Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 28, 2026, 4:09 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
256751 5 警告 オラクル - Oracle Fusion Middleware の Portal コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-0856 2010-05-12 15:18 2010-04-13 Show GitHub Exploit DB Packet Storm
256752 5 警告 オラクル - Oracle Fusion Middleware の Oracle Internet Directory コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-0872 2010-05-12 15:18 2010-04-13 Show GitHub Exploit DB Packet Storm
256753 2.1 注意 オラクル - Oracle Database の Audit コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-0854 2010-05-12 15:18 2010-04-13 Show GitHub Exploit DB Packet Storm
256754 3.6 注意 オラクル - Oracle Database の Change Data Capture コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-0870 2010-05-12 15:18 2010-04-13 Show GitHub Exploit DB Packet Storm
256755 4 警告 オラクル - Oracle Database の XML DB コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-0851 2010-05-12 15:17 2010-04-13 Show GitHub Exploit DB Packet Storm
256756 4 警告 オラクル - Oracle Database の JavaVM コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-0867 2010-05-12 15:17 2010-04-13 Show GitHub Exploit DB Packet Storm
256757 5.5 警告 オラクル - Oracle Database の XML DB コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-0852 2010-05-12 15:17 2010-04-13 Show GitHub Exploit DB Packet Storm
256758 6.5 警告 オラクル - Oracle Database の JavaVM コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-0866 2010-05-12 15:17 2010-04-13 Show GitHub Exploit DB Packet Storm
256759 7.1 危険 オラクル - Oracle Database の Core RDBMS コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-0860 2010-05-12 15:16 2010-04-13 Show GitHub Exploit DB Packet Storm
256760 7.5 危険 オラクル - 複数の Oracle 製品の Oracle Internet Directory コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-0853 2010-05-12 15:16 2010-04-13 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
214461 6.1 MEDIUM
Network 		collaboraoffice collabora_online_development_edition The WOPI API integration for Vereign Collabora CODE through 4.2.2 does not properly restrict delivery of JavaScript to a victim's browser, and lacks proper MIME type access control, which could lead … CWE-79
Cross-site Scripting 		CVE-2020-12432 2024-11-21 13:59 2020-07-21 Show GitHub Exploit DB Packet Storm
214462 7.8 HIGH
Local 		rockwellautomation factorytalk_view In all versions of FactoryTalk View SE, after bypassing memory corruption mechanisms found in the operating system, a local, authenticated attacker may corrupt the associated memory space allowing fo… CWE-787
 Out-of-bounds Write 		CVE-2020-12031 2024-11-21 13:59 2020-07-21 Show GitHub Exploit DB Packet Storm
214463 8.1 HIGH
Network 		rockwellautomation factorytalk_view In all versions of FactoryTalk View SEA remote, an authenticated attacker may be able to utilize certain handlers to interact with the data on the remote endpoint since those handlers do not enforce … CWE-306
Missing Authentication for Critical Function 		CVE-2020-12028 2024-11-21 13:59 2020-07-21 Show GitHub Exploit DB Packet Storm
214464 4.3 MEDIUM
Network 		rockwellautomation factorytalk_view All versions of FactoryTalk View SE disclose the hostnames and file paths for certain files within the system. A remote, authenticated attacker may be able to leverage this information for reconnaiss… NVD-CWE-noinfo
CVE-2020-12027 2024-11-21 13:59 2020-07-21 Show GitHub Exploit DB Packet Storm
214465 7.8 HIGH
Local 		rockwellautomation factorytalk_view All versions of FactoryTalk View SE do not properly validate input of filenames within a project directory. A remote, unauthenticated attacker may be able to execute a crafted file on a remote endpoi… - CVE-2020-12029 2024-11-21 13:59 2020-07-21 Show GitHub Exploit DB Packet Storm
214466 5.4 MEDIUM
Network 		apache airflow An issue was found in Apache Airflow versions 1.10.10 and below. It was discovered that many of the admin management screens in the new/RBAC UI handled escaping incorrectly, allowing authenticated us… CWE-79
Cross-site Scripting 		CVE-2020-11983 2024-11-21 13:59 2020-07-17 Show GitHub Exploit DB Packet Storm
214467 9.8 CRITICAL
Network 		apache airflow An issue was found in Apache Airflow versions 1.10.10 and below. When using CeleryExecutor, if an attack can connect to the broker (Redis, RabbitMQ) directly, it was possible to insert a malicious pa… CWE-502
 Deserialization of Untrusted Data 		CVE-2020-11982 2024-11-21 13:59 2020-07-17 Show GitHub Exploit DB Packet Storm
214468 9.8 CRITICAL
Network 		apache airflow An issue was found in Apache Airflow versions 1.10.10 and below. When using CeleryExecutor, if an attacker can connect to the broker (Redis, RabbitMQ) directly, it is possible to inject commands, res… CWE-78
OS Command  		CVE-2020-11981 2024-11-21 13:59 2020-07-17 Show GitHub Exploit DB Packet Storm
214469 7.5 HIGH
Network 		mitsubishielectric
iconics 		mc_works32
mc_works
mobilehmi
facility_analytix
quality_analytix
smart_energy_analytix
energy_analytix
genesis64
hyper_historian
genesis32
bizviz 		A specially crafted communication packet sent to the affected systems could cause a denial-of-service condition due to improper deserialization. This issue affects: Mitsubishi Electric MC Works64 ver… CWE-502
 Deserialization of Untrusted Data 		CVE-2020-12015 2024-11-21 13:59 2020-07-17 Show GitHub Exploit DB Packet Storm
214470 9.1 CRITICAL
Network 		mitsubishielectric
iconics 		mc_works32
mc_works64
mobilehmi
facility_analytix
quality_analytix
smart_energy_analytix
energy_analytix
genesis64
hyper_historian
genesis32
bizviz 		A specially crafted WCF client that interfaces to the may allow the execution of certain arbitrary SQL commands remotely. This affects: Mitsubishi Electric MC Works64 Version 4.02C (10.95.208.31) and… CWE-89
SQL Injection 		CVE-2020-12013 2024-11-21 13:59 2020-07-17 Show GitHub Exploit DB Packet Storm