Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 12, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
255081 5 警告 オラクル - BEA Product Suite の WebLogic Server コンポーネントにおける脆弱性 CWE-noinfo
情報不足
CVE-2010-0068 2010-02-15 19:32 2010-01-12 Show GitHub Exploit DB Packet Storm
255082 4.3 警告 オラクル - Oracle Application Server の J2EE コンポーネントにおける脆弱性 CWE-noinfo
情報不足
CVE-2010-0070 2010-02-15 19:31 2010-01-12 Show GitHub Exploit DB Packet Storm
255083 5 警告 オラクル - Oracle Application Server の J2EE コンポーネントにおける脆弱性 CWE-noinfo
情報不足
CVE-2010-0067 2010-02-15 19:31 2010-01-12 Show GitHub Exploit DB Packet Storm
255084 5 警告 オラクル - Oracle Application Server の Access Manager Identity Server コンポーネントにおける脆弱性 CWE-noinfo
情報不足
CVE-2010-0066 2010-02-15 19:31 2010-01-12 Show GitHub Exploit DB Packet Storm
255085 7.8 危険 サイバートラスト株式会社
Linux
レッドハット
- Linux kernel の e1000_clean_rx_irq 関数における整数アンダーフローの脆弱性 CWE-189
数値処理の問題
CVE-2009-1385 2010-02-15 11:03 2009-06-4 Show GitHub Exploit DB Packet Storm
255086 4.6 警告 サイバートラスト株式会社
Todd C. Miller
- sudo の Perl スクリプト実行時における権限昇格の脆弱性 - CVE-2005-4158 2010-02-15 11:03 2005-11-8 Show GitHub Exploit DB Packet Storm
255087 1 注意 オラクル - Oracle Database および Oracle Application Server の Unzip コンポーネントにおける脆弱性 CWE-noinfo
情報不足
CVE-2009-3412 2010-02-12 12:22 2010-01-12 Show GitHub Exploit DB Packet Storm
255088 3.2 注意 オラクル - Oracle Database の Oracle Spatial コンポーネントにおける脆弱性 CWE-noinfo
情報不足
CVE-2009-3413 2010-02-12 12:22 2010-01-12 Show GitHub Exploit DB Packet Storm
255089 3.6 注意 オラクル - Oracle Database の RDBMS コンポーネントにおける脆弱性 CWE-noinfo
情報不足
CVE-2009-3410 2010-02-12 12:21 2010-01-12 Show GitHub Exploit DB Packet Storm
255090 4 警告 オラクル - Oracle Database の Logical Standby コンポーネントにおける脆弱性 CWE-noinfo
情報不足
CVE-2009-1996 2010-02-12 12:21 2010-01-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 12, 2026, 5:06 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
210061 7.5 HIGH
Network
jerryscript jerryscript parser/js/js-scanner.c in JerryScript 2.2.0 mishandles errors during certain out-of-memory conditions, as demonstrated by a scanner_reverse_info_list NULL pointer dereference and a scanner_scan_all a… CWE-754
CWE-476
CWE-617
 Improper Check for Unusual or Exceptional Conditions
 NULL Pointer Dereference
 Reachable Assertion
CVE-2020-13649 2024-11-21 14:01 2020-05-29 Show GitHub Exploit DB Packet Storm
210062 3.2 LOW
Local
qemu
debian
opensuse
canonical
qemu
debian_linux
leap
ubuntu_linux
In QEMU 5.0.0 and earlier, megasas_lookup_frame in hw/scsi/megasas.c has an out-of-bounds read via a crafted reply_queue_head field from a guest OS user. CWE-125
Out-of-bounds Read
CVE-2020-13362 2024-11-21 14:01 2020-05-29 Show GitHub Exploit DB Packet Storm
210063 3.9 LOW
Local
qemu
debian
opensuse
canonical
qemu
debian_linux
leap
ubuntu_linux
In QEMU 5.0.0 and earlier, es1370_transfer_audio in hw/audio/es1370.c does not properly validate the frame count, which allows guest OS users to trigger an out-of-bounds access during an es1370_write… CWE-787
 Out-of-bounds Write
CVE-2020-13361 2024-11-21 14:01 2020-05-28 Show GitHub Exploit DB Packet Storm
210064 6.5 MEDIUM
Network
gnome
canonical
fedoraproject
netapp
broadcom
balsa
glib-networking
ubuntu_linux
fedora
cloud_backup
fabric_operating_system
In GNOME glib-networking through 2.64.2, the implementation of GTlsClientConnection skips hostname verification of the server's TLS certificate if the application fails to specify the expected server… CWE-295
Improper Certificate Validation 
CVE-2020-13645 2024-11-21 14:01 2020-05-28 Show GitHub Exploit DB Packet Storm
210065 5.4 MEDIUM
Network
pickplugins accordion An issue was discovered in the Accordion plugin before 2.2.9 for WordPress. The unprotected AJAX wp_ajax_accordions_ajax_import_json action allowed any authenticated user with Subscriber or higher pe… CWE-79
Cross-site Scripting
CVE-2020-13644 2024-11-21 14:01 2020-05-28 Show GitHub Exploit DB Packet Storm
210066 8.8 HIGH
Network
siteorigin page_builder An issue was discovered in the SiteOrigin Page Builder plugin before 2.10.16 for WordPress. The live editor feature did not do any nonce verification, allowing for requests to be forged on behalf of … CWE-352
 Origin Validation Error
CVE-2020-13643 2024-11-21 14:01 2020-05-28 Show GitHub Exploit DB Packet Storm
210067 8.8 HIGH
Network
siteorigin page_builder An issue was discovered in the SiteOrigin Page Builder plugin before 2.10.16 for WordPress. The action_builder_content function did not do any nonce verification, allowing for requests to be forged o… CWE-352
 Origin Validation Error
CVE-2020-13642 2024-11-21 14:01 2020-05-28 Show GitHub Exploit DB Packet Storm
210068 8.8 HIGH
Network
infolific real-time_find_and_replace An issue was discovered in the Real-Time Find and Replace plugin before 4.0.2 for WordPress. The far_options_page function did not do any nonce verification, allowing for requests to be forged on beh… CWE-352
 Origin Validation Error
CVE-2020-13641 2024-11-21 14:01 2020-05-28 Show GitHub Exploit DB Packet Storm
210069 6.1 MEDIUM
Network
fork-cms fork_cms Fork before 5.8.3 allows XSS via navigation_title or title. CWE-79
Cross-site Scripting
CVE-2020-13633 2024-11-21 14:01 2020-05-28 Show GitHub Exploit DB Packet Storm
210070 6.1 MEDIUM
Network
centreon centreon_host-monitoring_widget
centreon_tactical-overview_widget
centreon_service-monitoring_widget
Cross-site scripting (XSS) vulnerability allows remote attackers to inject arbitrary web script or HTML via the widgetId parameter to host-monitoring/src/toolbar.php. This vulnerability is fixed in v… CWE-79
Cross-site Scripting
CVE-2020-13628 2024-11-21 14:01 2020-05-28 Show GitHub Exploit DB Packet Storm