Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 17, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
249551 5.5 警告 オラクル - Oracle PeopleSoft および JDEdwards Suite の PeopleSoft Enterprise FMS - GL コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-3539 2012-03-27 18:42 2010-10-14 Show GitHub Exploit DB Packet Storm
249552 5.5 警告 オラクル - Oracle PeopleSoft および JDEdwards Suite の PeopleSoft Enterprise FMS - GL コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-3538 2012-03-27 18:42 2010-10-14 Show GitHub Exploit DB Packet Storm
249553 5.5 警告 オラクル - Oracle PeopleSoft および JDEdwards Suite の PeopleSoft Enterprise FMS - AM コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-3537 2012-03-27 18:42 2010-10-14 Show GitHub Exploit DB Packet Storm
249554 5.5 警告 オラクル - Oracle PeopleSoft および JDEdwards Suite の PeopleSoft Enterprise SCM コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-3536 2012-03-27 18:42 2010-10-14 Show GitHub Exploit DB Packet Storm
249555 4.4 警告 オラクル - Oracle Sun Products Suite の Directory Server Enterprise Edition コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-3535 2012-03-27 18:42 2010-10-14 Show GitHub Exploit DB Packet Storm
249556 4.6 警告 オラクル - Oracle Primavera Products Suite の Primavera P6 Enterprise Project Portfolio Management コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-3534 2012-03-27 18:42 2010-10-14 Show GitHub Exploit DB Packet Storm
249557 5.5 警告 オラクル - Oracle PeopleSoft および JDEdwards Suite の PeopleSoft Enterprise SCM - Strategic Sourcing コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-3524 2012-03-27 18:42 2010-10-14 Show GitHub Exploit DB Packet Storm
249558 5 警告 オラクル - Oracle PeopleSoft および JDEdwards Suite の PeopleSoft Enterprise PeopleTools コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-3523 2012-03-27 18:42 2010-10-14 Show GitHub Exploit DB Packet Storm
249559 4 警告 オラクル - Oracle PeopleSoft および JDEdwards Suite の PeopleSoft Enterprise PeopleTools コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-3522 2012-03-27 18:42 2010-10-14 Show GitHub Exploit DB Packet Storm
249560 5.5 警告 オラクル - Oracle PeopleSoft および JDEdwards Suite の PeopleSoft Enterprise HCM ePay コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-3521 2012-03-27 18:42 2010-10-13 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 18, 2026, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
197491 7.5 HIGH
Network 		microchip syncserver_s100_firmware
syncserver_s200_firmware
syncserver_s250_firmware
syncserver_s300_firmware
syncserver_s350_firmware 		Symmetricom SyncServer S100 2.90.70.3, S200 1.30, S250 1.25, S300 2.65.0, and S350 2.80.1 devices mishandle session validation, leading to unauthenticated creation, modification, or elimination of us… NVD-CWE-noinfo
CVE-2020-9034 2024-11-21 14:39 2020-02-17 Show GitHub Exploit DB Packet Storm
197492 5.4 MEDIUM
Network 		dolibarr dolibarr_erp\/crm Dolibarr 11.0 allows XSS via the joinfiles, topic, or code parameter, or the HTTP Referer header. CWE-79
Cross-site Scripting 		CVE-2020-9016 2024-11-21 14:39 2020-02-17 Show GitHub Exploit DB Packet Storm
197493 4.3 MEDIUM
Network 		arvato skillpipe Arvato Skillpipe 3.0 allows attackers to bypass intended print restrictions by deleting <div id="watermark"> from the HTML source code. CWE-20
 Improper Input Validation  		CVE-2020-9013 2024-11-21 14:39 2020-02-17 Show GitHub Exploit DB Packet Storm
197494 6.1 MEDIUM
Network 		gluu gluu_server A cross-site scripting (XSS) vulnerability in the Import People functionality in Gluu Identity Configuration 4.0 allows remote attackers to inject arbitrary web script or HTML via the filename parame… CWE-79
Cross-site Scripting 		CVE-2020-9012 2024-11-21 14:39 2020-02-17 Show GitHub Exploit DB Packet Storm
197495 5.4 MEDIUM
Network 		codologic codoforum Codoforum 4.8.8 allows self-XSS via the title of a new topic. CWE-79
Cross-site Scripting 		CVE-2020-9007 2024-11-21 14:39 2020-02-17 Show GitHub Exploit DB Packet Storm
197496 8.8 HIGH
Adjacent 		abbott freestyle_libre_firmware Older generation Abbott FreeStyle Libre sensors allow remote attackers within close proximity to enable write access to memory via a specific NFC unlock command. NOTE: The vulnerability is not presen… CWE-787
 Out-of-bounds Write 		CVE-2020-8997 2024-11-21 14:39 2020-02-17 Show GitHub Exploit DB Packet Storm
197497 4.3 MEDIUM
Network 		aishu anyshare_cloud AnyShare Cloud 6.0.9 allows authenticated directory traversal to read files, as demonstrated by the interface/downloadwithpath/downloadfile/?filepath=/etc/passwd URI. CWE-22
Path Traversal 		CVE-2020-8996 2024-11-21 14:39 2020-02-17 Show GitHub Exploit DB Packet Storm
197498 5.4 MEDIUM
Network 		ninjaforms ninja_forms The Ninja Forms plugin 3.4.22 for WordPress has Multiple Stored XSS vulnerabilities via ninja_forms[recaptcha_site_key], ninja_forms[recaptcha_secret_key], ninja_forms[recaptcha_lang], or ninja_forms… CWE-79
Cross-site Scripting 		CVE-2020-8594 2024-11-21 14:39 2020-02-15 Show GitHub Exploit DB Packet Storm
197499 7.4 HIGH
Network 		istio istio An issue was discovered in Istio 1.3 through 1.3.6. Under certain circumstances, it is possible to bypass a specifically configured Mixer policy. Istio-proxy accepts the x-istio-attributes header at … CWE-20
 Improper Input Validation  		CVE-2020-8843 2024-11-21 14:39 2020-02-15 Show GitHub Exploit DB Packet Storm
197500 9.0 CRITICAL
Network 		progess
progress 		moveit_transfer In Progress MOVEit Transfer 2019.1 before 2019.1.4 and 2019.2 before 2019.2.1, a REST API endpoint failed to adequately sanitize malicious input, which could allow an authenticated attacker to execut… CWE-79
Cross-site Scripting 		CVE-2020-8612 2024-11-21 14:39 2020-02-15 Show GitHub Exploit DB Packet Storm