Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 28, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
256731 4.3 警告 オラクル - Oracle Industry Product Suite の Life Sciences - Oracle Thesaurus Management System コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-0875 2010-05-13 15:12 2010-04-13 Show GitHub Exploit DB Packet Storm
256732 4.3 警告 オラクル - Oracle Industry Product Suite の Life Sciences - Oracle Clinical Remote Data Capture Option コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-0876 2010-05-13 15:12 2010-04-13 Show GitHub Exploit DB Packet Storm
256733 4.3 警告 オラクル - Oracle Industry Product Suite の Communications - Oracle Communications Unified Inventory Management コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-0874 2010-05-13 15:12 2010-04-13 Show GitHub Exploit DB Packet Storm
256734 4 警告 オラクル - 複数の Oracle 製品の PeopleTools コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-0879 2010-05-13 15:12 2010-04-13 Show GitHub Exploit DB Packet Storm
256735 4 警告 オラクル - 複数の Oracle 製品の PeopleTools コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-0878 2010-05-13 15:11 2010-04-13 Show GitHub Exploit DB Packet Storm
256736 5 警告 オラクル - 複数の Oracle 製品の PeopleTools コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-0877 2010-05-13 15:11 2010-04-13 Show GitHub Exploit DB Packet Storm
256737 4 警告 オラクル - 複数の Oracle 製品の PeopleTools コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-0880 2010-05-13 15:11 2010-04-13 Show GitHub Exploit DB Packet Storm
256738 3.5 注意 オラクル - Oracle E-Business Suite の Oracle Workflow Cartridge コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-0857 2010-05-13 15:10 2010-04-13 Show GitHub Exploit DB Packet Storm
256739 3.5 注意 オラクル - Oracle E-Business Suite の E-Business Intelligence コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-0858 2010-05-13 15:10 2010-04-13 Show GitHub Exploit DB Packet Storm
256740 4.3 警告 オラクル - Oracle E-Business Suite の Oracle Transportation Management コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-0869 2010-05-13 15:10 2010-04-13 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
200951 9.8 CRITICAL
Network 		emerson openenterprise_scada_server A Heap-based Buffer Overflow was found in Emerson OpenEnterprise SCADA Server 2.83 (if Modbus or ROC Interfaces have been installed and are in use) and all versions of OpenEnterprise 3.1 through 3.3.… CWE-787
 Out-of-bounds Write 		CVE-2020-6970 2024-11-21 14:36 2020-02-20 Show GitHub Exploit DB Packet Storm
200952 6.1 MEDIUM
Network 		topmanage olk_webstore An issue was discovered in TopManage OLK 2020. As there is no ReadOnly on the Session cookie, the user and admin accounts can be taken over in a DOM-Based XSS attack. CWE-79
Cross-site Scripting 		CVE-2020-6845 2024-11-21 14:36 2020-02-19 Show GitHub Exploit DB Packet Storm
200953 8.8 HIGH
Network 		topmanage olk_webstore In TopManage OLK 2020, login CSRF can be chained with another vulnerability in order to takeover admin and user accounts. CWE-352
 Origin Validation Error 		CVE-2020-6844 2024-11-21 14:36 2020-02-19 Show GitHub Exploit DB Packet Storm
200954 6.1 MEDIUM
Network 		miniorange saml_sp_single_sign_on Utilities.php in the miniorange-saml-20-single-sign-on plugin before 4.8.84 for WordPress allows XSS via a crafted SAML XML Response to wp-login.php. This is related to the SAMLResponse and RelayStat… CWE-79
Cross-site Scripting 		CVE-2020-6850 2024-11-21 14:36 2020-02-18 Show GitHub Exploit DB Packet Storm
200955 5.5 MEDIUM
Local 		mcafee data_exchange_layer Unquoted service executable path in DXL Broker in McAfee Data eXchange Layer (DXL) Framework 6.0.0 and earlier allows local users to cause a denial of service and malicious file execution via careful… CWE-428
 Unquoted Search Path or Element 		CVE-2020-7252 2024-11-21 14:36 2020-02-17 Show GitHub Exploit DB Packet Storm
200956 5.4 MEDIUM
Network 		codologic codoforum Codologic Codoforum through 4.8.4 allows a DOM-based XSS. While creating a new topic as a normal user, it is possible to add a poll that is automatically loaded in the DOM once the thread/topic is op… CWE-79
CWE-732
Cross-site Scripting
 Incorrect Permission Assignment for Critical Resource 		CVE-2020-7050 2024-11-21 14:36 2020-02-16 Show GitHub Exploit DB Packet Storm
200957 5.5 MEDIUM
Local 		mcafee endpoint_security Improper access control vulnerability in Configuration Tool in McAfee Mcafee Endpoint Security (ENS) Prior to 10.6.1 February 2020 Update allows local users to disable security features via unauthori… CWE-863
 Incorrect Authorization 		CVE-2020-7251 2024-11-21 14:36 2020-02-15 Show GitHub Exploit DB Packet Storm
200958 6.1 MEDIUM
Network 		codologic codoforum Codologic Codoforum through 4.8.4 allows stored XSS in the login area. This is relevant in conjunction with CVE-2020-5842 because session cookies lack the HttpOnly flag. The impact is account takeove… CWE-79
CWE-732
Cross-site Scripting
 Incorrect Permission Assignment for Critical Resource 		CVE-2020-7051 2024-11-21 14:36 2020-02-14 Show GitHub Exploit DB Packet Storm
200959 9.8 CRITICAL
Network 		hp linuxki LinuxKI v6.0-1 and earlier is vulnerable to an remote code execution which is resolved in release 6.0-2. NVD-CWE-noinfo
CVE-2020-7209 2024-11-21 14:36 2020-02-13 Show GitHub Exploit DB Packet Storm
200960 6.1 MEDIUM
Network 		hp linuxki LinuxKI v6.0-1 and earlier is vulnerable to an XSS which is resolved in release 6.0-2. CWE-79
Cross-site Scripting 		CVE-2020-7208 2024-11-21 14:36 2020-02-13 Show GitHub Exploit DB Packet Storm