Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 31, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
256501	4.3	警告	オラクル	-	Oracle Fusion Middleware の Oracle Business Process Management コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-2370	2010-08-5 16:33	2010-07-13	Show	GitHub Exploit DB Packet Storm

256502	5	警告	オラクル	-	Oracle Secure Backup における脆弱性	CWE-noinfo 情報不足	CVE-2010-0904	2010-08-5 16:33	2010-07-13	Show	GitHub Exploit DB Packet Storm

256503	9	危険	オラクル	-	Oracle Secure Backup における脆弱性	CWE-noinfo 情報不足	CVE-2010-0906	2010-08-5 16:32	2010-07-13	Show	GitHub Exploit DB Packet Storm

256504	9	危険	オラクル	-	Oracle Secure Backup における脆弱性	CWE-noinfo 情報不足	CVE-2010-0899	2010-08-5 16:32	2010-07-13	Show	GitHub Exploit DB Packet Storm

256505	10	危険	オラクル	-	Oracle Secure Backup における脆弱性	CWE-noinfo 情報不足	CVE-2010-0907	2010-08-5 16:32	2010-07-13	Show	GitHub Exploit DB Packet Storm

256506	10	危険	オラクル	-	Oracle Secure Backup における脆弱性	CWE-noinfo 情報不足	CVE-2010-0898	2010-08-5 16:31	2010-07-13	Show	GitHub Exploit DB Packet Storm

256507	5	警告	オラクル	-	Oracle TimesTen In-Memory Database の Data Server コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0910	2010-08-5 16:31	2010-07-13	Show	GitHub Exploit DB Packet Storm

256508	10	危険	オラクル	-	Oracle TimesTen In-Memory Database の Data Server コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0873	2010-08-5 16:30	2010-07-13	Show	GitHub Exploit DB Packet Storm

256509	3.2	注意	オラクル	-	Oracle Solaris における Solaris Management コンソールの処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2010-2384	2010-08-4 16:26	2010-07-13	Show	GitHub Exploit DB Packet Storm

256510	3.2	注意	オラクル	-	Oracle Solaris における NFS の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2010-2383	2010-08-4 16:25	2010-07-13	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 31, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
208211	7.5	HIGH Network	is.js_project	is.js	is.js is a general-purpose check library. Versions 0.9.0 and prior contain one or more regular expressions that are vulnerable to Regular Expression Denial of Service (ReDoS). is.js uses a regex copy…	CWE-1333 Inefficient Regular Expression Complexity	CVE-2020-26302	2024-11-21 14:19	2022-12-23	Show	GitHub Exploit DB Packet Storm

208212	7.5	HIGH Network	dell oracle	bsafe_micro-edition-suite http_server security_service database weblogic_server_proxy_plug-in	Dell BSAFE Micro Edition Suite, versions prior to 4.5.1, contain a Buffer Over-Read Vulnerability.	CWE-125 Out-of-bounds Read	CVE-2020-26185	2024-11-21 14:19	2022-06-2	Show	GitHub Exploit DB Packet Storm

208213	7.5	HIGH Network	dell oracle	bsafe_micro-edition-suite http_server security_service weblogic_server_proxy_plug-in	Dell BSAFE Micro Edition Suite, versions prior to 4.5.1, contain an Improper Certificate Validation vulnerability.	CWE-295 Improper Certificate Validation	CVE-2020-26184	2024-11-21 14:19	2022-06-2	Show	GitHub Exploit DB Packet Storm

208214	7.8	HIGH Local	shopxo	shopxo	The PluginsUpload function in application/service/PluginsAdminService.php of ShopXO v1.9.0 contains an arbitrary file upload vulnerability which allows attackers to execute arbitrary code via uploadi…	CWE-434 Unrestricted Upload of File with Dangerous Type	CVE-2020-26008	2024-11-21 14:19	2022-03-21	Show	GitHub Exploit DB Packet Storm

208215	7.8	HIGH Local	shopxo	shopxo	An arbitrary file upload vulnerability in the upload payment plugin of ShopXO v1.9.0 allows attackers to execute arbitrary code via uploading a crafted PHP file.	CWE-434 Unrestricted Upload of File with Dangerous Type	CVE-2020-26007	2024-11-21 14:19	2022-03-21	Show	GitHub Exploit DB Packet Storm

208216	6.1	MEDIUM Local	jhead_project	jhead	JHEAD is a simple command line tool for displaying and some manipulation of EXIF header data embedded in Jpeg images from digital cameras. In affected versions there is a heap-buffer-overflow on jhea…	CWE-787 Out-of-bounds Write	CVE-2020-26208	2024-11-21 14:19	2022-02-2	Show	GitHub Exploit DB Packet Storm

208217	10.0	CRITICAL Network	ssh2_project	ssh2	ssh2 is client and server modules written in pure JavaScript for node.js. In ssh2 before version 1.4.0 there is a command injection vulnerability. The issue only exists on Windows. This issue may lea…	-	CVE-2020-26301	2024-11-21 14:19	2021-09-21	Show	GitHub Exploit DB Packet Storm

208218	9.8	CRITICAL Network	systeminformation	systeminformation	systeminformation is an npm package that provides system and OS information library for node.js. In systeminformation before version 4.26.2 there is a command injection vulnerability. Problem was fix…	CWE-78 OS Command	CVE-2020-26300	2024-11-21 14:19	2021-09-9	Show	GitHub Exploit DB Packet Storm

208219	7.5	HIGH Network	hcc-embedded	nichestack_tcp\/ip	The DNS feature in InterNiche NicheStack TCP/IP 4.0.1 is affected by: Out-of-bounds Read. The impact is: a denial of service (remote). The component is: DNS response processing in function: dns_upcal…	CWE-125 Out-of-bounds Read	CVE-2020-25927	2024-11-21 14:19	2021-08-19	Show	GitHub Exploit DB Packet Storm

208220	7.5	HIGH Network	hcc-embedded	nichestack_tcp\/ip	The DNS client in InterNiche NicheStack TCP/IP 4.0.1 is affected by: Insufficient entropy in the DNS transaction id. The impact is: DNS cache poisoning (remote). The component is: dns_query_type(). T…	CWE-331 Insufficient Entropy	CVE-2020-25926	2024-11-21 14:19	2021-08-19	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed