Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 11, 2026, 6:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
254601	3.5	注意	オラクル	-	Oracle E-Business Suite の Oracle Workflow Cartridge コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0857	2010-05-13 15:10	2010-04-13	Show	GitHub Exploit DB Packet Storm

254602	3.5	注意	オラクル	-	Oracle E-Business Suite の E-Business Intelligence コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0858	2010-05-13 15:10	2010-04-13	Show	GitHub Exploit DB Packet Storm

254603	4.3	警告	オラクル	-	Oracle E-Business Suite の Oracle Transportation Management コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0869	2010-05-13 15:10	2010-04-13	Show	GitHub Exploit DB Packet Storm

254604	4.3	警告	オラクル	-	Oracle E-Business Suite の Oracle Agile Engineering Data Management コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0871	2010-05-13 15:10	2010-04-13	Show	GitHub Exploit DB Packet Storm

254605	4.3	警告	オラクル	-	Oracle E-Business Suite の Oracle Agile Engineering Data Management コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0865	2010-05-13 15:09	2010-04-13	Show	GitHub Exploit DB Packet Storm

254606	5	警告	オラクル	-	Oracle E-Business Suite の Oracle HRMS (Self Service) コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0861	2010-05-13 15:09	2010-04-13	Show	GitHub Exploit DB Packet Storm

254607	7.6	危険	マイクロソフト	-	Internet Explorer において VBScript および Windows Help を使用する際に任意のコードが実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-0483	2010-05-12 15:20	2010-03-2	Show	GitHub Exploit DB Packet Storm

254608	7.1	危険	マイクロソフト	-	Microsoft Windows の kernel における SMB 応答パケットの処理に関するサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2009-3676	2010-05-12 15:20	2009-11-13	Show	GitHub Exploit DB Packet Storm

254609	5.8	警告	オラクル	-	Oracle E-Business Suite の Oracle iStore コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0868	2010-05-12 15:19	2010-04-13	Show	GitHub Exploit DB Packet Storm

254610	6.4	警告	オラクル	-	Oracle E-Business Suite の Oracle Application Object Library コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0859	2010-05-12 15:19	2010-04-13	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 11, 2026, 4:09 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
219591	4.8	MEDIUM Network	fooplugins	foogallery	The FooGallery plugin 1.8.12 for WordPress allow XSS via the post_title parameter.	CWE-79 Cross-site Scripting	CVE-2019-20182	2024-11-21 13:38	2020-01-10	Show	GitHub Exploit DB Packet Storm

219592	4.8	MEDIUM Network	getawesomesupport	awesome_support	The awesome-support plugin 5.8.0 for WordPress allows XSS via the post_title parameter.	CWE-79 Cross-site Scripting	CVE-2019-20181	2024-11-21 13:38	2020-01-10	Show	GitHub Exploit DB Packet Storm

219593	8.8	HIGH Network	soplanning	soplanning	SOPlanning 1.45 has SQL injection via the user_list.php "by" parameter.	CWE-89 SQL Injection	CVE-2019-20179	2024-11-21 13:38	2020-01-10	Show	GitHub Exploit DB Packet Storm

219594	6.5	MEDIUM Network	peel	peel_shopping	Advisto PEEL Shopping 9.2.1 has CSRF via administrer/utilisateurs.php to delete a user.	CWE-352 Origin Validation Error	CVE-2019-20178	2024-11-21 13:38	2020-01-10	Show	GitHub Exploit DB Packet Storm

219595	5.3	MEDIUM Network	f5 apple canonical opensuse netapp	nginx xcode ubuntu_linux leap cloud_backup	NGINX before 1.17.7, with certain error_page configurations, allows HTTP request smuggling, as demonstrated by the ability of an attacker to read unauthorized web pages in environments where NGINX is…	CWE-444 HTTP Request Smuggling	CVE-2019-20372	2024-11-21 13:38	2020-01-10	Show	GitHub Exploit DB Packet Storm

219596	6.8	MEDIUM Network	tablepress	tablepress	The TablePress plugin 1.9.2 for WordPress allows tablepress[data] CSV injection by Editor users. Note: The vendor disputes this issue and argues that this responsibility lies with the application tha…	CWE-1236 Improper Neutralization of Formula Elements in a CSV File	CVE-2019-20180	2024-11-21 13:38	2020-01-10	Show	GitHub Exploit DB Packet Storm

219597	8.8	HIGH Network	artica	pandora_fms	netflow_get_stats in functions_netflow.php in Pandora FMS 7.0NG allows remote authenticated users to execute arbitrary OS commands via shell metacharacters in the ip_src parameter in an index.php?ope…	CWE-78 OS Command	CVE-2019-20224	2024-11-21 13:38	2020-01-10	Show	GitHub Exploit DB Packet Storm

219598	9.1	CRITICAL Network	freedesktop debian canonical opensuse	libbsd debian_linux ubuntu_linux leap	nlist.c in libbsd before 0.10.0 has an out-of-bounds read during a comparison for a symbol name from the string table (strtab).	CWE-125 Out-of-bounds Read	CVE-2019-20367	2024-11-21 13:38	2020-01-9	Show	GitHub Exploit DB Packet Storm

219599	6.1	MEDIUM Network	igniterealtime	openfire	An XSS issue was discovered in Ignite Realtime Openfire 4.4.4 via isTrustStore to Manage Store Contents.	CWE-79 Cross-site Scripting	CVE-2019-20366	2024-11-21 13:38	2020-01-9	Show	GitHub Exploit DB Packet Storm

219600	6.1	MEDIUM Network	igniterealtime	openfire	An XSS issue was discovered in Ignite Realtime Openfire 4.4.4 via search to the Users/Group search page.	CWE-79 Cross-site Scripting	CVE-2019-20365	2024-11-21 13:38	2020-01-9	Show	GitHub Exploit DB Packet Storm