Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 4, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
251901	3.5	注意	オラクル	-	Oracle Supply Chain Products Suite の Agile Core コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-4429	2011-02-15 13:57	2011-01-18	Show	GitHub Exploit DB Packet Storm

251902	3.5	注意	オラクル	-	Oracle Supply Chain Products Suite の Agile Core コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-3505	2011-02-15 13:55	2011-01-18	Show	GitHub Exploit DB Packet Storm

251903	-	-	オラクル	-	Oracle WebLogic Node Manager に脆弱性	-	-	2011-02-14 15:26	2010-10-13	Show	GitHub Exploit DB Packet Storm

251904	4	警告	オラクル	-	Oracle Applications の Oracle Application Object Library コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-3589	2011-02-14 15:25	2011-01-18	Show	GitHub Exploit DB Packet Storm

251905	4.3	警告	オラクル	-	Oracle Applications の Oracle Common Applications コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-3587	2011-02-14 15:25	2011-01-18	Show	GitHub Exploit DB Packet Storm

251906	6.4	警告	オラクル	-	Oracle Enterprise Manager Grid Control の Real User Experience Insight コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-3594	2011-02-14 15:24	2011-01-18	Show	GitHub Exploit DB Packet Storm

251907	3.5	注意	オラクル	-	Oracle Fusion Middleware の Oracle BI Publisher コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-4427	2011-02-14 15:24	2011-01-18	Show	GitHub Exploit DB Packet Storm

251908	3.5	注意	オラクル	-	Oracle Fusion Middleware の Oracle BI Publisher コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-4425	2011-02-14 15:23	2011-01-18	Show	GitHub Exploit DB Packet Storm

251909	4.3	警告	オラクル	-	Oracle Fusion Middleware の Oracle WebLogic Server コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-4453	2011-02-14 15:15	2011-01-18	Show	GitHub Exploit DB Packet Storm

251910	5	警告	オラクル	-	Oracle Fusion Middleware の Oracle GoldenGate Veridata コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-4416	2011-02-14 15:14	2011-01-18	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 4, 2026, 4:06 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
200501	9.8	CRITICAL Network	sonar-wrapper_project	sonar-wrapper	This affects all versions of package sonar-wrapper. The injection point is located in lib/sonarRunner.js.	CWE-77 Command Injection	CVE-2020-28443	2024-11-21 14:22	2022-07-25	Show	GitHub Exploit DB Packet Storm

200502	9.8	CRITICAL Network	conf-cfg-ini_project	conf-cfg-ini	This affects the package conf-cfg-ini before 1.2.2. If an attacker submits a malicious INI file to an application that parses it with decode, they will pollute the prototype on the application. This …	CWE-1321 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')	CVE-2020-28441	2024-11-21 14:22	2022-07-25	Show	GitHub Exploit DB Packet Storm

200503	9.8	CRITICAL Network	deferred-exec_project	deferred-exec	This affects all versions of package deferred-exec. The injection point is located in line 42 in lib/deferred-exec.js	CWE-77 Command Injection	CVE-2020-28438	2024-11-21 14:22	2022-07-25	Show	GitHub Exploit DB Packet Storm

200504	9.8	CRITICAL Network	google-cloudstorage-commands_project	google-cloudstorage-commands	This affects all versions of package google-cloudstorage-commands.	CWE-77 Command Injection	CVE-2020-28436	2024-11-21 14:22	2022-07-25	Show	GitHub Exploit DB Packet Storm

200505	9.8	CRITICAL Network	ffmpeg-sdk_project	ffmpeg-sdk	This affects all versions of package ffmpeg-sdk. The injection point is located in line 9 in index.js.	CWE-77 Command Injection	CVE-2020-28435	2024-11-21 14:22	2022-07-25	Show	GitHub Exploit DB Packet Storm

200506	7.8	HIGH Local	git-archive_project	git-archive	All versions of package git-archive are vulnerable to Command Injection via the exports function.	CWE-77 Command Injection	CVE-2020-28422	2024-11-21 14:22	2022-07-25	Show	GitHub Exploit DB Packet Storm

200507	9.8	CRITICAL Network	form	form.io	A Server-Side Template Injection (SSTI) was discovered in Form.io 2.0.0. This leads to Remote Code Execution during deletion of the default Email template URL. NOTE: the email templating service was …	CWE-74 Injection	CVE-2020-28246	2024-11-21 14:22	2022-06-2	Show	GitHub Exploit DB Packet Storm

200508	8.8	HIGH Network	cgal debian	computational_geometry_algorithms_library debian_linux	Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confu…	-	CVE-2020-28604	2024-11-21 14:22	2022-04-19	Show	GitHub Exploit DB Packet Storm

200509	8.8	HIGH Network	cgal debian	computational_geometry_algorithms_library debian_linux	Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confu…	-	CVE-2020-28603	2024-11-21 14:22	2022-04-19	Show	GitHub Exploit DB Packet Storm

200510	8.8	HIGH Network	cgal debian	computational_geometry_algorithms_library debian_linux	Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confu…	-	CVE-2020-28602	2024-11-21 14:22	2022-04-19	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed