Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":April 30, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
251641	5.5	警告	オラクル	-	Oracle PeopleSoft and JDEdwards Suite の PeopleSoft Enterprise HRMS コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-4441	2011-02-15 14:24	2011-01-18	Show	GitHub Exploit DB Packet Storm

251642	5.5	警告	オラクル	-	Oracle PeopleSoft and JDEdwards Suite の PeopleSoft Enterprise CRM コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-4419	2011-02-15 14:22	2011-01-18	Show	GitHub Exploit DB Packet Storm

251643	7.5	危険	オラクル	-	Oracle PeopleSoft and JDEdwards Suite の PeopleSoft Enterprise PeopleTools コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-4418	2011-02-15 14:19	2011-01-18	Show	GitHub Exploit DB Packet Storm

251644	3.5	注意	オラクル	-	Oracle Supply Chain Products Suite の Oracle Transportation Manager コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-4432	2011-02-15 14:01	2011-01-18	Show	GitHub Exploit DB Packet Storm

251645	3.5	注意	オラクル	-	Oracle Supply Chain Products Suite の Agile Core コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-4429	2011-02-15 13:57	2011-01-18	Show	GitHub Exploit DB Packet Storm

251646	3.5	注意	オラクル	-	Oracle Supply Chain Products Suite の Agile Core コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-3505	2011-02-15 13:55	2011-01-18	Show	GitHub Exploit DB Packet Storm

251647	-	-	オラクル	-	Oracle WebLogic Node Manager に脆弱性	-	-	2011-02-14 15:26	2010-10-13	Show	GitHub Exploit DB Packet Storm

251648	4	警告	オラクル	-	Oracle Applications の Oracle Application Object Library コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-3589	2011-02-14 15:25	2011-01-18	Show	GitHub Exploit DB Packet Storm

251649	4.3	警告	オラクル	-	Oracle Applications の Oracle Common Applications コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-3587	2011-02-14 15:25	2011-01-18	Show	GitHub Exploit DB Packet Storm

251650	6.4	警告	オラクル	-	Oracle Enterprise Manager Grid Control の Real User Experience Insight コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-3594	2011-02-14 15:24	2011-01-18	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:April 30, 2026, 4:58 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
199901	9.8	CRITICAL Network	sonar-wrapper_project	sonar-wrapper	This affects all versions of package sonar-wrapper. The injection point is located in lib/sonarRunner.js.	CWE-77 Command Injection	CVE-2020-28443	2024-11-21 14:22	2022-07-25	Show	GitHub Exploit DB Packet Storm

199902	9.8	CRITICAL Network	conf-cfg-ini_project	conf-cfg-ini	This affects the package conf-cfg-ini before 1.2.2. If an attacker submits a malicious INI file to an application that parses it with decode, they will pollute the prototype on the application. This …	CWE-1321 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')	CVE-2020-28441	2024-11-21 14:22	2022-07-25	Show	GitHub Exploit DB Packet Storm

199903	9.8	CRITICAL Network	deferred-exec_project	deferred-exec	This affects all versions of package deferred-exec. The injection point is located in line 42 in lib/deferred-exec.js	CWE-77 Command Injection	CVE-2020-28438	2024-11-21 14:22	2022-07-25	Show	GitHub Exploit DB Packet Storm

199904	9.8	CRITICAL Network	google-cloudstorage-commands_project	google-cloudstorage-commands	This affects all versions of package google-cloudstorage-commands.	CWE-77 Command Injection	CVE-2020-28436	2024-11-21 14:22	2022-07-25	Show	GitHub Exploit DB Packet Storm

199905	9.8	CRITICAL Network	ffmpeg-sdk_project	ffmpeg-sdk	This affects all versions of package ffmpeg-sdk. The injection point is located in line 9 in index.js.	CWE-77 Command Injection	CVE-2020-28435	2024-11-21 14:22	2022-07-25	Show	GitHub Exploit DB Packet Storm

199906	7.8	HIGH Local	git-archive_project	git-archive	All versions of package git-archive are vulnerable to Command Injection via the exports function.	CWE-77 Command Injection	CVE-2020-28422	2024-11-21 14:22	2022-07-25	Show	GitHub Exploit DB Packet Storm

199907	9.8	CRITICAL Network	form	form.io	A Server-Side Template Injection (SSTI) was discovered in Form.io 2.0.0. This leads to Remote Code Execution during deletion of the default Email template URL. NOTE: the email templating service was …	CWE-74 Injection	CVE-2020-28246	2024-11-21 14:22	2022-06-2	Show	GitHub Exploit DB Packet Storm

199908	8.8	HIGH Network	cgal debian	computational_geometry_algorithms_library debian_linux	Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confu…	-	CVE-2020-28604	2024-11-21 14:22	2022-04-19	Show	GitHub Exploit DB Packet Storm

199909	8.8	HIGH Network	cgal debian	computational_geometry_algorithms_library debian_linux	Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confu…	-	CVE-2020-28603	2024-11-21 14:22	2022-04-19	Show	GitHub Exploit DB Packet Storm

199910	8.8	HIGH Network	cgal debian	computational_geometry_algorithms_library debian_linux	Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confu…	-	CVE-2020-28602	2024-11-21 14:22	2022-04-19	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed