Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 18, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
255621	5	警告	日立	-	TP1/Message Control におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	-	2010-06-14 16:23	2010-05-17	Show	GitHub Exploit DB Packet Storm

255622	10	危険	日立 CA Technologies	-	CA XOsoft におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-1223	2010-06-14 16:23	2010-04-6	Show	GitHub Exploit DB Packet Storm

255623	5	警告	日立 CA Technologies	-	CA XOsoft における重要な情報を取得される脆弱性	CWE-287 不適切な認証	CVE-2010-1222	2010-06-14 16:23	2010-04-6	Show	GitHub Exploit DB Packet Storm

255624	5	警告	日立 CA Technologies	-	CA XOsoft におけるユーザ名を列挙される脆弱性	CWE-287 不適切な認証	CVE-2010-1221	2010-06-14 16:23	2010-04-6	Show	GitHub Exploit DB Packet Storm

255625	6.8	警告	フェンリル株式会社	-	ActiveGeckoBrowser における複数の脆弱性	CWE-Other その他	CVE-2010-2420	2010-06-14 12:01	2010-06-14	Show	GitHub Exploit DB Packet Storm

255626	6.8	警告	サン・マイクロシステムズ GNU Project ターボリナックスサイバートラスト株式会社レッドハット	-	GNU tar および GNU cpio の rmt_read__ 関数におけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-0624	2010-06-11 18:45	2010-03-15	Show	GitHub Exploit DB Packet Storm

255627	3.5	注意	PostgreSQL.org サイバートラスト株式会社レッドハット	-	PostgreSQL における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2010-0733	2010-06-9 16:54	2010-03-19	Show	GitHub Exploit DB Packet Storm

255628	6.5	警告	PostgreSQL.org サイバートラスト株式会社レッドハット	-	PostgreSQL の bitsubstr 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-189 数値処理の問題	CVE-2010-0442	2010-06-9 16:54	2010-02-2	Show	GitHub Exploit DB Packet Storm

255629	6.8	警告	アップル	-	Java の window drawing 実装における任意のコードを実行される脆弱性	CWE-189 数値処理の問題	CVE-2010-0539	2010-06-7 17:58	2010-05-18	Show	GitHub Exploit DB Packet Storm

255630	6.8	警告	アップル	-	Apple Mac OS X 上で稼働する Java における任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2010-0538	2010-06-7 17:58	2010-05-18	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 18, 2026, 4:12 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
199331	9.3	CRITICAL Network	sap	commerce_cloud	SAP Commerce, versions - 6.6, 6.7, 1808, 1811, 1905, does not process XML input securely in the Rest API from Servlet xyformsweb, leading to Missing XML Validation. This affects confidentiality and a…	CWE-611 XXE	CVE-2020-6238	2024-11-21 14:35	2020-04-15	Show	GitHub Exploit DB Packet Storm

199332	7.5	HIGH Network	sap	businessobjects_business_intelligence_platform	Under certain conditions, SAP Business Objects Business Intelligence Platform, version 4.1, 4.2, dswsbobje web application allows an attacker to access information which would otherwise be restricted…	NVD-CWE-noinfo	CVE-2020-6237	2024-11-21 14:35	2020-04-15	Show	GitHub Exploit DB Packet Storm

199333	7.2	HIGH Network	sap	landscape_management adaptive_extensions	SAP Landscape Management, version 3.0, and SAP Adaptive Extensions, version 1.0, allows an attacker with admin_group privileges to change ownership and permissions (including S-user ID bit s-bit) of …	CWE-269 Improper Privilege Management	CVE-2020-6236	2024-11-21 14:35	2020-04-15	Show	GitHub Exploit DB Packet Storm

199334	8.6	HIGH Network	sap	solution_manager	SAP Solution Manager (Diagnostics Agent), version 7.2, does not perform the authentication check for the functionalities of the Collector Simulator, leading to Missing Authentication.	CWE-306 Missing Authentication for Critical Function	CVE-2020-6235	2024-11-21 14:35	2020-04-15	Show	GitHub Exploit DB Packet Storm

199335	7.2	HIGH Network	sap	host_agent	SAP Host Agent, version 7.21, allows an attacker with admin privileges to use the operation framework to gain root privileges over the underlying operating system, leading to Privilege Escalation.	NVD-CWE-noinfo	CVE-2020-6234	2024-11-21 14:35	2020-04-15	Show	GitHub Exploit DB Packet Storm

199336	4.3	MEDIUM Network	sap	s\/4hana_financial_products_subledger banking_services_from_sap	SAP S/4 HANA (Financial Products Subledger and Banking Services), versions - FSAPPL 400, 450, 500 and S4FPSL 100, allows an authenticated user to run an analysis report due to Missing Authorization C…	CWE-862 Missing Authorization	CVE-2020-6233	2024-11-21 14:35	2020-04-15	Show	GitHub Exploit DB Packet Storm

199337	5.3	MEDIUM Network	sap	commerce_cloud	SAP Commerce, versions 1811, 1905, does not perform necessary authorization checks for an anonymous user, due to Missing Authorization Check. This affects confidentiality of secure media.	CWE-862 Missing Authorization	CVE-2020-6232	2024-11-21 14:35	2020-04-15	Show	GitHub Exploit DB Packet Storm

199338	5.4	MEDIUM Network	sap	businessobjects_business_intelligence_platform	SAP Business Objects Business Intelligence Platform (Web Intelligence HTML interface), version 4.2, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulner…	CWE-79 Cross-site Scripting	CVE-2020-6231	2024-11-21 14:35	2020-04-15	Show	GitHub Exploit DB Packet Storm

199339	7.2	HIGH Network	sap	orientdb	SAP OrientDB, version 3.0, allows an authenticated attacker with script execute/write permissions to inject code that can be executed by the application and lead to Code Injection. An attacker could …	NVD-CWE-noinfo	CVE-2020-6230	2024-11-21 14:35	2020-04-15	Show	GitHub Exploit DB Packet Storm

199340	6.1	MEDIUM Network	sap	netweaver_as_abap_business_server_pages	SAP NetWeaver AS ABAP (Business Server Pages application CRM_BSP_FRAME), versions 700, 701, 702, 710, 711, 730, 731, 740, 750, 751, 752, 75A, 75B, 75C, 75D, 75E, does not sufficiently encode user con…	CWE-79 Cross-site Scripting	CVE-2020-6229	2024-11-21 14:35	2020-04-15	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed