Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":April 30, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
253181	4.3	警告	オラクル	-	Oracle Industry Product Suite の Retail - Oracle Retail Markdown Optimization コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0862	2010-05-13 15:13	2010-04-13	Show	GitHub Exploit DB Packet Storm

253182	4.3	警告	オラクル	-	Oracle Industry Product Suite の Life Sciences - Oracle Thesaurus Management System コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0875	2010-05-13 15:12	2010-04-13	Show	GitHub Exploit DB Packet Storm

253183	4.3	警告	オラクル	-	Oracle Industry Product Suite の Life Sciences - Oracle Clinical Remote Data Capture Option コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0876	2010-05-13 15:12	2010-04-13	Show	GitHub Exploit DB Packet Storm

253184	4.3	警告	オラクル	-	Oracle Industry Product Suite の Communications - Oracle Communications Unified Inventory Management コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0874	2010-05-13 15:12	2010-04-13	Show	GitHub Exploit DB Packet Storm

253185	4	警告	オラクル	-	複数の Oracle 製品の PeopleTools コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0879	2010-05-13 15:12	2010-04-13	Show	GitHub Exploit DB Packet Storm

253186	4	警告	オラクル	-	複数の Oracle 製品の PeopleTools コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0878	2010-05-13 15:11	2010-04-13	Show	GitHub Exploit DB Packet Storm

253187	5	警告	オラクル	-	複数の Oracle 製品の PeopleTools コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0877	2010-05-13 15:11	2010-04-13	Show	GitHub Exploit DB Packet Storm

253188	4	警告	オラクル	-	複数の Oracle 製品の PeopleTools コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0880	2010-05-13 15:11	2010-04-13	Show	GitHub Exploit DB Packet Storm

253189	3.5	注意	オラクル	-	Oracle E-Business Suite の Oracle Workflow Cartridge コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0857	2010-05-13 15:10	2010-04-13	Show	GitHub Exploit DB Packet Storm

253190	3.5	注意	オラクル	-	Oracle E-Business Suite の E-Business Intelligence コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0858	2010-05-13 15:10	2010-04-13	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:April 30, 2026, 4:58 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
200031	8.6	HIGH Network	decal_project	decal	This affects all versions of package decal. The vulnerability is in the set function.	NVD-CWE-Other	CVE-2020-28449	2024-11-21 14:22	2021-02-5	Show	GitHub Exploit DB Packet Storm

200032	5.4	MEDIUM Network	solarwinds	serv-u	SolarWinds Serv-U before 15.2.2 allows Authenticated Stored XSS.	CWE-79 Cross-site Scripting	CVE-2020-28001	2024-11-21 14:22	2021-02-4	Show	GitHub Exploit DB Packet Storm

200033	6.5	MEDIUM Network	solarwinds	serv-u	SolarWinds Serv-U before 15.2.2 allows Authenticated Directory Traversal.	CWE-22 Path Traversal	CVE-2020-27994	2024-11-21 14:22	2021-02-4	Show	GitHub Exploit DB Packet Storm

200034	9.8	CRITICAL Network	moxa	edr-g903_firmware edr-g903-t_firmware edr-g902_firmware edr-g902-t_firmware edr-810-2gsfp_firmware edr-810-2gsfp-t_firmware edr-810-vpn-2gsfp_firmware edr-810-vpn-2gsfp-t_firmware	Certain Moxa Inc products are affected by an improper restriction of operations in EDR-G903 Series Firmware Version 5.5 or lower, EDR-G902 Series Firmware Version 5.5 or lower, and EDR-810 Series Fir…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2020-28144	2024-11-21 14:22	2021-02-3	Show	GitHub Exploit DB Packet Storm

200035	6.8	MEDIUM Network	indutny	elliptic	The package elliptic before 6.5.4 are vulnerable to Cryptographic Issues via the secp256k1 implementation in elliptic/ec/key.js. There is no check to confirm that the public key point passed into the…	CWE-327 Use of a Broken or Risky Cryptographic Algorithm	CVE-2020-28498	2024-11-21 14:22	2021-02-3	Show	GitHub Exploit DB Packet Storm

200036	7.3	HIGH Network	totaljs	total.js	This affects the package total.js before 3.4.7. The set function can be used to set a value into the object according to the path. However the keys of the path being set are not properly sanitized, l…	NVD-CWE-Other	CVE-2020-28495	2024-11-21 14:22	2021-02-2	Show	GitHub Exploit DB Packet Storm

200037	8.6	HIGH Network	totaljs	total.js	This affects the package total.js before 3.4.7. The issue occurs in the image.pipe and image.stream functions. The type parameter is used to build the command that is then executed using child_proces…	CWE-78 OS Command	CVE-2020-28494	2024-11-21 14:22	2021-02-2	Show	GitHub Exploit DB Packet Storm

200038	5.3	MEDIUM Network	palletsprojects fedoraproject	jinja fedora	This affects the package jinja2 from 0.0.0 and before 2.11.3. The ReDoS vulnerability is mainly due to the `_punctuation_re regex` operator and its use of multiple wildcards. The last wildcard is the…	CWE-400 Uncontrolled Resource Consumption	CVE-2020-28493	2024-11-21 14:22	2021-02-2	Show	GitHub Exploit DB Packet Storm

200039	7.3	HIGH Network	kill-process-on-port_project	kill-process-on-port	All versions of package kill-process-on-port are vulnerable to Command Injection via a.getProcessPortId.	CWE-78 OS Command	CVE-2020-28426	2024-11-21 14:22	2021-02-2	Show	GitHub Exploit DB Packet Storm

200040	9.8	CRITICAL Network	accel-ppp	accel-ppp	Variable underflow exists in accel-ppp radius/packet.c when receiving a RADIUS vendor-specific attribute with length field is less than 2. It has an impact only when the attacker controls the RADIUS …	CWE-191 Integer Underflow (Wrap or Wraparound)	CVE-2020-28194	2024-11-21 14:22	2021-02-1	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed