Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 8, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
250921	4.3	警告	オラクル	-	Oracle Industry Applications の Health Sciences - Oracle Thesaurus Management System コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2011-2323	2011-10-27 10:07	2011-10-18	Show	GitHub Exploit DB Packet Storm

250922	4.3	警告	オラクル	-	Oracle Industry Applications の Health Sciences - Oracle Clinical、Remote Data Capture における脆弱性	CWE-noinfo 情報不足	CVE-2011-2309	2011-10-27 10:07	2011-10-18	Show	GitHub Exploit DB Packet Storm

250923	6.8	警告	オラクル	-	Oracle Virtualization の Sun Ray コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2011-3538	2011-10-27 10:06	2011-10-18	Show	GitHub Exploit DB Packet Storm

250924	5.5	警告	オラクル	-	Oracle Linux の Oracle Validated 処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2011-2306	2011-10-27 10:05	2011-10-19	Show	GitHub Exploit DB Packet Storm

250925	2.1	注意	オラクル	-	複数の Oracle Sun 製品における Integrated Lights Out Manager CLI の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2011-3522	2011-10-27 10:04	2011-10-18	Show	GitHub Exploit DB Packet Storm

250926	5.5	警告	オラクル	-	Oracle PeopleSoft Enterprise HRMS における JPM の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2011-3533	2011-10-27 10:03	2011-10-18	Show	GitHub Exploit DB Packet Storm

250927	4	警告	オラクル	-	Oracle PeopleSoft Enterprise HRMS における Talent Acquisition Manager の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2011-3529	2011-10-27 10:01	2011-10-18	Show	GitHub Exploit DB Packet Storm

250928	5.5	警告	オラクル	-	Oracle PeopleSoft Enterprise HRMS における Candidate Gateway の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2011-3527	2011-10-27 10:01	2011-10-18	Show	GitHub Exploit DB Packet Storm

250929	5.5	警告	オラクル	-	Oracle PeopleSoft Enterprise PeopleTools におけるセキュリティの処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2011-2315	2011-10-27 09:59	2011-10-18	Show	GitHub Exploit DB Packet Storm

250930	2.8	注意	オラクル	-	Oracle PeopleSoft Enterprise PeopleTools における Personalization の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2011-3520	2011-10-27 09:59	2011-10-18	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 8, 2026, 4:54 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
196821	5.3	MEDIUM Network	amcrest	web_server	An issue was discovered in Amcrest Web Server 2.520.AC00.18.R 2017-06-29 WEB 3.2.1.453504. The login page responds with JavaScript when one tries to authenticate. An attacker who changes the result p…	CWE-287 Improper Authentication	CVE-2020-7222	2024-11-21 14:36	2020-01-18	Show	GitHub Exploit DB Packet Storm

196822	8.8	HIGH Network	meinbergglobal	lantime_m300_firmware lantime_m1000_firmware	Meinberg Lantime M300 and M1000 devices allow attackers (with privileges to configure a device) to execute arbitrary OS commands by editing the /config/netconf.cmd script (aka Extended Network Config…	CWE-78 OS Command	CVE-2020-7240	2024-11-21 14:36	2020-01-21	Show	GitHub Exploit DB Packet Storm

196823	6.1	MEDIUM Network	kibokolabs	chained_quiz	The chained-quiz plugin 1.1.8.1 for WordPress has reflected XSS via the wp-admin/admin-ajax.php total_questions parameter.	CWE-79 Cross-site Scripting	CVE-2020-7104	2024-11-21 14:36	2020-01-18	Show	GitHub Exploit DB Packet Storm

196824	5.3	MEDIUM Network	zte	f6x2w_firmware	V6.0.10P2T2 and V6.0.10P2T5 of F6x2W product are impacted by Information leak vulnerability. Unauthorized users could log in directly to obtain page information without entering a verification code.	CWE-669 Incorrect Resource Transfer Between Spheres	CVE-2020-6862	2024-11-21 14:36	2020-01-18	Show	GitHub Exploit DB Packet Storm

196825	5.6	MEDIUM Network	libslirp_project debian opensuse qemu	libslirp debian_linux leap qemu	tcp_emu in tcp_subr.c in libslirp 4.1.0, as used in QEMU 4.2.0, mismanages memory, as demonstrated by IRC DCC commands in EMU_IRC. This can cause a heap-based buffer overflow or other out-of-bounds a…	CWE-787 Out-of-bounds Write	CVE-2020-7039	2024-11-21 14:36	2020-01-17	Show	GitHub Exploit DB Packet Storm

196826	9.1	CRITICAL Network	webfactoryltd	wp_database_reset	The WordPress plugin, WP Database Reset through 3.1, contains a flaw that allowed any unauthenticated user to reset any table in the database to the initial WordPress set-up state (deleting all site …	CWE-306 Missing Authentication for Critical Function	CVE-2020-7048	2024-11-21 14:36	2020-01-17	Show	GitHub Exploit DB Packet Storm

196827	8.8	HIGH Network	webfactoryltd	wp_database_reset	The WordPress plugin, WP Database Reset through 3.1, contains a flaw that gave any authenticated user, with minimal permissions, the ability (with a simple wp-admin/admin.php?db-reset-tables[]=users …	CWE-269 Improper Privilege Management	CVE-2020-7047	2024-11-21 14:36	2020-01-17	Show	GitHub Exploit DB Packet Storm

196828	5.4	MEDIUM Network	learndash	learndash	The LearnDash LMS plugin before 3.1.2 for WordPress allows XSS via the ld-profile search field.	CWE-79 Cross-site Scripting	CVE-2020-7108	2024-11-21 14:36	2020-01-16	Show	GitHub Exploit DB Packet Storm

196829	6.1	MEDIUM Network	etoilewebdesign	ultimate_faq	The Ultimate FAQ plugin before 1.8.30 for WordPress allows XSS via Display_FAQ to Shortcodes/DisplayFAQs.php.	CWE-79 Cross-site Scripting	CVE-2020-7107	2024-11-21 14:36	2020-01-16	Show	GitHub Exploit DB Packet Storm

196830	6.1	MEDIUM Network	cacti debian opensuse suse fedoraproject	cacti debian_linux leap backports_sle package_hub fedora extra_packages_for_enterprise_linux	Cacti 1.2.8 has stored XSS in data_sources.php, color_templates_item.php, graphs.php, graph_items.php, lib/api_automation.php, user_admin.php, and user_group_admin.php, as demonstrated by the descrip…	CWE-79 Cross-site Scripting	CVE-2020-7106	2024-11-21 14:36	2020-01-16	Show	GitHub Exploit DB Packet Storm