Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 17, 2026, 4 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
255691	5	警告	オラクル	-	BEA Product Suite の WebLogic Server コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0074	2010-02-15 19:32	2010-01-12	Show	GitHub Exploit DB Packet Storm

255692	5	警告	オラクル	-	BEA Product Suite の WebLogic Server コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0068	2010-02-15 19:32	2010-01-12	Show	GitHub Exploit DB Packet Storm

255693	4.3	警告	オラクル	-	Oracle Application Server の J2EE コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0070	2010-02-15 19:31	2010-01-12	Show	GitHub Exploit DB Packet Storm

255694	5	警告	オラクル	-	Oracle Application Server の J2EE コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0067	2010-02-15 19:31	2010-01-12	Show	GitHub Exploit DB Packet Storm

255695	5	警告	オラクル	-	Oracle Application Server の Access Manager Identity Server コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0066	2010-02-15 19:31	2010-01-12	Show	GitHub Exploit DB Packet Storm

255696	7.8	危険	サイバートラスト株式会社 Linux レッドハット	-	Linux kernel の e1000_clean_rx_irq 関数における整数アンダーフローの脆弱性	CWE-189 数値処理の問題	CVE-2009-1385	2010-02-15 11:03	2009-06-4	Show	GitHub Exploit DB Packet Storm

255697	4.6	警告	サイバートラスト株式会社 Todd C. Miller	-	sudo の Perl スクリプト実行時における権限昇格の脆弱性	-	CVE-2005-4158	2010-02-15 11:03	2005-11-8	Show	GitHub Exploit DB Packet Storm

255698	1	注意	オラクル	-	Oracle Database および Oracle Application Server の Unzip コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2009-3412	2010-02-12 12:22	2010-01-12	Show	GitHub Exploit DB Packet Storm

255699	3.2	注意	オラクル	-	Oracle Database の Oracle Spatial コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2009-3413	2010-02-12 12:22	2010-01-12	Show	GitHub Exploit DB Packet Storm

255700	3.6	注意	オラクル	-	Oracle Database の RDBMS コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2009-3410	2010-02-12 12:21	2010-01-12	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 17, 2026, 4:15 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
198401	7.8	HIGH Local	fsa_project	fsa	fsa through 0.5.1 is vulnerable to Command Injection. The first argument of 'execGitCommand()', located within 'lib/rep.js#63' can be controlled by users without any sanitization to inject arbitrary …	CWE-78 OS Command	CVE-2020-7615	2024-11-21 14:37	2020-04-7	Show	GitHub Exploit DB Packet Storm

198402	9.8	CRITICAL Network	npm-programmatic_project	npm-programmatic	npm-programmatic through 0.0.12 is vulnerable to Command Injection.The packages and option properties are concatenated together without any validation and are used by the 'exec' function directly.	CWE-20 CWE-78 Improper Input Validation OS Command	CVE-2020-7614	2024-11-21 14:37	2020-04-7	Show	GitHub Exploit DB Packet Storm

198403	8.1	HIGH Network	clamscan_project	clamscan	clamscan through 1.2.0 is vulnerable to Command Injection. It is possible to inject arbitrary commands as part of the `_is_clamav_binary` function located within `Index.js`. It should be noted that t…	CWE-78 OS Command	CVE-2020-7613	2024-11-21 14:37	2020-04-7	Show	GitHub Exploit DB Packet Storm

198404	9.8	CRITICAL Network	jooby	jooby	This affects the package io.jooby:jooby-netty before 1.6.9, from 2.0.0 and before 2.2.1. The DefaultHttpHeaders is set to false which means it does not validates that the header isn't being abused fo…	NVD-CWE-Other	CVE-2020-7622	2024-11-21 14:37	2020-04-7	Show	GitHub Exploit DB Packet Storm

198405	5.3	MEDIUM Network	dot_project	dot	eivindfjeldstad-dot below 1.0.3 is vulnerable to Prototype Pollution.The function 'set' could be tricked into adding or modifying properties of 'Object.prototype' using a '__proto__' payload.	CWE-1321 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')	CVE-2020-7639	2024-11-21 14:37	2020-04-6	Show	GitHub Exploit DB Packet Storm

198406	5.3	MEDIUM Network	confinit_project	confinit	confinit through 0.3.0 is vulnerable to Prototype Pollution.The 'setDeepProperty' function could be tricked into adding or modifying properties of 'Object.prototype' using a '__proto__' payload.	CWE-1321 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')	CVE-2020-7638	2024-11-21 14:37	2020-04-6	Show	GitHub Exploit DB Packet Storm

198407	5.3	MEDIUM Network	class-transformer_project	class-transformer	class-transformer before 0.3.1 allow attackers to perform Prototype Pollution. The classToPlainFromExist function could be tricked into adding or modifying properties of Object.prototype using a __pr…	CWE-1321 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')	CVE-2020-7637	2024-11-21 14:37	2020-04-6	Show	GitHub Exploit DB Packet Storm

198408	9.8	CRITICAL Network	adb-driver_project	adb-driver	adb-driver through 0.1.8 is vulnerable to Command Injection.It allows execution of arbitrary commands via the command function.	CWE-78 OS Command	CVE-2020-7636	2024-11-21 14:37	2020-04-6	Show	GitHub Exploit DB Packet Storm

198409	9.8	CRITICAL Network	compass-compile_project	compass-compile	compass-compile through 0.0.1 is vulnerable to Command Injection.It allows execution of arbitrary commands via tha options argument.	CWE-78 OS Command	CVE-2020-7635	2024-11-21 14:37	2020-04-6	Show	GitHub Exploit DB Packet Storm

198410	9.8	CRITICAL Network	heroku-addonpool_project	heroku-addonpool	heroku-addonpool through 0.1.15 is vulnerable to Command Injection.	CWE-78 OS Command	CVE-2020-7634	2024-11-21 14:37	2020-04-6	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed