Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 31, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
249251 5 警告 オラクル - Oracle Supply Chain Products Suite の Oracle Agile PLM for Process における Supplier Portal の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2012-0580 2012-05-9 15:06 2012-04-17 Show GitHub Exploit DB Packet Storm
249252 5.5 警告 オラクル - Oracle Supply Chain Products Suite の Oracle Agile PLM for Process におけるインストールの処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2012-0565 2012-05-9 15:04 2012-04-17 Show GitHub Exploit DB Packet Storm
249253 7.5 危険 オラクル - Oracle AutoVue の AutoVue Office における脆弱性 CWE-noinfo
情報不足 		CVE-2012-0549 2012-05-9 15:00 2012-04-17 Show GitHub Exploit DB Packet Storm
249254 2.6 注意 オラクル - Oracle E-Business Suite の Oracle iStore における脆弱性 CWE-noinfo
情報不足 		CVE-2012-0542 2012-05-9 14:52 2012-04-17 Show GitHub Exploit DB Packet Storm
249255 2.6 注意 オラクル - Oracle E-Business Suite の Oracle Application Object Library における脆弱性 CWE-noinfo
情報不足 		CVE-2012-0513 2012-05-9 14:51 2012-04-17 Show GitHub Exploit DB Packet Storm
249256 5 警告 オラクル - Oracle E-Business Suite の Oracle Application Object Library における脆弱性 CWE-noinfo
情報不足 		CVE-2012-0535 2012-05-9 14:50 2012-04-17 Show GitHub Exploit DB Packet Storm
249257 6.4 警告 オラクル - Oracle E-Business Suite の Oracle Application Object Library における脆弱性 CWE-noinfo
情報不足 		CVE-2012-0537 2012-05-9 14:50 2012-04-17 Show GitHub Exploit DB Packet Storm
249258 4.3 警告 オラクル - Oracle Database Server および Oracle Enterprise Manager Grid Control における脆弱性 CWE-noinfo
情報不足 		CVE-2012-0520 2012-05-9 14:30 2012-04-17 Show GitHub Exploit DB Packet Storm
249259 5.5 警告 オラクル - Oracle Database Server および Oracle Enterprise Manager Grid Control における脆弱性 CWE-noinfo
情報不足 		CVE-2012-0512 2012-05-9 14:14 2012-04-17 Show GitHub Exploit DB Packet Storm
249260 5.8 警告 オラクル - Oracle Database Server および Oracle Enterprise Manager Grid Control における脆弱性 CWE-noinfo
情報不足 		CVE-2012-0528 2012-05-9 14:11 2012-04-17 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 31, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
200441 5.4 MEDIUM
Network 		alfresco alfresco Alfresco Enterprise before 5.2.7 and Alfresco Community before 6.2.0 (rb65251d6-b368) has XSS via an uploaded document, when the attacker has write access to a project. CWE-79
Cross-site Scripting 		CVE-2020-8778 2024-11-21 14:39 2020-03-3 Show GitHub Exploit DB Packet Storm
200442 5.4 MEDIUM
Network 		alfresco alfresco Alfresco Enterprise before 5.2.7 and Alfresco Community before 6.2.0 (rb65251d6-b368) has XSS via a user profile photo, as demonstrated by a SCRIPT element in an SVG document. CWE-79
Cross-site Scripting 		CVE-2020-8777 2024-11-21 14:39 2020-03-3 Show GitHub Exploit DB Packet Storm
200443 5.4 MEDIUM
Network 		alfresco alfresco Alfresco Enterprise before 5.2.7 and Alfresco Community before 6.2.0 (rb65251d6-b368) has XSS via the URL property of a file. CWE-79
Cross-site Scripting 		CVE-2020-8776 2024-11-21 14:39 2020-03-3 Show GitHub Exploit DB Packet Storm
200444 6.1 MEDIUM
Network 		fiserv accurate_reconciliation Fiserv Accurate Reconciliation 2.19.0, fixed in 3.0.0 or higher, allows XSS via the logout.jsp timeOut parameter. CWE-79
Cross-site Scripting 		CVE-2020-8952 2024-11-21 14:39 2020-02-27 Show GitHub Exploit DB Packet Storm
200445 5.4 MEDIUM
Network 		fiserv accurate_reconciliation Fiserv Accurate Reconciliation 2.19.0, fixed in 3.0.0 or higher, allows XSS via the Source or Destination field of the Configuration Manager (Configuration Parameter Translation) page. CWE-79
Cross-site Scripting 		CVE-2020-8951 2024-11-21 14:39 2020-02-27 Show GitHub Exploit DB Packet Storm
200446 8.1 HIGH
Network 		gurux device_language_message_specification_director An issue was discovered in Gurux GXDLMS Director through 8.5.1905.1301. When downloading OBIS codes, it does not verify that the downloaded files are actual OBIS codes and doesn't check for path trav… CWE-22
Path Traversal 		CVE-2020-8810 2024-11-21 14:39 2020-02-26 Show GitHub Exploit DB Packet Storm
200447 8.1 HIGH
Network 		gurux device_language_message_specification_director Gurux GXDLMS Director prior to 8.5.1905.1301 downloads updates to add-ins and OBIS code over an unencrypted HTTP connection. A man-in-the-middle attacker can prompt the user to download updates by mo… CWE-494
 Download of Code Without Integrity Check 		CVE-2020-8809 2024-11-21 14:39 2020-02-26 Show GitHub Exploit DB Packet Storm
200448 6.1 MEDIUM
Network 		wpjobboard wpjobboard The WPJobBoard plugin 5.5.3 for WordPress allows Persistent XSS via the Add Job form, as demonstrated by title and Description. CWE-79
Cross-site Scripting 		CVE-2020-9019 2024-11-21 14:39 2020-02-26 Show GitHub Exploit DB Packet Storm
200449 5.3 MEDIUM
Network 		litecart litecart LiteCart through 2.2.1 allows admin/?app=users&doc=edit_user CSRF to add a user. CWE-352
 Origin Validation Error 		CVE-2020-9018 2024-11-21 14:39 2020-02-26 Show GitHub Exploit DB Packet Storm
200450 5.4 MEDIUM
Network 		blackboard blackboard_learn Stored Cross-site scripting (XSS) vulnerability in Blackboard Learn/PeopleTool v9.1 allows users to inject arbitrary web script via the Tile widget in the People Tool profile editor. CWE-79
Cross-site Scripting 		CVE-2020-9008 2024-11-21 14:39 2020-02-26 Show GitHub Exploit DB Packet Storm