Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 31, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
253601	4.3	警告	オラクル	-	Oracle E-Business Suite の Oracle Application Object Library コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2011-3513	2011-10-26 16:37	2011-10-18	Show	GitHub Exploit DB Packet Storm

253602	4.3	警告	オラクル	-	Oracle E-Business Suite の Oracle Application Object Library コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2011-2308	2011-10-26 16:36	2011-10-18	Show	GitHub Exploit DB Packet Storm

253603	3.5	注意	オラクル	-	Oracle E-Business Suite の Oracle Application Object Library コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2011-2303	2011-10-26 16:36	2011-10-18	Show	GitHub Exploit DB Packet Storm

253604	4.3	警告	オラクル	-	Oracle E-Business Suite の Oracle Application Object Library コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2011-2302	2011-10-26 16:32	2011-10-18	Show	GitHub Exploit DB Packet Storm

253605	3.5	注意	オラクル	-	Oracle Fusion Middleware の Oracle Web Services Manager コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2011-3523	2011-10-26 16:31	2011-10-18	Show	GitHub Exploit DB Packet Storm

253606	4.9	警告	オラクル	-	Oracle Fusion Middleware の Oracle Business Intelligence Enterprise Edition コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2011-3510	2011-10-26 16:30	2011-10-18	Show	GitHub Exploit DB Packet Storm

253607	5	警告	オラクル	-	Oracle WebLogic Server における Web Services の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2011-2320	2011-10-26 16:29	2011-10-18	Show	GitHub Exploit DB Packet Storm

253608	4.3	警告	オラクル	-	Oracle WebLogic Server における JMS の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2011-2319	2011-10-26 16:28	2011-10-18	Show	GitHub Exploit DB Packet Storm

253609	1.5	注意	オラクル	-	Oracle WebLogic Server における WLS Security の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2011-2318	2011-10-26 16:27	2011-10-18	Show	GitHub Exploit DB Packet Storm

253610	4.3	警告	オラクル	-	Oracle Fusion Middleware の Oracle Containers for J2EE コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2011-2314	2011-10-26 16:26	2011-10-18	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 31, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
208261	9.8	CRITICAL Network	thedaylightstudio	fuel_cms	FUEL CMS 1.4.11 allows SQL Injection via parameter 'name' in /fuel/permissions/create/. Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit …	CWE-89 SQL Injection	CVE-2020-26045	2024-11-21 14:19	2021-01-6	Show	GitHub Exploit DB Packet Storm

208262	6.1	MEDIUM Network	rust-lang	mdbook	mdBook is a utility to create modern online books from Markdown files and is written in Rust. In mdBook before version 0.4.5, there is a vulnerability affecting the search feature of mdBook, which co…	-	CVE-2020-26297	2024-11-21 14:19	2021-01-5	Show	GitHub Exploit DB Packet Storm

208263	5.3	MEDIUM Network	target	compiler	Vela is a Pipeline Automation (CI/CD) framework built on Linux container technology written in Golang. In Vela compiler before version 0.6.1 there is a vulnerability which allows exposure of server c…	-	CVE-2020-26294	2024-11-21 14:19	2021-01-5	Show	GitHub Exploit DB Packet Storm

208264	6.1	MEDIUM Network	htmlsanitizer_project	htmlsanitizer	HtmlSanitizer is a .NET library for cleaning HTML fragments and documents from constructs that can lead to XSS attacks. In HtmlSanitizer before version 5.0.372, there is a possible XSS bypass if styl…	CWE-79 Cross-site Scripting	CVE-2020-26293	2024-11-21 14:19	2021-01-5	Show	GitHub Exploit DB Packet Storm

208265	9.8	CRITICAL Network	chatter-social	creeper	Creeper is an experimental dynamic, interpreted language. The binary release of Creeper Interpreter 1.1.3 contains potential malware. The compromised binary release was available for a few hours betw…	-	CVE-2020-26292	2024-11-21 14:19	2021-01-5	Show	GitHub Exploit DB Packet Storm

208266	8.8	HIGH Network	qdpm	qdpm	qdPM through 9.1 allows PHP Object Injection via timeReportActions::executeExport in core/apps/qdPM/modules/timeReport/actions/actions.class.php because unserialize is used.	CWE-502 Deserialization of Untrusted Data	CVE-2020-26165	2024-11-21 14:19	2021-01-1	Show	GitHub Exploit DB Packet Storm

208267	8.7	HIGH Network	vega_project	vega	Vega is a visualization grammar, a declarative format for creating, saving, and sharing interactive visualization designs. Vega in an npm package. In Vega before version 5.17.3 there is an XSS vulner…	-	CVE-2020-26296	2024-11-21 14:19	2020-12-31	Show	GitHub Exploit DB Packet Storm

208268	6.5	MEDIUM Network	uri.js_project	uri.js	URI.js is a javascript URL mutation library (npm package urijs). In URI.js before version 1.19.4, the hostname can be spoofed by using a backslash (`\`) character followed by an at (`@`) character. I…	-	CVE-2020-26291	2024-11-21 14:19	2020-12-31	Show	GitHub Exploit DB Packet Storm

208269	6.5	MEDIUM Network	parseplatform	parse-server	Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. It is an npm package "parse-server". In Parse Server before version 4.5.0, user passwords invol…	-	CVE-2020-26288	2024-11-21 14:19	2020-12-31	Show	GitHub Exploit DB Packet Storm

208270	4.3	MEDIUM Network	nokogiri debian	nokogiri debian_linux	Nokogiri is a Rubygem providing HTML, XML, SAX, and Reader parsers with XPath and CSS selector support. In Nokogiri before version 1.11.0.rc4 there is an XXE vulnerability. XML Schemas parsed by Noko…	CWE-611 XXE	CVE-2020-26247	2024-11-21 14:19	2020-12-31	Show	GitHub Exploit DB Packet Storm