Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 25, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
248871 4 警告 オラクル - Oracle PeopleSoft Enterprise HRMS における Candidate Gateway の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2012-0562 2012-05-9 18:22 2012-04-17 Show GitHub Exploit DB Packet Storm
248872 4 警告 オラクル - Oracle PeopleSoft Enterprise HCM における Human Resources の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2012-0521 2012-05-9 18:18 2012-04-17 Show GitHub Exploit DB Packet Storm
248873 4 警告 オラクル - Oracle PeopleSoft Enterprise FCSM における Receivables の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2012-0533 2012-05-9 18:16 2012-04-17 Show GitHub Exploit DB Packet Storm
248874 4 警告 オラクル - Oracle PeopleSoft Enterprise CRM における SEC の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2012-0514 2012-05-9 18:14 2012-04-17 Show GitHub Exploit DB Packet Storm
248875 4.3 警告 オラクル - Oracle PeopleSoft Enterprise PeopleTools におけるポータルの処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2012-0560 2012-05-9 18:14 2012-04-17 Show GitHub Exploit DB Packet Storm
248876 5.5 警告 オラクル - Oracle PeopleSoft Enterprise PeopleTools における検索処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2012-0538 2012-05-9 18:13 2012-04-17 Show GitHub Exploit DB Packet Storm
248877 5.5 警告 オラクル - Oracle PeopleSoft Enterprise HRMS における eCompensation Manager Desktop の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2012-0517 2012-05-9 18:08 2012-04-17 Show GitHub Exploit DB Packet Storm
248878 6.5 警告 オラクル - Oracle PeopleSoft Enterprise PeopleTools におけるクエリ処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2012-0564 2012-05-9 18:06 2012-04-17 Show GitHub Exploit DB Packet Storm
248879 4 警告 オラクル - Oracle DB UM Connector for Oracle Identity Manager (Oracle Identity Manager Connector) における脆弱性 CWE-noinfo
情報不足 		CVE-2012-0515 2012-05-9 18:04 2012-04-17 Show GitHub Exploit DB Packet Storm
248880 4.3 警告 オラクル - Oracle JDeveloper における Java Business Objects の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2012-0522 2012-05-9 17:57 2012-04-17 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 25, 2026, 4:01 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
212031 5.3 MEDIUM
Network 		powerdns recursor In PowerDNS Recursor versions up to and including 4.3.1, 4.2.2 and 4.1.16, the ACL restricting access to the internal web server is not properly enforced. CWE-863
 Incorrect Authorization 		CVE-2020-14196 2024-11-21 14:02 2020-07-2 Show GitHub Exploit DB Packet Storm
212032 9.8 CRITICAL
Network 		monstaftp monsta_ftp Monsta FTP 2.10.1 or below allows external control of paths used in filesystem operations. This allows attackers to read and write arbitrary local files, allowing an attacker to gain remote code exec… CWE-610
Externally Controlled Reference to a Resource in Another Sphere 		CVE-2020-14057 2024-11-21 14:02 2020-07-2 Show GitHub Exploit DB Packet Storm
212033 9.8 CRITICAL
Network 		monstaftp monsta_ftp Monsta FTP 2.10.1 or below is prone to a server-side request forgery vulnerability due to insufficient restriction of the web fetch functionality. This allows attackers to read arbitrary local files … CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2020-14056 2024-11-21 14:02 2020-07-2 Show GitHub Exploit DB Packet Storm
212034 6.1 MEDIUM
Network 		monstaftp monsta_ftp Monsta FTP 2.10.1 or below is prone to a stored cross-site scripting vulnerability in the language setting due to insufficient output encoding. CWE-79
Cross-site Scripting 		CVE-2020-14055 2024-11-21 14:02 2020-07-2 Show GitHub Exploit DB Packet Storm
212035 6.1 MEDIUM
Network 		atlassian jira
jira_software_data_center 		The quick search component in Atlassian Jira Server and Data Center before 8.9.1 allows remote attackers to inject arbitrary HTML or JavaScript via a Cross-Site Scripting (XSS) vulnerability CWE-79
Cross-site Scripting 		CVE-2020-14169 2024-11-21 14:02 2020-07-1 Show GitHub Exploit DB Packet Storm
212036 5.9 MEDIUM
Network 		atlassian jira
jira_software_data_center
jira_server
jira_data_center 		The email client in Jira Server and Data Center before version 7.13.16, from 8.5.0 before 8.5.7, from 8.8.0 before 8.8.2, and from 8.9.0 before 8.9.1 allows remote attackers to access outgoing emails… NVD-CWE-noinfo
CVE-2020-14168 2024-11-21 14:02 2020-07-1 Show GitHub Exploit DB Packet Storm
212037 7.5 HIGH
Network 		atlassian jira
jira_software_data_center
jira_server
jira_data_center 		The MessageBundleResource resource in Jira Server and Data Center before version 7.13.4, from 8.5.0 before 8.5.5, from 8.8.0 before 8.8.2, and from 8.9.0 before 8.9.1 allows remote attackers to impac… NVD-CWE-noinfo
CVE-2020-14167 2024-11-21 14:02 2020-07-1 Show GitHub Exploit DB Packet Storm
212038 4.8 MEDIUM
Network 		atlassian jira_service_desk The /servicedesk/customer/portals resource in Jira Service Desk Server and Data Center before version 4.10.0 allows remote attackers with project administrator privileges to inject arbitrary HTML or … CWE-79
Cross-site Scripting 		CVE-2020-14166 2024-11-21 14:02 2020-07-1 Show GitHub Exploit DB Packet Storm
212039 5.3 MEDIUM
Network 		atlassian jira
jira_software_data_center 		The UniversalAvatarResource.getAvatars resource in Jira Server and Data Center before version 8.9.0 allows remote attackers to obtain information about custom project avatars names via an Improper au… NVD-CWE-noinfo
CVE-2020-14165 2024-11-21 14:02 2020-07-1 Show GitHub Exploit DB Packet Storm
212040 6.1 MEDIUM
Network 		atlassian jira
jira_software_data_center 		The WYSIWYG editor resource in Jira Server and Data Center before version 8.8.2 allows remote attackers to inject arbitrary HTML or JavaScript names via an Cross Site Scripting (XSS) vulnerability by… CWE-79
Cross-site Scripting 		CVE-2020-14164 2024-11-21 14:02 2020-07-1 Show GitHub Exploit DB Packet Storm