Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 30, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
255301	5.5	警告	オラクル	-	Oracle PeopleSoft and JDEdwards Suite の PeopleSoft Enterprise CRM コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-4419	2011-02-15 14:22	2011-01-18	Show	GitHub Exploit DB Packet Storm

255302	7.5	危険	オラクル	-	Oracle PeopleSoft and JDEdwards Suite の PeopleSoft Enterprise PeopleTools コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-4418	2011-02-15 14:19	2011-01-18	Show	GitHub Exploit DB Packet Storm

255303	3.5	注意	オラクル	-	Oracle Supply Chain Products Suite の Oracle Transportation Manager コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-4432	2011-02-15 14:01	2011-01-18	Show	GitHub Exploit DB Packet Storm

255304	3.5	注意	オラクル	-	Oracle Supply Chain Products Suite の Agile Core コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-4429	2011-02-15 13:57	2011-01-18	Show	GitHub Exploit DB Packet Storm

255305	3.5	注意	オラクル	-	Oracle Supply Chain Products Suite の Agile Core コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-3505	2011-02-15 13:55	2011-01-18	Show	GitHub Exploit DB Packet Storm

255306	-	-	オラクル	-	Oracle WebLogic Node Manager に脆弱性	-	-	2011-02-14 15:26	2010-10-13	Show	GitHub Exploit DB Packet Storm

255307	4	警告	オラクル	-	Oracle Applications の Oracle Application Object Library コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-3589	2011-02-14 15:25	2011-01-18	Show	GitHub Exploit DB Packet Storm

255308	4.3	警告	オラクル	-	Oracle Applications の Oracle Common Applications コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-3587	2011-02-14 15:25	2011-01-18	Show	GitHub Exploit DB Packet Storm

255309	6.4	警告	オラクル	-	Oracle Enterprise Manager Grid Control の Real User Experience Insight コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-3594	2011-02-14 15:24	2011-01-18	Show	GitHub Exploit DB Packet Storm

255310	3.5	注意	オラクル	-	Oracle Fusion Middleware の Oracle BI Publisher コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-4427	2011-02-14 15:24	2011-01-18	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 30, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
215781	9.8	CRITICAL Network	total-soft	responsive_poll	An issue was discovered in the Responsive Poll through 1.3.4 for Wordpress. It allows an unauthenticated user to manipulate polls, e.g., delete, clone, or view a hidden poll. This is due to the usage…	CWE-306 Missing Authentication for Critical Function	CVE-2020-11673	2024-11-21 13:58	2020-04-14	Show	GitHub Exploit DB Packet Storm

215782	7.5	HIGH Network	davidlingren	media_library_assistant	The Media Library Assistant plugin before 2.82 for Wordpress suffers from a Local File Inclusion vulnerability in mla_gallery link=download.	NVD-CWE-noinfo	CVE-2020-11732	2024-11-21 13:58	2020-04-13	Show	GitHub Exploit DB Packet Storm

215783	6.1	MEDIUM Network	davidlingren	media_library_assistant	The Media Library Assistant plugin before 2.82 for Wordpress suffers from multiple XSS vulnerabilities in all Settings/Media Library Assistant tabs, which allow remote authenticated users to execute …	CWE-79 Cross-site Scripting	CVE-2020-11731	2024-11-21 13:58	2020-04-13	Show	GitHub Exploit DB Packet Storm

215784	7.5	HIGH Network	openresty debian	openresty debian_linux	An issue was discovered in OpenResty before 1.15.8.4. ngx_http_lua_subrequest.c allows HTTP request smuggling, as demonstrated by the ngx.location.capture API.	CWE-444 HTTP Request Smuggling	CVE-2020-11724	2024-11-21 13:58	2020-04-13	Show	GitHub Exploit DB Packet Storm

215785	9.8	CRITICAL Network	dungeon_crawl_stone_soup_project	dungeon_crawl_stone_soup	Dungeon Crawl Stone Soup (aka DCSS or crawl) before 0.25 allows remote attackers to execute arbitrary code via Lua bytecode embedded in an uploaded .crawlrc file.	CWE-434 Unrestricted Upload of File with Dangerous Type	CVE-2020-11722	2024-11-21 13:58	2020-04-13	Show	GitHub Exploit DB Packet Storm

215786	5.4	MEDIUM Network	etentech	psg-6528vm_firmware	eten PSG-6528VM 1.1 devices allow XSS via System Contact or System Location.	CWE-79 Cross-site Scripting	CVE-2020-11714	2024-11-21 13:58	2020-04-13	Show	GitHub Exploit DB Packet Storm

215787	7.5	HIGH Network	wolfssl	wolfssl	wolfSSL 4.3.0 has mulmod code in wc_ecc_mulmod_ex in ecc.c that does not properly resist timing side-channel attacks.	CWE-203 Information Exposure Through Discrepancy	CVE-2020-11713	2024-11-21 13:58	2020-04-13	Show	GitHub Exploit DB Packet Storm

215788	6.1	MEDIUM Network	open_upload_project	open_upload	Open Upload through 0.4.3 allows XSS via index.php?action=u and the filename field.	CWE-79 Cross-site Scripting	CVE-2020-11712	2024-11-21 13:58	2020-04-13	Show	GitHub Exploit DB Packet Storm

215789	7.5	HIGH Network	cpp-httplib_project	cpp-httplib	cpp-httplib through 0.5.8 does not filter \r\n in parameters passed into the set_redirect and set_header functions, which creates possibilities for CRLF injection and HTTP response splitting in some …	CWE-74 Injection	CVE-2020-11709	2024-11-21 13:58	2020-04-12	Show	GitHub Exploit DB Packet Storm

215790	9.8	CRITICAL Network	provideserver	provide_ftp_server	An issue was discovered in ProVide (formerly zFTPServer) through 13.1. Privilege escalation can occur via the /ajax/SetUserInfo messages parameter because of the EXECUTE() feature, which is for execu…	CWE-269 Improper Privilege Management	CVE-2020-11708	2024-11-21 13:58	2020-04-12	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed