Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":April 29, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
253001	4.3	警告	オラクル	-	Oracle Application Server の J2EE コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0070	2010-02-15 19:31	2010-01-12	Show	GitHub Exploit DB Packet Storm

253002	5	警告	オラクル	-	Oracle Application Server の J2EE コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0067	2010-02-15 19:31	2010-01-12	Show	GitHub Exploit DB Packet Storm

253003	5	警告	オラクル	-	Oracle Application Server の Access Manager Identity Server コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0066	2010-02-15 19:31	2010-01-12	Show	GitHub Exploit DB Packet Storm

253004	7.8	危険	サイバートラスト株式会社 Linux レッドハット	-	Linux kernel の e1000_clean_rx_irq 関数における整数アンダーフローの脆弱性	CWE-189 数値処理の問題	CVE-2009-1385	2010-02-15 11:03	2009-06-4	Show	GitHub Exploit DB Packet Storm

253005	4.6	警告	サイバートラスト株式会社 Todd C. Miller	-	sudo の Perl スクリプト実行時における権限昇格の脆弱性	-	CVE-2005-4158	2010-02-15 11:03	2005-11-8	Show	GitHub Exploit DB Packet Storm

253006	1	注意	オラクル	-	Oracle Database および Oracle Application Server の Unzip コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2009-3412	2010-02-12 12:22	2010-01-12	Show	GitHub Exploit DB Packet Storm

253007	3.2	注意	オラクル	-	Oracle Database の Oracle Spatial コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2009-3413	2010-02-12 12:22	2010-01-12	Show	GitHub Exploit DB Packet Storm

253008	3.6	注意	オラクル	-	Oracle Database の RDBMS コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2009-3410	2010-02-12 12:21	2010-01-12	Show	GitHub Exploit DB Packet Storm

253009	4	警告	オラクル	-	Oracle Database の Logical Standby コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2009-1996	2010-02-12 12:21	2010-01-12	Show	GitHub Exploit DB Packet Storm

253010	4.9	警告	オラクル	-	Oracle Database の Oracle Spatial コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2009-3414	2010-02-12 12:21	2010-01-12	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:April 29, 2026, 4:51 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
197761	6.5	MEDIUM Network	freedesktop	poppler	An issue was discovered in freedesktop poppler version 20.12.1, allows remote attackers to cause a denial of service (DoS) via crafted .pdf file to FoFiType1C::cvtGlyph function.	CWE-835 Loop with Unreachable Exit Condition ('Infinite Loop')	CVE-2020-36023	2024-11-21 14:28	2023-08-11	Show	GitHub Exploit DB Packet Storm

197762	8.8	HIGH Network	flycms_project	flycms	Cross Site Request Forgery (CSRF) vulnerability in FlyCms 1.0 allows attackers to add arbitrary administrator accounts via system/admin/admin_save.	CWE-352 Origin Validation Error	CVE-2020-36065	2024-11-21 14:28	2023-05-8	Show	GitHub Exploit DB Packet Storm

197763	9.8	CRITICAL Network	thecontrolgroup	voyager	Insecure Permission vulnerability found in Yoyager v.1.4 and before allows a remote attacker to execute arbitrary code via a crafted .php file to the media component.	CWE-281 Improper Preservation of Permissions	CVE-2020-36070	2024-11-21 14:28	2023-04-27	Show	GitHub Exploit DB Packet Storm

197764	8.8	HIGH Network	tailor_mangement_system_project	tailor_mangement_system	SQL injection vulnerability found in Tailor Mangement System v.1 allows a remote attacker to execute arbitrary code via the customer parameter of the orderadd.php file	CWE-89 SQL Injection	CVE-2020-36077	2024-11-21 14:28	2023-04-10	Show	GitHub Exploit DB Packet Storm

197765	8.8	HIGH Network	tailor_mangement_system_project	tailor_mangement_system	SQL injection vulnerability found in Tailor Mangement System v.1 allows a remote attacker to execute arbitrary code via the title parameter.	CWE-89 SQL Injection	CVE-2020-36074	2024-11-21 14:28	2023-04-7	Show	GitHub Exploit DB Packet Storm

197766	8.8	HIGH Network	tailor_management_system_project	tailor_management_system	SQL injection vulnerability found in Tailor Management System v.1 allows a remote attacker to execute arbitrary code via the detail parameter of the document.php page.	CWE-89 SQL Injection	CVE-2020-36073	2024-11-21 14:28	2023-04-7	Show	GitHub Exploit DB Packet Storm

197767	8.8	HIGH Network	tailor_management_system_project	tailor_management_system	SQL injection vulnerability found in Tailor Management System v.1 allows a remote attacker to execute arbitrary code via the id parameter.	CWE-89 SQL Injection	CVE-2020-36072	2024-11-21 14:28	2023-04-7	Show	GitHub Exploit DB Packet Storm

197768	8.8	HIGH Network	tailor_management_system_project	tailor_management_system	SQL injection vulnerability found in Tailor Management System v.1 allows a remote authenticated attacker to execute arbitrary code via the customer parameter of the email.php page.	CWE-89 SQL Injection	CVE-2020-36071	2024-11-21 14:28	2023-04-7	Show	GitHub Exploit DB Packet Storm

197769	6.5	MEDIUM Network	fiserv	prologue	Fiserv Prologue through 2020-12-16 does not properly protect the database password. If an attacker were to gain access to the configuration file (specifically, the LogPassword attribute within appcon…	CWE-522 Insufficiently Protected Credentials	CVE-2020-35992	2024-11-21 14:28	2022-08-23	Show	GitHub Exploit DB Packet Storm

197770	9.8	CRITICAL Network	phpgurukul	dairy_farm_shop_management_system	Dairy Farm Shop Management System v1.0 was discovered to contain hardcoded credentials in the source code which allows attackers access to the control panel if compromised.	CWE-798 Use of Hard-coded Credentials	CVE-2020-36062	2024-11-21 14:28	2022-02-12	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed