Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 3, 2026, 6:08 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
257141 3.5 注意 オラクル - Oracle E-Business Suite の Oracle Workflow Cartridge コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-0857 2010-05-13 15:10 2010-04-13 Show GitHub Exploit DB Packet Storm
257142 3.5 注意 オラクル - Oracle E-Business Suite の E-Business Intelligence コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-0858 2010-05-13 15:10 2010-04-13 Show GitHub Exploit DB Packet Storm
257143 4.3 警告 オラクル - Oracle E-Business Suite の Oracle Transportation Management コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-0869 2010-05-13 15:10 2010-04-13 Show GitHub Exploit DB Packet Storm
257144 4.3 警告 オラクル - Oracle E-Business Suite の Oracle Agile Engineering Data Management コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-0871 2010-05-13 15:10 2010-04-13 Show GitHub Exploit DB Packet Storm
257145 4.3 警告 オラクル - Oracle E-Business Suite の Oracle Agile Engineering Data Management コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-0865 2010-05-13 15:09 2010-04-13 Show GitHub Exploit DB Packet Storm
257146 5 警告 オラクル - Oracle E-Business Suite の Oracle HRMS (Self Service) コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-0861 2010-05-13 15:09 2010-04-13 Show GitHub Exploit DB Packet Storm
257147 7.6 危険 マイクロソフト - Internet Explorer において VBScript および Windows Help を使用する際に任意のコードが実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2010-0483 2010-05-12 15:20 2010-03-2 Show GitHub Exploit DB Packet Storm
257148 7.1 危険 マイクロソフト - Microsoft Windows の kernel における SMB 応答パケットの処理に関するサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他 		CVE-2009-3676 2010-05-12 15:20 2009-11-13 Show GitHub Exploit DB Packet Storm
257149 5.8 警告 オラクル - Oracle E-Business Suite の Oracle iStore コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-0868 2010-05-12 15:19 2010-04-13 Show GitHub Exploit DB Packet Storm
257150 6.4 警告 オラクル - Oracle E-Business Suite の Oracle Application Object Library コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-0859 2010-05-12 15:19 2010-04-13 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 4, 2026, 4:17 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
209161 7.5 HIGH
Network 		airleader airleader_master_control Airleader Master and Easy <= 6.21 devices have default credentials that can be used for a denial of service. CWE-798
 Use of Hard-coded Credentials 		CVE-2020-26509 2024-11-21 14:19 2020-11-17 Show GitHub Exploit DB Packet Storm
209162 9.8 CRITICAL
Network 		canon oce_colorwave_3500_firmware The WebTools component on Canon Oce ColorWave 3500 5.1.1.0 devices allows attackers to retrieve stored SMB credentials via the export feature, even though these are intentionally inaccessible in the … CWE-522
 Insufficiently Protected Credentials 		CVE-2020-26508 2024-11-21 14:19 2020-11-17 Show GitHub Exploit DB Packet Storm
209163 8.8 HIGH
Network 		xstream_project
debian
netapp
apache
oracle 		xstream
debian_linux
snapmanager
activemq
banking_platform
communications_policy_management
banking_virtual_account_management
business_activity_monitoring
retail_xstore_point… 		XStream before version 1.4.14 is vulnerable to Remote Code Execution.The vulnerability may allow a remote attacker to run arbitrary shell commands only by manipulating the processed input stream. Onl… - CVE-2020-26217 2024-11-21 14:19 2020-11-17 Show GitHub Exploit DB Packet Storm
209164 6.5 MEDIUM
Network 		jetbrains ktor In JetBrains Ktor before 1.4.1, HTTP request smuggling was possible. CWE-444
HTTP Request Smuggling 		CVE-2020-26129 2024-11-21 14:19 2020-11-17 Show GitHub Exploit DB Packet Storm
209165 9.8 CRITICAL
Network 		user_registration_\&_login_and_user_management_system_project user_registration_\&_login_and_user_management_system SQL injection vulnerability in PHPGurukul User Registration & Login and User Management System With admin panel 2.1 allows remote attackers to execute arbitrary SQL commands and bypass authentication. CWE-89
SQL Injection 		CVE-2020-25952 2024-11-21 14:19 2020-11-17 Show GitHub Exploit DB Packet Storm
209166 6.5 MEDIUM
Network 		spreecommerce spree Spree is a complete open source e-commerce solution built with Ruby on Rails. In Spree from version 3.7 and before versions 3.7.13, 4.0.5, and 4.1.12, there is an authorization bypass vulnerability. … - CVE-2020-26223 2024-11-21 14:19 2020-11-14 Show GitHub Exploit DB Packet Storm
209167 5.3 MEDIUM
Network 		radarcovid radar-covid-backend-dp3t-server
radarcovid 		Radar COVID is the official COVID-19 exposure notification app for Spain. In affected versions of Radar COVID, identification and de-anonymization of COVID-19 positive users that upload Radar COVID T… - CVE-2020-26230 2024-11-21 14:19 2020-11-14 Show GitHub Exploit DB Packet Storm
209168 8.8 HIGH
Network 		dependabot_project dependabot Dependabot is a set of packages for automated dependency management for Ruby, JavaScript, Python, PHP, Elixir, Rust, Java, .NET, Elm and Go. In Dependabot-Core from version 0.119.0.beta1 before versi… - CVE-2020-26222 2024-11-21 14:19 2020-11-14 Show GitHub Exploit DB Packet Storm
209169 6.1 MEDIUM
Network 		touchbase.ai_project touchbase.ai touchbase.ai before version 2.0 is vulnerable to Cross-Site Scripting (XSS). The vulnerability allows an attacker to send malicious JavaScript code which could result in hijacking of the user's cooki… - CVE-2020-26221 2024-11-21 14:19 2020-11-12 Show GitHub Exploit DB Packet Storm
209170 3.5 LOW
Network 		touchbase.ai_project touchbase.ai toucbase.ai before version 2.0 leaks information by not stripping exif data from images. Anyone with access to the uploaded image of other users could obtain its geolocation, device, and software ver… - CVE-2020-26220 2024-11-21 14:19 2020-11-12 Show GitHub Exploit DB Packet Storm