Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 4, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
253071 6.8 警告 サン・マイクロシステムズ
68k.org		 - audiofile の msadpcm.c におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2008-5824 2010-08-10 18:49 2009-01-2 Show GitHub Exploit DB Packet Storm
253072 2.4 注意 オラクル - Oracle Sun Java System Application Server および Oracle GlassFish Enterprise Server の GUI における脆弱性 CWE-noinfo
情報不足 		CVE-2010-2397 2010-08-9 16:49 2010-07-13 Show GitHub Exploit DB Packet Storm
253073 3 注意 オラクル - Oracle Solaris Studio における脆弱性 CWE-noinfo
情報不足 		CVE-2010-2374 2010-08-9 16:49 2010-07-13 Show GitHub Exploit DB Packet Storm
253074 4.3 警告 オラクル - Oracle OpenSSO Enterprise における脆弱性 CWE-noinfo
情報不足 		CVE-2009-3762 2010-08-9 16:49 2010-07-13 Show GitHub Exploit DB Packet Storm
253075 4.3 警告 オラクル - Oracle OpenSSO Enterprise の OpenSSO コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2009-3764 2010-08-9 16:48 2010-07-13 Show GitHub Exploit DB Packet Storm
253076 4.3 警告 オラクル - Oracle OpenSSO Enterprise の Access Manager / OpenSSO コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2009-3763 2010-08-9 16:48 2010-07-13 Show GitHub Exploit DB Packet Storm
253077 5 警告 オラクル - Oracle Sun Convergence における脆弱性 CWE-noinfo
情報不足 		CVE-2010-0914 2010-08-9 16:48 2010-07-13 Show GitHub Exploit DB Packet Storm
253078 5.8 警告 オラクル - Oracle Sun Java System Web Proxy Server の管理サーバにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-2385 2010-08-9 16:48 2010-07-13 Show GitHub Exploit DB Packet Storm
253079 2.1 注意 オラクル - Oracle PeopleSoft and JDEdwards Suite の PeopleSoft Enterprise Campus Solutions コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-2403 2010-08-6 18:29 2010-07-13 Show GitHub Exploit DB Packet Storm
253080 3 注意 オラクル - Oracle PeopleSoft and JDEdwards Suite の PeopleSoft Enterprise CRM コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-2378 2010-08-6 18:29 2010-07-13 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 5, 2026, 4:51 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
200661 9.8 CRITICAL
Network 		deferred-exec_project deferred-exec This affects all versions of package deferred-exec. The injection point is located in line 42 in lib/deferred-exec.js CWE-77
Command Injection 		CVE-2020-28438 2024-11-21 14:22 2022-07-25 Show GitHub Exploit DB Packet Storm
200662 9.8 CRITICAL
Network 		google-cloudstorage-commands_project google-cloudstorage-commands This affects all versions of package google-cloudstorage-commands. CWE-77
Command Injection 		CVE-2020-28436 2024-11-21 14:22 2022-07-25 Show GitHub Exploit DB Packet Storm
200663 9.8 CRITICAL
Network 		ffmpeg-sdk_project ffmpeg-sdk This affects all versions of package ffmpeg-sdk. The injection point is located in line 9 in index.js. CWE-77
Command Injection 		CVE-2020-28435 2024-11-21 14:22 2022-07-25 Show GitHub Exploit DB Packet Storm
200664 7.8 HIGH
Local 		git-archive_project git-archive All versions of package git-archive are vulnerable to Command Injection via the exports function. CWE-77
Command Injection 		CVE-2020-28422 2024-11-21 14:22 2022-07-25 Show GitHub Exploit DB Packet Storm
200665 9.8 CRITICAL
Network 		form form.io A Server-Side Template Injection (SSTI) was discovered in Form.io 2.0.0. This leads to Remote Code Execution during deletion of the default Email template URL. NOTE: the email templating service was … CWE-74
Injection 		CVE-2020-28246 2024-11-21 14:22 2022-06-2 Show GitHub Exploit DB Packet Storm
200666 8.8 HIGH
Network 		cgal
debian 		computational_geometry_algorithms_library
debian_linux 		Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confu… - CVE-2020-28604 2024-11-21 14:22 2022-04-19 Show GitHub Exploit DB Packet Storm
200667 8.8 HIGH
Network 		cgal
debian 		computational_geometry_algorithms_library
debian_linux 		Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confu… - CVE-2020-28603 2024-11-21 14:22 2022-04-19 Show GitHub Exploit DB Packet Storm
200668 8.8 HIGH
Network 		cgal
debian 		computational_geometry_algorithms_library
debian_linux 		Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confu… - CVE-2020-28602 2024-11-21 14:22 2022-04-19 Show GitHub Exploit DB Packet Storm
200669 7.2 HIGH
Network 		hisiphp hisiphp An Access Control vulnerability exists in HisiPHP 2.0.11 via special packets that are constructed in $files = Dir::getList($decompath. '/ Upload/Plugins /, which could let a remote malicious user exe… CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2020-28062 2024-11-21 14:22 2022-04-5 Show GitHub Exploit DB Packet Storm
200670 4.3 MEDIUM
Network 		osu ohio_supercomputer_center_open_ondemand The Job Composer app in Ohio Supercomputer Center Open OnDemand before 1.7.19 and 1.8.x before 1.8.18 allows remote authenticated users to provide crafted input in a job template. CWE-116
 Improper Encoding or Escaping of Output 		CVE-2020-27958 2024-11-21 14:22 2022-02-27 Show GitHub Exploit DB Packet Storm