Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 12, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
258661	4.3	警告	オラクル	-	Oracle Industry Product Suite の Retail - Oracle Retail Place In-Season コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0864	2010-05-13 15:13	2010-04-13	Show	GitHub Exploit DB Packet Storm

258662	4.3	警告	オラクル	-	Oracle Industry Product Suite の Retail - Oracle Retail Markdown Optimization コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0862	2010-05-13 15:13	2010-04-13	Show	GitHub Exploit DB Packet Storm

258663	4.3	警告	オラクル	-	Oracle Industry Product Suite の Life Sciences - Oracle Thesaurus Management System コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0875	2010-05-13 15:12	2010-04-13	Show	GitHub Exploit DB Packet Storm

258664	4.3	警告	オラクル	-	Oracle Industry Product Suite の Life Sciences - Oracle Clinical Remote Data Capture Option コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0876	2010-05-13 15:12	2010-04-13	Show	GitHub Exploit DB Packet Storm

258665	4.3	警告	オラクル	-	Oracle Industry Product Suite の Communications - Oracle Communications Unified Inventory Management コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0874	2010-05-13 15:12	2010-04-13	Show	GitHub Exploit DB Packet Storm

258666	4	警告	オラクル	-	複数の Oracle 製品の PeopleTools コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0879	2010-05-13 15:12	2010-04-13	Show	GitHub Exploit DB Packet Storm

258667	4	警告	オラクル	-	複数の Oracle 製品の PeopleTools コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0878	2010-05-13 15:11	2010-04-13	Show	GitHub Exploit DB Packet Storm

258668	5	警告	オラクル	-	複数の Oracle 製品の PeopleTools コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0877	2010-05-13 15:11	2010-04-13	Show	GitHub Exploit DB Packet Storm

258669	4	警告	オラクル	-	複数の Oracle 製品の PeopleTools コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0880	2010-05-13 15:11	2010-04-13	Show	GitHub Exploit DB Packet Storm

258670	3.5	注意	オラクル	-	Oracle E-Business Suite の Oracle Workflow Cartridge コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0857	2010-05-13 15:10	2010-04-13	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 12, 2026, 4:20 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
219851	8.8	HIGH Network	onthegosystems	sitepress-multilingual-cms	The sitepress-multilingual-cms (WPML) plugin before 4.3.7-b.2 for WordPress has CSRF due to a loose comparison. This leads to remote code execution in includes/class-wp-installer.php via a series of …	CWE-352 Origin Validation Error	CVE-2020-10568	2024-11-21 13:55	2020-03-14	Show	GitHub Exploit DB Packet Storm

219852	9.8	CRITICAL Network	tecrail	responsive_filemanager	An issue was discovered in Responsive Filemanager through 9.14.0. In the ajax_calls.php file in the save_img action in the name parameter, there is no validation of what kind of extension is sent. Th…	CWE-20 Improper Input Validation	CVE-2020-10567	2024-11-21 13:55	2020-03-14	Show	GitHub Exploit DB Packet Storm

219853	7.8	HIGH Local	freebsd	freebsd	grub2-bhyve, as used in FreeBSD bhyve before revision 525916 2020-02-12, mishandles font loading by a guest through a grub2.cfg file, leading to a buffer overflow.	CWE-120 Classic Buffer Overflow	CVE-2020-10566	2024-11-21 13:55	2020-03-14	Show	GitHub Exploit DB Packet Storm

219854	7.8	HIGH Local	freebsd	freebsd	grub2-bhyve, as used in FreeBSD bhyve before revision 525916 2020-02-12, does not validate the address provided as part of a memrw command (read_* or write_*) by a guest through a grub2.cfg file. Thi…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2020-10565	2024-11-21 13:55	2020-03-14	Show	GitHub Exploit DB Packet Storm

219855	9.8	CRITICAL Network	iptanus	wordpress_file_upload	An issue was discovered in the File Upload plugin before 4.13.0 for WordPress. A directory traversal can lead to remote code execution by uploading a crafted txt file into the lib directory, because …	CWE-22 Path Traversal	CVE-2020-10564	2024-11-21 13:55	2020-03-14	Show	GitHub Exploit DB Packet Storm

219856	9.8	CRITICAL Network	devome	grr	An issue was discovered in DEVOME GRR before 3.4.1c. frmcontactlist.php mishandles a SQL query.	CWE-89 SQL Injection	CVE-2020-10563	2024-11-21 13:55	2020-03-14	Show	GitHub Exploit DB Packet Storm

219857	7.2	HIGH Network	devome	grr	An issue was discovered in DEVOME GRR before 3.4.1c. admin_edit_room.php mishandles file uploads.	CWE-434 Unrestricted Upload of File with Dangerous Type	CVE-2020-10562	2024-11-21 13:55	2020-03-14	Show	GitHub Exploit DB Packet Storm

219858	6.1	MEDIUM Network	primetek	primefaces	An XSS issue was discovered in tooltip/tooltip.js in PrimeTek PrimeFaces 7.0.11. In a web application using PrimeFaces, an attacker can provide JavaScript code in an input field whose data is later u…	CWE-79 Cross-site Scripting	CVE-2020-10544	2024-11-21 13:55	2020-03-14	Show	GitHub Exploit DB Packet Storm

219859	9.8	CRITICAL Network	zohocorp	manageengine_opmanager	Zoho ManageEngine OpManager before 12.4.179 allows remote code execution via a specially crafted Mail Server Settings v1 API request. This was fixed in 12.5.108.	NVD-CWE-noinfo	CVE-2020-10541	2024-11-21 13:55	2020-03-13	Show	GitHub Exploit DB Packet Storm

219860	8.8	HIGH Network	untis	webuntis	Untis WebUntis before 2020.9.6 allows CSRF for certain combinations of rights and modules.	CWE-352 Origin Validation Error	CVE-2020-10540	2024-11-21 13:55	2020-03-13	Show	GitHub Exploit DB Packet Storm