Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 17, 2026, 2 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
249571	5.5	警告	オラクル	-	Oracle PeopleSoft および JDEdwards Suite の PeopleSoft Enterprise FMS - AM コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-3527	2012-03-27 18:42	2010-10-14	Show	GitHub Exploit DB Packet Storm

249572	5.5	警告	オラクル	-	Oracle PeopleSoft および JDEdwards Suite の PeopleSoft Enterprise SCM - PO コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-3526	2012-03-27 18:42	2010-10-14	Show	GitHub Exploit DB Packet Storm

249573	5.5	警告	オラクル	-	Oracle PeopleSoft および JDEdwards Suite の PeopleSoft Enterprise FMS コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-3525	2012-03-27 18:42	2010-10-14	Show	GitHub Exploit DB Packet Storm

249574	10	危険	オラクル	-	Oracle Fusion Middleware の Oracle WebLogic Server コンポーネントにおける Node Manager の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2010-3510	2012-03-27 18:42	2011-01-19	Show	GitHub Exploit DB Packet Storm

249575	3	注意	オラクル	-	Oracle Sun Products Suite の Oracle Explorer (Sun Explorer) コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-3506	2012-03-27 18:42	2010-10-13	Show	GitHub Exploit DB Packet Storm

249576	4.3	警告	オラクル	-	Oracle E-Business Suite の Oracle Applications Technology Stack コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-3504	2012-03-27 18:42	2010-10-13	Show	GitHub Exploit DB Packet Storm

249577	4	警告	オラクル	-	Oracle Siebel Suite の Siebel Core コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-3502	2012-03-27 18:42	2010-10-13	Show	GitHub Exploit DB Packet Storm

249578	6	警告	オラクル	-	Oracle Siebel Suite の Siebel Core - Highly Interactive Client コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-3500	2012-03-27 18:42	2010-10-13	Show	GitHub Exploit DB Packet Storm

249579	10	危険	TIBCO Software	-	TIBCO ActiveMatrix Service Grid などで使用される ActiveMatrix Runtime コンポーネントにおける任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2010-3491	2012-03-27 18:42	2010-10-19	Show	GitHub Exploit DB Packet Storm

249580	6.5	警告	FreePBX	-	FreePBX の設定インターフェースの System Recordings コンポーネントにおけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2010-3490	2012-03-27 18:42	2010-09-28	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 17, 2026, 4:15 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
197491	8.8	HIGH Network	testlink	testlink	An issue was discovered in TestLink 1.9.19. The relation_type parameter of the lib/requirements/reqSearch.php endpoint is vulnerable to authenticated SQL Injection.	CWE-89 SQL Injection	CVE-2020-8841	2024-11-21 14:39	2020-02-11	Show	GitHub Exploit DB Packet Storm

197492	9.8	CRITICAL Network	fasterxml debian netapp huawei oracle	jackson-databind debian_linux steelstore_cloud_integrated_storage oncommand_workflow_automation service_level_manager oncommand_api_services oceanstor_9000_firmware global_lifecy…	FasterXML jackson-databind 2.0.0 through 2.9.10.2 lacks certain xbean-reflect/JNDI blocking, as demonstrated by org.apache.xbean.propertyeditor.JndiConverter.	CWE-502 Deserialization of Untrusted Data	CVE-2020-8840	2024-11-21 14:39	2020-02-11	Show	GitHub Exploit DB Packet Storm

197493	5.4	MEDIUM Network	vanillaforums	vanilla	index.php?p=/dashboard/settings/branding in Vanilla 2.6.3 allows stored XSS.	CWE-79 Cross-site Scripting	CVE-2020-8825	2024-11-21 14:39	2020-02-10	Show	GitHub Exploit DB Packet Storm

197494	6.1	MEDIUM Network	sockjs_project	sockjs	htmlfile in lib/transport/htmlfile.js in SockJS before 0.3.0 is vulnerable to Reflected XSS via the /htmlfile c (aka callback) parameter.	CWE-79 Cross-site Scripting	CVE-2020-8823	2024-11-21 14:39	2020-02-10	Show	GitHub Exploit DB Packet Storm

197495	4.8	MEDIUM Network	digi	transport_wr21_firmware transport_wr44_firmware	Digi TransPort WR21 5.2.2.3, WR44 5.1.6.4, and WR44v2 5.1.6.9 devices allow stored XSS in the web application.	CWE-79 Cross-site Scripting	CVE-2020-8822	2024-11-21 14:39	2020-02-10	Show	GitHub Exploit DB Packet Storm

197496	5.4	MEDIUM Network	bludit	bludit	Bludit 3.10.0 allows Editor or Author roles to insert malicious JavaScript on the WYSIWYG editor. NOTE: the vendor's perspective is that this is "not a bug.	CWE-79 Cross-site Scripting	CVE-2020-8812	2024-11-21 14:39	2020-02-8	Show	GitHub Exploit DB Packet Storm

197497	4.3	MEDIUM Network	bludit	bludit	ajax/profile-picture-upload.php in Bludit 3.10.0 allows authenticated users to change other users' profile pictures.	CWE-862 Missing Authorization	CVE-2020-8811	2024-11-21 14:39	2020-02-8	Show	GitHub Exploit DB Packet Storm

197498	7.8	HIGH Local	corsair	icue	The CorsairLLAccess64.sys and CorsairLLAccess32.sys drivers in CORSAIR iCUE before 3.25.60 allow local non-privileged users (including low-integrity level processes) to read and write to arbitrary ph…	NVD-CWE-noinfo	CVE-2020-8808	2024-11-21 14:39	2020-02-8	Show	GitHub Exploit DB Packet Storm

197499	9.8	CRITICAL Network	biscom	secure_file_transfer	Biscom Secure File Transfer (SFT) before 5.1.1071 and 6.0.1xxx before 6.0.1005 allows Remote Code Execution on the server.	NVD-CWE-Other	CVE-2020-8796	2024-11-21 14:39	2020-02-8	Show	GitHub Exploit DB Packet Storm

197500	6.1	MEDIUM Network	synaptivemedical	clearcanvas	Synaptive Medical ClearCanvas ImageServer 3.0 Alpha allows XSS (and HTML injection) via the Default.aspx UserName parameter. NOTE: the issues/227 reference does not imply that the affected product ca…	CWE-79 Cross-site Scripting	CVE-2020-8788	2024-11-21 14:39	2020-02-7	Show	GitHub Exploit DB Packet Storm