Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 25, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
256501	4	警告	オラクル	-	複数の Oracle 製品の PeopleTools コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0878	2010-05-13 15:11	2010-04-13	Show	GitHub Exploit DB Packet Storm

256502	5	警告	オラクル	-	複数の Oracle 製品の PeopleTools コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0877	2010-05-13 15:11	2010-04-13	Show	GitHub Exploit DB Packet Storm

256503	4	警告	オラクル	-	複数の Oracle 製品の PeopleTools コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0880	2010-05-13 15:11	2010-04-13	Show	GitHub Exploit DB Packet Storm

256504	3.5	注意	オラクル	-	Oracle E-Business Suite の Oracle Workflow Cartridge コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0857	2010-05-13 15:10	2010-04-13	Show	GitHub Exploit DB Packet Storm

256505	3.5	注意	オラクル	-	Oracle E-Business Suite の E-Business Intelligence コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0858	2010-05-13 15:10	2010-04-13	Show	GitHub Exploit DB Packet Storm

256506	4.3	警告	オラクル	-	Oracle E-Business Suite の Oracle Transportation Management コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0869	2010-05-13 15:10	2010-04-13	Show	GitHub Exploit DB Packet Storm

256507	4.3	警告	オラクル	-	Oracle E-Business Suite の Oracle Agile Engineering Data Management コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0871	2010-05-13 15:10	2010-04-13	Show	GitHub Exploit DB Packet Storm

256508	4.3	警告	オラクル	-	Oracle E-Business Suite の Oracle Agile Engineering Data Management コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0865	2010-05-13 15:09	2010-04-13	Show	GitHub Exploit DB Packet Storm

256509	5	警告	オラクル	-	Oracle E-Business Suite の Oracle HRMS (Self Service) コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0861	2010-05-13 15:09	2010-04-13	Show	GitHub Exploit DB Packet Storm

256510	7.6	危険	マイクロソフト	-	Internet Explorer において VBScript および Windows Help を使用する際に任意のコードが実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-0483	2010-05-12 15:20	2010-03-2	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 26, 2026, 4:05 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
198691	4.3	MEDIUM Network	nextcloud	nextcloud_server	A missing check in Nextcloud Server 14.0.3 could give recipient the possibility to extend the expiration date of a share they received.	CWE-20 Improper Input Validation	CVE-2020-8122	2024-11-21 14:38	2020-02-5	Show	GitHub Exploit DB Packet Storm

198692	8.1	HIGH Network	nextcloud	nextcloud_server	A bug in Nextcloud Server 14.0.4 could expose more data in reshared link shares than intended by the sharer.	CWE-668 Exposure of Resource to Wrong Sphere	CVE-2020-8121	2024-11-21 14:38	2020-02-5	Show	GitHub Exploit DB Packet Storm

198693	6.1	MEDIUM Network	nextcloud	nextcloud_server	A reflected Cross-Site Scripting vulnerability in Nextcloud Server 16.0.1 was discovered in the svg generation.	CWE-79 Cross-site Scripting	CVE-2020-8120	2024-11-21 14:38	2020-02-5	Show	GitHub Exploit DB Packet Storm

198694	4.3	MEDIUM Network	nextcloud	nextcloud_server	Improper authorization in Nextcloud server 17.0.0 causes leaking of previews and files when a file-drop share link is opened via the gallery app.	CWE-863 Incorrect Authorization	CVE-2020-8119	2024-11-21 14:38	2020-02-5	Show	GitHub Exploit DB Packet Storm

198695	5.0	MEDIUM Network	nextcloud novell opensuse	nextcloud_server suse_linux_enterprise_server backports_sle	An authenticated server-side request forgery in Nextcloud server 16.0.1 allowed to detect local and remote services when adding a new subscription in the calendar application.	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2020-8118	2024-11-21 14:38	2020-02-5	Show	GitHub Exploit DB Packet Storm

198696	4.3	MEDIUM Network	nextcloud	nextcloud_server	Improper preservation of permissions in Nextcloud Server 14.0.3 causes the event details to be leaked when sharing a non-public event.	CWE-281 Improper Preservation of Permissions	CVE-2020-8117	2024-11-21 14:38	2020-02-5	Show	GitHub Exploit DB Packet Storm

198697	7.3	HIGH Network	dot-prop_project	dot-prop	Prototype pollution vulnerability in dot-prop npm package versions before 4.2.1 and versions 5.x before 5.1.1 allows an attacker to add arbitrary properties to JavaScript language constructs such as …	CWE-1321 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')	CVE-2020-8116	2024-11-21 14:38	2020-02-5	Show	GitHub Exploit DB Packet Storm

198698	6.1	MEDIUM Network	revive-adserver	revive_adserver	A reflected XSS vulnerability has been discovered in the publicly accessible afr.php delivery script of Revive Adserver <= 5.0.3 by Jacopo Tediosi. There are currently no known exploits: the session …	CWE-79 Cross-site Scripting	CVE-2020-8115	2024-11-21 14:38	2020-02-5	Show	GitHub Exploit DB Packet Storm

198699	9.8	CRITICAL Network	phpabook_project	phpabook	An issue was discovered in phpABook 0.9 Intermediate. On the login page, if one sets a userInfo cookie with the value of admin+1+en (user+perms+lang), one can login as any user without a password.	CWE-287 Improper Authentication	CVE-2020-8510	2024-11-21 14:38	2020-02-4	Show	GitHub Exploit DB Packet Storm

198700	4.3	MEDIUM Network	prototypejs	prototype	Prototype 1.6.0.1 allows remote authenticated users to forge ticket creation (on behalf of other user accounts) via a modified email ID field.	CWE-862 Missing Authorization	CVE-2020-7993	2024-11-21 14:38	2020-02-4	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed