Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 18, 2026, 12:09 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
249771	5.5	警告	オラクル	-	Oracle PeopleSoft および JDEdwards Suite の PeopleSoft Enterprise FMS - AM コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-3527	2012-03-27 18:42	2010-10-14	Show	GitHub Exploit DB Packet Storm

249772	5.5	警告	オラクル	-	Oracle PeopleSoft および JDEdwards Suite の PeopleSoft Enterprise SCM - PO コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-3526	2012-03-27 18:42	2010-10-14	Show	GitHub Exploit DB Packet Storm

249773	5.5	警告	オラクル	-	Oracle PeopleSoft および JDEdwards Suite の PeopleSoft Enterprise FMS コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-3525	2012-03-27 18:42	2010-10-14	Show	GitHub Exploit DB Packet Storm

249774	10	危険	オラクル	-	Oracle Fusion Middleware の Oracle WebLogic Server コンポーネントにおける Node Manager の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2010-3510	2012-03-27 18:42	2011-01-19	Show	GitHub Exploit DB Packet Storm

249775	3	注意	オラクル	-	Oracle Sun Products Suite の Oracle Explorer (Sun Explorer) コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-3506	2012-03-27 18:42	2010-10-13	Show	GitHub Exploit DB Packet Storm

249776	4.3	警告	オラクル	-	Oracle E-Business Suite の Oracle Applications Technology Stack コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-3504	2012-03-27 18:42	2010-10-13	Show	GitHub Exploit DB Packet Storm

249777	4	警告	オラクル	-	Oracle Siebel Suite の Siebel Core コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-3502	2012-03-27 18:42	2010-10-13	Show	GitHub Exploit DB Packet Storm

249778	6	警告	オラクル	-	Oracle Siebel Suite の Siebel Core - Highly Interactive Client コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-3500	2012-03-27 18:42	2010-10-13	Show	GitHub Exploit DB Packet Storm

249779	10	危険	TIBCO Software	-	TIBCO ActiveMatrix Service Grid などで使用される ActiveMatrix Runtime コンポーネントにおける任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2010-3491	2012-03-27 18:42	2010-10-19	Show	GitHub Exploit DB Packet Storm

249780	6.5	警告	FreePBX	-	FreePBX の設定インターフェースの System Recordings コンポーネントにおけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2010-3490	2012-03-27 18:42	2010-09-28	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 18, 2026, 4:12 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
213331	7.8	HIGH Local	sympa fedoraproject debian canonical	sympa fedora debian_linux ubuntu_linux	Sympa before 6.2.56 allows privilege escalation.	CWE-269 Improper Privilege Management	CVE-2020-10936	2024-11-21 13:56	2020-05-28	Show	GitHub Exploit DB Packet Storm

213332	6.1	MEDIUM Network	centreon	centreon_host-monitoring_widget centreon_tactical-overview_widget centreon_service-monitoring_widget	Cross-site scripting (XSS) vulnerability allows remote attackers to inject arbitrary web script or HTML via the page parameter to service-monitoring/src/index.php. This vulnerability is fixed in vers…	CWE-79 Cross-site Scripting	CVE-2020-10946	2024-11-21 13:56	2020-05-28	Show	GitHub Exploit DB Packet Storm

213333	4.3	MEDIUM Adjacent	centreon	widget-host-monitoring centreon	Centreon before 19.10.7 exposes Session IDs in server responses.	CWE-200 Information Exposure	CVE-2020-10945	2024-11-21 13:56	2020-05-28	Show	GitHub Exploit DB Packet Storm

213334	7.5	HIGH Network	puma fedoraproject debian	puma fedora debian_linux	In Puma (RubyGem) before 4.3.4 and 3.12.5, an attacker could smuggle an HTTP response, by using an invalid transfer-encoding header. The problem has been fixed in Puma 3.12.5 and Puma 4.3.4.	-	CVE-2020-11076	2024-11-21 13:56	2020-05-23	Show	GitHub Exploit DB Packet Storm

213335	7.5	HIGH Network	puma fedoraproject debian opensuse	puma fedora debian_linux leap	In Puma (RubyGem) before 4.3.5 and 3.12.6, a client could smuggle a request through a proxy, causing the proxy to send a response back to another unknown client. If the proxy uses persistent connecti…	-	CVE-2020-11077	2024-11-21 13:56	2020-05-23	Show	GitHub Exploit DB Packet Storm

213336	6.8	MEDIUM Network	httplib2_project fedoraproject debian	httplib2 fedora debian_linux	In httplib2 before version 0.18.0, an attacker controlling unescaped part of uri for `httplib2.Http.request()` could change request headers and body, send additional hidden requests to same server. T…	-	CVE-2020-11078	2024-11-21 13:56	2020-05-21	Show	GitHub Exploit DB Packet Storm

213337	7.5	HIGH Network	powerdns fedoraproject debian opensuse	recursor fedora debian_linux leap backports_sle	PowerDNS Recursor from 4.1.0 up to and including 4.3.0 does not sufficiently defend against amplification attacks. An issue in the DNS protocol has been found that allow malicious parties to use recu…	CWE-400 Uncontrolled Resource Consumption	CVE-2020-10995	2024-11-21 13:56	2020-05-20	Show	GitHub Exploit DB Packet Storm

213338	5.3	MEDIUM Network	dovecot	dovecot	In Dovecot before 2.3.10.1, remote unauthenticated attackers can crash the lmtp or submission process by sending mail with an empty localpart.	CWE-20 Improper Input Validation	CVE-2020-10967	2024-11-21 13:56	2020-05-19	Show	GitHub Exploit DB Packet Storm

213339	5.3	MEDIUM Network	dovecot	dovecot	In Dovecot before 2.3.10.1, a crafted SMTP/LMTP message triggers an unauthenticated use-after-free bug in submission-login, submission, or lmtp, and can lead to a crash under circumstances involving …	CWE-416 Use After Free	CVE-2020-10958	2024-11-21 13:56	2020-05-18	Show	GitHub Exploit DB Packet Storm

213340	7.5	HIGH Network	dovecot	dovecot	In Dovecot before 2.3.10.1, unauthenticated sending of malformed parameters to a NOOP command causes a NULL Pointer Dereference and crash in submission-login, submission, or lmtp.	CWE-476 NULL Pointer Dereference	CVE-2020-10957	2024-11-21 13:56	2020-05-18	Show	GitHub Exploit DB Packet Storm