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2012-0530 2012-05-9 18:25 2012-04-17 Show GitHub Exploit DB Packet Storm
248875 4 警告 オラクル - Oracle PeopleSoft Enterprise SCM における請求 (Billing) 処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2012-0559 2012-05-9 18:24 2012-04-17 Show GitHub Exploit DB Packet Storm
248876 4 警告 オラクル - Oracle PeopleSoft Enterprise HRMS における eCompensation の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2012-0536 2012-05-9 18:22 2012-04-17 Show GitHub Exploit DB Packet Storm
248877 4 警告 オラクル - Oracle PeopleSoft Enterprise HRMS における Candidate Gateway の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2012-0562 2012-05-9 18:22 2012-04-17 Show GitHub Exploit DB Packet Storm
248878 4 警告 オラクル - Oracle PeopleSoft Enterprise HCM における Human Resources の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2012-0521 2012-05-9 18:18 2012-04-17 Show GitHub Exploit DB Packet Storm
248879 4 警告 オラクル - Oracle PeopleSoft Enterprise FCSM における Receivables の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2012-0533 2012-05-9 18:16 2012-04-17 Show GitHub Exploit DB Packet Storm
248880 4 警告 オラクル - Oracle PeopleSoft Enterprise CRM における SEC の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2012-0514 2012-05-9 18:14 2012-04-17 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
199971 8.8 HIGH
Network 		dot_project dot The dot package v1.1.2 uses Function() to compile templates. This can be exploited by the attacker if they can control the given template or if they can control the value set on Object.prototype. CWE-94
Code Injection 		CVE-2020-8141 2024-11-21 14:38 2020-03-16 Show GitHub Exploit DB Packet Storm
199972 7.8 HIGH
Local 		trendmicro password_manager Trend Micro Password Manager for Windows version 5.0 is affected by a DLL hijacking vulnerability would could potentially allow an attacker privleged escalation. CWE-427
 Uncontrolled Search Path Element 		CVE-2020-8469 2024-11-21 14:38 2020-03-13 Show GitHub Exploit DB Packet Storm
199973 6.1 MEDIUM
Network 		metagauss registrationmagic XSS was discovered in the RegistrationMagic plugin 4.6.0.0 for WordPress via the rm_form_id, rm_tr, or form_name parameter. CWE-79
Cross-site Scripting 		CVE-2020-8436 2024-11-21 14:38 2020-03-12 Show GitHub Exploit DB Packet Storm
199974 8.1 HIGH
Network 		metagauss registrationmagic An issue was discovered in the RegistrationMagic plugin 4.6.0.0 for WordPress. There is SQL injection via the rm_analytics_show_form rm_form_id parameter. CWE-89
SQL Injection 		CVE-2020-8435 2024-11-21 14:38 2020-03-12 Show GitHub Exploit DB Packet Storm
199975 7.5 HIGH
Network 		puppet puppet_server
puppetdb
puppet_enterprise 		Puppet Server and PuppetDB provide useful performance and debugging information via their metrics API endpoints. For PuppetDB this may contain things like hostnames. Puppet Server reports resource na… NVD-CWE-noinfo
CVE-2020-7943 2024-11-21 14:38 2020-03-12 Show GitHub Exploit DB Packet Storm
199976 9.8 CRITICAL
Network 		zohocorp manageengine_desktop_central An XML external entity (XXE) vulnerability in Zoho ManageEngine Desktop Central before the 07-Mar-2020 update allows remote unauthenticated users to read arbitrary files or conduct server-side reques… CWE-611
CWE-918
XXE
Server-Side Request Forgery (SSRF)  		CVE-2020-8540 2024-11-21 14:38 2020-03-12 Show GitHub Exploit DB Packet Storm
199977 6.5 MEDIUM
Network 		monstra monstra Monstra CMS through 3.0.4 allows remote authenticated users to take over arbitrary user accounts via a modified login parameter to an edit URI, as demonstrated by login=victim to the users/21/edit UR… CWE-425
 Direct Request ('Forced Browsing') 		CVE-2020-8439 2024-11-21 14:38 2020-03-7 Show GitHub Exploit DB Packet Storm
199978 9.8 CRITICAL
Network 		gitlab gitlab GitLab 10.7 and later through 12.7.2 has Incorrect Access Control. CWE-269
 Improper Privilege Management 		CVE-2020-8113 2024-11-21 14:38 2020-03-7 Show GitHub Exploit DB Packet Storm
199979 8.8 HIGH
Network 		phpipam phpipam An issue was discovered in tools/pass-change/result.php in phpIPAM 1.4. CSRF can be used to change the password of any user/admin, to escalate privileges, and to gain access to more data and function… CWE-352
 Origin Validation Error 		CVE-2020-7988 2024-11-21 14:38 2020-03-5 Show GitHub Exploit DB Packet Storm
199980 7.5 HIGH
Network 		bittorrent utorrent The bencoding parser in BitTorrent uTorrent through 3.5.5 (build 45505) misparses nested bencoded dictionaries, which allows a remote attacker to cause a denial of service. CWE-476
 NULL Pointer Dereference 		CVE-2020-8437 2024-11-21 14:38 2020-03-3 Show GitHub Exploit DB Packet Storm