Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 1, 2026, 10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
252841	4.3	警告	オラクル	-	Oracle Enterprise Manager Grid Control の Console コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-2373	2010-08-5 16:33	2010-07-13	Show	GitHub Exploit DB Packet Storm

252842	4.3	警告	オラクル	-	Oracle Fusion Middleware の Oracle Business Process Management コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-2370	2010-08-5 16:33	2010-07-13	Show	GitHub Exploit DB Packet Storm

252843	5	警告	オラクル	-	Oracle Secure Backup における脆弱性	CWE-noinfo 情報不足	CVE-2010-0904	2010-08-5 16:33	2010-07-13	Show	GitHub Exploit DB Packet Storm

252844	9	危険	オラクル	-	Oracle Secure Backup における脆弱性	CWE-noinfo 情報不足	CVE-2010-0906	2010-08-5 16:32	2010-07-13	Show	GitHub Exploit DB Packet Storm

252845	9	危険	オラクル	-	Oracle Secure Backup における脆弱性	CWE-noinfo 情報不足	CVE-2010-0899	2010-08-5 16:32	2010-07-13	Show	GitHub Exploit DB Packet Storm

252846	10	危険	オラクル	-	Oracle Secure Backup における脆弱性	CWE-noinfo 情報不足	CVE-2010-0907	2010-08-5 16:32	2010-07-13	Show	GitHub Exploit DB Packet Storm

252847	10	危険	オラクル	-	Oracle Secure Backup における脆弱性	CWE-noinfo 情報不足	CVE-2010-0898	2010-08-5 16:31	2010-07-13	Show	GitHub Exploit DB Packet Storm

252848	5	警告	オラクル	-	Oracle TimesTen In-Memory Database の Data Server コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0910	2010-08-5 16:31	2010-07-13	Show	GitHub Exploit DB Packet Storm

252849	10	危険	オラクル	-	Oracle TimesTen In-Memory Database の Data Server コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0873	2010-08-5 16:30	2010-07-13	Show	GitHub Exploit DB Packet Storm

252850	3.2	注意	オラクル	-	Oracle Solaris における Solaris Management コンソールの処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2010-2384	2010-08-4 16:26	2010-07-13	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 1, 2026, 4:54 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
198571	7.5	HIGH Network	erlang fedoraproject	erlang\/otp fedora	An issue was discovered in Erlang/OTP before 23.2.2. The ssl application 10.2 accepts and trusts an invalid X.509 certificate chain to a trusted root Certification Authority.	CWE-295 Improper Certificate Validation	CVE-2020-35733	2024-11-21 14:27	2021-01-15	Show	GitHub Exploit DB Packet Storm

198572	5.4	MEDIUM Network	enviragallery	envira_gallery	A stored cross-site scripting (XSS) issue in Envira Gallery Lite before 1.8.3.3 allows remote attackers to inject arbitrary JavaScript/HTML code via a POST /wp-admin/post.php request with the post_ti…	CWE-79 Cross-site Scripting	CVE-2020-35582	2024-11-21 14:27	2021-01-15	Show	GitHub Exploit DB Packet Storm

198573	5.4	MEDIUM Network	enviragallery	envira_gallery	A stored cross-site scripting (XSS) issue in Envira Gallery Lite before 1.8.3.3 allows remote attackers to inject arbitrary JavaScript/HTML code via a POST /wp-admin/admin-ajax.php request with the m…	CWE-79 Cross-site Scripting	CVE-2020-35581	2024-11-21 14:27	2021-01-15	Show	GitHub Exploit DB Packet Storm

198574	8.8	HIGH Network	eclipse	vert.x-web	Vert.x-Web framework v4.0 milestone 1-4 does not perform a correct CSRF verification. Instead of comparing the CSRF token in the request with the CSRF token in the cookie, it compares the CSRF token …	CWE-352 Origin Validation Error	CVE-2020-35217	2024-11-21 14:27	2021-01-20	Show	GitHub Exploit DB Packet Storm

198575	7.2	HIGH Network	nagios	nagios_xi	An issue was discovered in the Manage Plugins page in Nagios XI before 5.8.0. Because the line-ending conversion feature is mishandled during a plugin upload, a remote, authenticated admin user can e…	CWE-78 OS Command	CVE-2020-35578	2024-11-21 14:27	2021-01-14	Show	GitHub Exploit DB Packet Storm

198576	4.3	MEDIUM Network	php-fusion	phpfusion	PHPFusion version 9.03.90 is vulnerable to CSRF attack which leads to deletion of all shoutbox messages by the attacker on behalf of the logged in victim.	CWE-352 Origin Validation Error	CVE-2020-35687	2024-11-21 14:27	2021-01-14	Show	GitHub Exploit DB Packet Storm

198577	7.8	HIGH Local	soundresearch	dchu_model_software_component_modules	The SECOMN service in Sound Research DCHU model software component modules (APO) through 2.0.9.17, delivered on HP Windows 10 computers, may allow escalation of privilege via a fake DLL. (As a resolu…	CWE-426 Untrusted Search Path	CVE-2020-35686	2024-11-21 14:27	2021-01-13	Show	GitHub Exploit DB Packet Storm

198578	7.8	HIGH Local	clusterlabs debian	crmsh debian_linux	An issue was discovered in ClusterLabs crmsh through 4.2.1. Local attackers able to call "crm history" (when "crm" is run) were able to execute commands via shell code injection to the crm history co…	CWE-78 OS Command	CVE-2020-35459	2024-11-21 14:27	2021-01-13	Show	GitHub Exploit DB Packet Storm

198579	9.8	CRITICAL Network	clusterlabs	hawk	An issue was discovered in ClusterLabs Hawk 2.x through 2.3.0-x. There is a Ruby shell code injection issue via the hawk_remember_me_id parameter in the login_from_cookie cookie. The user logout rout…	CWE-78 OS Command	CVE-2020-35458	2024-11-21 14:27	2021-01-13	Show	GitHub Exploit DB Packet Storm

198580	5.4	MEDIUM Network	python fedoraproject	pillow fedora	In Pillow before 8.1.0, SGIRleDecode has a 4-byte buffer over-read when decoding crafted SGI RLE image files because offsets and length tables are mishandled.	CWE-125 Out-of-bounds Read	CVE-2020-35655	2024-11-21 14:27	2021-01-12	Show	GitHub Exploit DB Packet Storm