Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 15, 2026, 12:10 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
255261 4 警告 オラクル - 複数の Oracle 製品の PeopleTools コンポーネントにおける脆弱性 CWE-noinfo
情報不足
CVE-2010-0880 2010-05-13 15:11 2010-04-13 Show GitHub Exploit DB Packet Storm
255262 3.5 注意 オラクル - Oracle E-Business Suite の Oracle Workflow Cartridge コンポーネントにおける脆弱性 CWE-noinfo
情報不足
CVE-2010-0857 2010-05-13 15:10 2010-04-13 Show GitHub Exploit DB Packet Storm
255263 3.5 注意 オラクル - Oracle E-Business Suite の E-Business Intelligence コンポーネントにおける脆弱性 CWE-noinfo
情報不足
CVE-2010-0858 2010-05-13 15:10 2010-04-13 Show GitHub Exploit DB Packet Storm
255264 4.3 警告 オラクル - Oracle E-Business Suite の Oracle Transportation Management コンポーネントにおける脆弱性 CWE-noinfo
情報不足
CVE-2010-0869 2010-05-13 15:10 2010-04-13 Show GitHub Exploit DB Packet Storm
255265 4.3 警告 オラクル - Oracle E-Business Suite の Oracle Agile Engineering Data Management コンポーネントにおける脆弱性 CWE-noinfo
情報不足
CVE-2010-0871 2010-05-13 15:10 2010-04-13 Show GitHub Exploit DB Packet Storm
255266 4.3 警告 オラクル - Oracle E-Business Suite の Oracle Agile Engineering Data Management コンポーネントにおける脆弱性 CWE-noinfo
情報不足
CVE-2010-0865 2010-05-13 15:09 2010-04-13 Show GitHub Exploit DB Packet Storm
255267 5 警告 オラクル - Oracle E-Business Suite の Oracle HRMS (Self Service) コンポーネントにおける脆弱性 CWE-noinfo
情報不足
CVE-2010-0861 2010-05-13 15:09 2010-04-13 Show GitHub Exploit DB Packet Storm
255268 7.6 危険 マイクロソフト - Internet Explorer において VBScript および Windows Help を使用する際に任意のコードが実行される脆弱性 CWE-94
コード・インジェクション
CVE-2010-0483 2010-05-12 15:20 2010-03-2 Show GitHub Exploit DB Packet Storm
255269 7.1 危険 マイクロソフト - Microsoft Windows の kernel における SMB 応答パケットの処理に関するサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他
CVE-2009-3676 2010-05-12 15:20 2009-11-13 Show GitHub Exploit DB Packet Storm
255270 5.8 警告 オラクル - Oracle E-Business Suite の Oracle iStore コンポーネントにおける脆弱性 CWE-noinfo
情報不足
CVE-2010-0868 2010-05-12 15:19 2010-04-13 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 15, 2026, 4:28 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
212081 6.1 MEDIUM
Network
ninjaforms ninja_forms The ninja-forms plugin before 3.4.24.2 for WordPress allows CSRF with resultant XSS. CWE-352
 Origin Validation Error
CVE-2020-12462 2024-11-21 13:59 2020-04-30 Show GitHub Exploit DB Packet Storm
212082 8.8 HIGH
Network
php-fusion php-fusion PHP-Fusion 9.03.50 allows SQL Injection because maincore.php has an insufficient protection mechanism. An attacker can develop a crafted payload that can be inserted into the sort_order GET parameter… CWE-89
SQL Injection
CVE-2020-12461 2024-11-21 13:59 2020-04-30 Show GitHub Exploit DB Packet Storm
212083 5.3 MEDIUM
Network
gitlab gitlab GitLab 10.8 through 12.9 has a vulnerability that allows someone to mirror a repository even if the feature is not activated. CWE-276
Incorrect Default Permissions 
CVE-2020-12277 2024-11-21 13:59 2020-04-30 Show GitHub Exploit DB Packet Storm
212084 4.8 MEDIUM
Network
gitlab gitlab GitLab 9.5.9 through 12.9 is vulnerable to stored XSS in an admin notification feature. CWE-79
Cross-site Scripting
CVE-2020-12276 2024-11-21 13:59 2020-04-30 Show GitHub Exploit DB Packet Storm
212085 5.3 MEDIUM
Network
gitlab gitlab GitLab 12.6 through 12.9 is vulnerable to a privilege escalation that allows an external user to create a personal snippet through the API. NVD-CWE-noinfo
CVE-2020-12275 2024-11-21 13:59 2020-04-30 Show GitHub Exploit DB Packet Storm
212086 5.5 MEDIUM
Local
grafana
fedoraproject
grafana
fedora
In certain Red Hat packages for Grafana 6.x through 6.3.6, the configuration files /etc/grafana/grafana.ini and /etc/grafana/ldap.toml (which contain a secret_key and a bind_password) are world reada… CWE-732
 Incorrect Permission Assignment for Critical Resource
CVE-2020-12459 2024-11-21 13:59 2020-04-30 Show GitHub Exploit DB Packet Storm
212087 5.5 MEDIUM
Local
grafana
redhat
fedoraproject
grafana
ceph_storage
enterprise_linux
fedora
An information-disclosure flaw was found in Grafana through 6.7.3. The database directory /var/lib/grafana and database file /var/lib/grafana/grafana.db are world readable. This can result in exposur… CWE-732
 Incorrect Permission Assignment for Critical Resource
CVE-2020-12458 2024-11-21 13:59 2020-04-30 Show GitHub Exploit DB Packet Storm
212088 7.8 HIGH
Local
gskill trident_z_lighting_control The ene.sys driver in G.SKILL Trident Z Lighting Control through 1.00.08 exposes mapping and un-mapping of physical memory, reading and writing to Model Specific Register (MSR) registers, and input f… NVD-CWE-noinfo
CVE-2020-12446 2024-11-21 13:59 2020-04-29 Show GitHub Exploit DB Packet Storm
212089 6.2 MEDIUM
Network
gigamon gigavue An issue was discovered in Gigamon GigaVUE 5.5.01.11. The upload functionality allows an arbitrary file upload for an authenticated user. If an executable file is uploaded into the www-root directory… CWE-434
 Unrestricted Upload of File with Dangerous Type 
CVE-2020-12252 2024-11-21 13:59 2020-04-29 Show GitHub Exploit DB Packet Storm
212090 2.2 LOW
Network
gigamon gigavue An issue was discovered in Gigamon GigaVUE 5.5.01.11. The upload functionality allows an authenticated user to change the filename value (in the POST method) from the original filename to achieve dir… CWE-22
Path Traversal
CVE-2020-12251 2024-11-21 13:59 2020-04-29 Show GitHub Exploit DB Packet Storm