Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":April 30, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
252841 4.3 警告 オラクル - Oracle Enterprise Manager Grid Control の Console コンポーネントにおける脆弱性 CWE-noinfo
情報不足
CVE-2010-2373 2010-08-5 16:33 2010-07-13 Show GitHub Exploit DB Packet Storm
252842 4.3 警告 オラクル - Oracle Fusion Middleware の Oracle Business Process Management コンポーネントにおける脆弱性 CWE-noinfo
情報不足
CVE-2010-2370 2010-08-5 16:33 2010-07-13 Show GitHub Exploit DB Packet Storm
252843 5 警告 オラクル - Oracle Secure Backup における脆弱性 CWE-noinfo
情報不足
CVE-2010-0904 2010-08-5 16:33 2010-07-13 Show GitHub Exploit DB Packet Storm
252844 9 危険 オラクル - Oracle Secure Backup における脆弱性 CWE-noinfo
情報不足
CVE-2010-0906 2010-08-5 16:32 2010-07-13 Show GitHub Exploit DB Packet Storm
252845 9 危険 オラクル - Oracle Secure Backup における脆弱性 CWE-noinfo
情報不足
CVE-2010-0899 2010-08-5 16:32 2010-07-13 Show GitHub Exploit DB Packet Storm
252846 10 危険 オラクル - Oracle Secure Backup における脆弱性 CWE-noinfo
情報不足
CVE-2010-0907 2010-08-5 16:32 2010-07-13 Show GitHub Exploit DB Packet Storm
252847 10 危険 オラクル - Oracle Secure Backup における脆弱性 CWE-noinfo
情報不足
CVE-2010-0898 2010-08-5 16:31 2010-07-13 Show GitHub Exploit DB Packet Storm
252848 5 警告 オラクル - Oracle TimesTen In-Memory Database の Data Server コンポーネントにおける脆弱性 CWE-noinfo
情報不足
CVE-2010-0910 2010-08-5 16:31 2010-07-13 Show GitHub Exploit DB Packet Storm
252849 10 危険 オラクル - Oracle TimesTen In-Memory Database の Data Server コンポーネントにおける脆弱性 CWE-noinfo
情報不足
CVE-2010-0873 2010-08-5 16:30 2010-07-13 Show GitHub Exploit DB Packet Storm
252850 3.2 注意 オラクル - Oracle Solaris における Solaris Management コンソールの処理に関する脆弱性 CWE-noinfo
情報不足
CVE-2010-2384 2010-08-4 16:26 2010-07-13 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 30, 2026, 4:58 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
199891 9.8 CRITICAL
Network
s3-kilatstorage_project s3-kilatstorage This affects all versions of package s3-kilatstorage. CWE-78
OS Command 
CVE-2020-28424 2024-11-21 14:22 2022-08-2 Show GitHub Exploit DB Packet Storm
199892 9.8 CRITICAL
Network
monorepo-build_project monorepo-build This affects all versions of package monorepo-build. CWE-77
Command Injection
CVE-2020-28423 2024-11-21 14:22 2022-08-2 Show GitHub Exploit DB Packet Storm
199893 9.8 CRITICAL
Network
properties-reader_project properties-reader This affects the package properties-reader before 2.2.0. CWE-1321
 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')
CVE-2020-28471 2024-11-21 14:22 2022-07-25 Show GitHub Exploit DB Packet Storm
199894 9.8 CRITICAL
Network
ion-parser_project ion-parser This affects all versions of package ion-parser. If an attacker submits a malicious INI file to an application that parses it with parse , they will pollute the prototype on the application. This can… CWE-1321
 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')
CVE-2020-28462 2024-11-21 14:22 2022-07-25 Show GitHub Exploit DB Packet Storm
199895 9.8 CRITICAL
Network
js-ini_project js-ini This affects the package js-ini before 1.3.0. If an attacker submits a malicious INI file to an application that parses it with parse , they will pollute the prototype on the application. This can be… CWE-1321
 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')
CVE-2020-28461 2024-11-21 14:22 2022-07-25 Show GitHub Exploit DB Packet Storm
199896 6.1 MEDIUM
Network
markdown-it-decorate_project markdown-it-decorate This affects all versions of package markdown-it-decorate. An attacker can add an event handler or use javascript:xxx for the link. CWE-79
Cross-site Scripting
CVE-2020-28459 2024-11-21 14:22 2022-07-25 Show GitHub Exploit DB Packet Storm
199897 6.1 MEDIUM
Network
markdown-it-toc_project markdown-it-toc This affects all versions of package markdown-it-toc. The title of the generated toc and the contents of the header are not escaped. CWE-79
Cross-site Scripting
CVE-2020-28455 2024-11-21 14:22 2022-07-25 Show GitHub Exploit DB Packet Storm
199898 9.8 CRITICAL
Network
xopen_project xopen This affects all versions of package xopen. The injection point is located in line 14 in index.js in the exported function xopen(filepath) CWE-77
Command Injection
CVE-2020-28447 2024-11-21 14:22 2022-07-25 Show GitHub Exploit DB Packet Storm
199899 9.8 CRITICAL
Network
ntesseract_project ntesseract The package ntesseract before 0.2.9 are vulnerable to Command Injection via lib/tesseract.js. CWE-77
Command Injection
CVE-2020-28446 2024-11-21 14:22 2022-07-25 Show GitHub Exploit DB Packet Storm
199900 9.8 CRITICAL
Network
npm-help_project npm-help This affects all versions of package npm-help. The injection point is located in line 13 in index.js file in export.latestVersion() function. CWE-77
Command Injection
CVE-2020-28445 2024-11-21 14:22 2022-07-25 Show GitHub Exploit DB Packet Storm