Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 15, 2026, 12:08 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
258511	3.5	注意	オラクル	-	Oracle Fusion Middleware の Application Server Control コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-2381	2010-07-30 17:43	2010-07-13	Show	GitHub Exploit DB Packet Storm

258512	3.5	注意	オラクル	-	Oracle Fusion Middleware の Application Server Control コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0081	2010-07-30 17:42	2010-07-13	Show	GitHub Exploit DB Packet Storm

258513	4.3	警告	オラクル	-	Oracle Fusion Middleware の Wireless コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0835	2010-07-30 17:42	2010-07-13	Show	GitHub Exploit DB Packet Storm

258514	6.4	警告	オラクル	-	Oracle Fusion Middleware の WebLogic Server コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-2375	2010-07-30 17:42	2010-07-13	Show	GitHub Exploit DB Packet Storm

258515	9.3	危険	マイクロソフト	-	Microsoft Office Outlook における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-0266	2010-07-30 17:42	2010-07-13	Show	GitHub Exploit DB Packet Storm

258516	9.3	危険	マイクロソフト	-	Microsoft Office Access の FieldList の ActiveX コントロールにおける任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-1881	2010-07-30 17:41	2010-07-13	Show	GitHub Exploit DB Packet Storm

258517	9.3	危険	マイクロソフト	-	Microsoft Office Access の Microsoft Access Wizard Controls における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-0814	2010-07-30 17:41	2010-07-13	Show	GitHub Exploit DB Packet Storm

258518	2.1	注意	日立 CA Technologies	-	Windows 上で稼働する CA ARCserve Backup における重要な情報を取得される脆弱性	CWE-noinfo 情報不足	CVE-2010-2157	2010-07-29 18:57	2010-06-3	Show	GitHub Exploit DB Packet Storm

258519	3.5	注意	ターボリナックス Samba Project	-	Samba の smbd におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2010-0926	2010-07-29 18:57	2010-02-24	Show	GitHub Exploit DB Packet Storm

258520	4.3	警告	サイバートラスト株式会社 LibTIFF レッドハット	-	LibTIFF の TIFFVStripSize 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2010-2597	2010-07-28 19:31	2010-07-2	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 15, 2026, 4:10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
211081	6.1	MEDIUM Network	os4ed	opensis	OpenSIS Community Edition before 7.5 is affected by a cross-site scripting (XSS) vulnerability in SideForStudent.php via the modname parameter.	CWE-79 Cross-site Scripting	CVE-2020-27409	2024-11-21 14:21	2020-12-5	Show	GitHub Exploit DB Packet Storm

211082	7.5	HIGH Network	os4ed	opensis	OpenSIS Community Edition through 7.6 is affected by incorrect access controls for the file ResetUserInfo.php that allow an unauthenticated attacker to change the password of arbitrary users.	CWE-287 CWE-640 Improper Authentication Weak Password Recovery Mechanism for Forgotten Password	CVE-2020-27408	2024-11-21 14:21	2020-12-5	Show	GitHub Exploit DB Packet Storm

211083	3.3	LOW Local	imagemagick redhat debian	imagemagick enterprise_linux debian_linux	In RestoreMSCWarning() of /coders/pdf.c there are several areas where calls to GetPixelIndex() could result in values outside the range of representable for the unsigned char type. The patch casts th…	CWE-190 Integer Overflow or Wraparound	CVE-2020-27771	2024-11-21 14:21	2020-12-5	Show	GitHub Exploit DB Packet Storm

211084	5.5	MEDIUM Local	imagemagick debian	imagemagick debian_linux	Due to a missing check for 0 value of `replace_extent`, it is possible for offset `p` to overflow in SubstituteString(), causing potential impact to application availability. This could be triggered …	CWE-190 Integer Overflow or Wraparound	CVE-2020-27770	2024-11-21 14:21	2020-12-5	Show	GitHub Exploit DB Packet Storm

211085	7.8	HIGH Local	imagemagick debian	imagemagick debian_linux	A flaw was found in ImageMagick in MagickCore/statistic.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of values outside the r…	CWE-190 Integer Overflow or Wraparound	CVE-2020-27766	2024-11-21 14:21	2020-12-5	Show	GitHub Exploit DB Packet Storm

211086	3.3	LOW Local	imagemagick redhat debian	imagemagick enterprise_linux debian_linux	A flaw was found in ImageMagick in MagickCore/segment.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of math division by zero.…	CWE-369 Divide By Zero	CVE-2020-27765	2024-11-21 14:21	2020-12-5	Show	GitHub Exploit DB Packet Storm

211087	3.3	LOW Local	imagemagick redhat debian	imagemagick enterprise_linux debian_linux	A flaw was found in ImageMagick in MagickCore/quantum.h. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of values outside the ran…	CWE-190 Integer Overflow or Wraparound	CVE-2020-27767	2024-11-21 14:21	2020-12-5	Show	GitHub Exploit DB Packet Storm

211088	6.8	MEDIUM Local	canonical	snapcraft ubuntu_linux	In some conditions, a snap package built by snapcraft includes the current directory in LD_LIBRARY_PATH, allowing a malicious snap to gain code execution within the context of another snap if both pl…	CWE-427 Uncontrolled Search Path Element	CVE-2020-27348	2024-11-21 14:21	2020-12-4	Show	GitHub Exploit DB Packet Storm

211089	6.1	MEDIUM Network	lxml redhat debian fedoraproject netapp oracle	lxml enterprise_linux software_collections debian_linux fedora snapcenter communications_offline_mediation_controller zfs_storage_appliance_kit	A XSS vulnerability was discovered in python-lxml's clean module. The module's parser didn't properly imitate browsers, which caused different behaviors between the sanitizer and the user's page. A r…	-	CVE-2020-27783	2024-11-21 14:21	2020-12-4	Show	GitHub Exploit DB Packet Storm

211090	7.5	HIGH Network	freedesktop redhat debian	poppler enterprise_linux debian_linux	A flaw was found in Poppler in the way certain PDF files were converted into HTML. A remote attacker could exploit this flaw by providing a malicious PDF file that, when processed by the 'pdftohtml' …	CWE-824 Access of Uninitialized Pointer	CVE-2020-27778	2024-11-21 14:21	2020-12-4	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed