Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 9, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
250921	4.3	警告	オラクル	-	Oracle Industry Applications の Health Sciences - Oracle Thesaurus Management System コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2011-2323	2011-10-27 10:07	2011-10-18	Show	GitHub Exploit DB Packet Storm

250922	4.3	警告	オラクル	-	Oracle Industry Applications の Health Sciences - Oracle Clinical、Remote Data Capture における脆弱性	CWE-noinfo 情報不足	CVE-2011-2309	2011-10-27 10:07	2011-10-18	Show	GitHub Exploit DB Packet Storm

250923	6.8	警告	オラクル	-	Oracle Virtualization の Sun Ray コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2011-3538	2011-10-27 10:06	2011-10-18	Show	GitHub Exploit DB Packet Storm

250924	5.5	警告	オラクル	-	Oracle Linux の Oracle Validated 処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2011-2306	2011-10-27 10:05	2011-10-19	Show	GitHub Exploit DB Packet Storm

250925	2.1	注意	オラクル	-	複数の Oracle Sun 製品における Integrated Lights Out Manager CLI の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2011-3522	2011-10-27 10:04	2011-10-18	Show	GitHub Exploit DB Packet Storm

250926	5.5	警告	オラクル	-	Oracle PeopleSoft Enterprise HRMS における JPM の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2011-3533	2011-10-27 10:03	2011-10-18	Show	GitHub Exploit DB Packet Storm

250927	4	警告	オラクル	-	Oracle PeopleSoft Enterprise HRMS における Talent Acquisition Manager の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2011-3529	2011-10-27 10:01	2011-10-18	Show	GitHub Exploit DB Packet Storm

250928	5.5	警告	オラクル	-	Oracle PeopleSoft Enterprise HRMS における Candidate Gateway の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2011-3527	2011-10-27 10:01	2011-10-18	Show	GitHub Exploit DB Packet Storm

250929	5.5	警告	オラクル	-	Oracle PeopleSoft Enterprise PeopleTools におけるセキュリティの処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2011-2315	2011-10-27 09:59	2011-10-18	Show	GitHub Exploit DB Packet Storm

250930	2.8	注意	オラクル	-	Oracle PeopleSoft Enterprise PeopleTools における Personalization の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2011-3520	2011-10-27 09:59	2011-10-18	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 9, 2026, 5:07 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
196761	7.5	HIGH Network	dovecot fedoraproject	dovecot fedora	lib-smtp in submission-login and lmtp in Dovecot 2.3.9 before 2.3.9.3 mishandles truncated UTF-8 data in command parameters, as demonstrated by the unauthenticated triggering of a submission-login in…	CWE-835 Loop with Unreachable Exit Condition ('Infinite Loop')	CVE-2020-7046	2024-11-21 14:36	2020-02-13	Show	GitHub Exploit DB Packet Storm

196762	7.5	HIGH Network	opensuse	wicked	An ni_dhcp4_fsm_process_dhcp4_packet memory leak in openSUSE wicked 0.6.55 and earlier allows network attackers to cause a denial of service by sending DHCP4 packets with a different client-id.	CWE-401 Missing Release of Memory after Effective Lifetime	CVE-2020-7217	2024-11-21 14:36	2020-02-11	Show	GitHub Exploit DB Packet Storm

196763	9.1	CRITICAL Network	php tenable oracle opensuse debian	php tenable.sc communications_diameter_signaling_router leap debian_linux	When using certain mbstring functions to convert multibyte encodings, in PHP versions 7.2.x below 7.2.27, 7.3.x below 7.3.14 and 7.4.x below 7.4.2 it is possible to supply data that will cause functi…	CWE-125 Out-of-bounds Read	CVE-2020-7060	2024-11-21 14:36	2020-02-10	Show	GitHub Exploit DB Packet Storm

196764	9.1	CRITICAL Network	php tenable oracle opensuse debian	php tenable.sc communications_diameter_signaling_router leap debian_linux	When using fgetss() function to read data with stripping tags, in PHP versions 7.2.x below 7.2.27, 7.3.x below 7.3.14 and 7.4.x below 7.4.2 it is possible to supply data that will cause this function…	CWE-125 Out-of-bounds Read	CVE-2020-7059	2024-11-21 14:36	2020-02-10	Show	GitHub Exploit DB Packet Storm

196765	9.8	CRITICAL Network	bosch	bosch_video_management_system_mobile_video_service divar_ip_3000_firmware divar_ip_7000_firmware	Deserialization of Untrusted Data in the BVMS Mobile Video Service (BVMS MVS) allows an unauthenticated remote attacker to execute arbitrary code on the system. This affects Bosch BVMS versions 10.0 …	CWE-502 Deserialization of Untrusted Data	CVE-2020-6770	2024-11-21 14:36	2020-02-8	Show	GitHub Exploit DB Packet Storm

196766	7.5	HIGH Network	bosch	video_management_system_viewer video_management_system	A path traversal vulnerability in the Bosch Video Management System (BVMS) NoTouch deployment allows an unauthenticated remote attacker to read arbitrary files from the Central Server. This affects B…	CWE-22 Path Traversal	CVE-2020-6768	2024-11-21 14:36	2020-02-8	Show	GitHub Exploit DB Packet Storm

196767	9.1	CRITICAL Network	bosch	video_streaming_gateway divar_ip_2000_firmware divar_ip_5000_firmware	Missing Authentication for Critical Function in the Bosch Video Streaming Gateway (VSG) allows an unauthenticated remote attacker to retrieve and set arbitrary configuration data of the Video Streami…	CWE-306 Missing Authentication for Critical Function	CVE-2020-6769	2024-11-21 14:36	2020-02-8	Show	GitHub Exploit DB Packet Storm

196768	9.8	CRITICAL Network	schmid-telecom	zi_620_v400_firmware	Schmid ZI 620 V400 VPN 090 routers allow an attacker to execute OS commands as root via shell metacharacters to an entry on the SSH subcommand menu, as demonstrated by ping.	CWE-78 OS Command	CVE-2020-6760	2024-11-21 14:36	2020-02-7	Show	GitHub Exploit DB Packet Storm

196769	6.5	MEDIUM Network	sos-berlin	jobscheduler	An XML External Entity (XEE) vulnerability exists in the JOC Cockpit component of SOS JobScheduler 1.12 and 1.13.2 allows attackers to read files from the server via an entity declaration in any of t…	CWE-776 XML Entity Expansion	CVE-2020-6856	2024-11-21 14:36	2020-02-7	Show	GitHub Exploit DB Packet Storm

196770	6.5	MEDIUM Network	sos-berlin	jobscheduler	A large or infinite loop vulnerability in the JOC Cockpit component of SOS JobScheduler 1.11 and 1.13.2 allows attackers to parameterize housekeeping jobs in a way that exhausts system resources and …	CWE-835 Loop with Unreachable Exit Condition ('Infinite Loop')	CVE-2020-6855	2024-11-21 14:36	2020-02-7	Show	GitHub Exploit DB Packet Storm