Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 12, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
258671	3.5	注意	オラクル	-	Oracle E-Business Suite の E-Business Intelligence コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0858	2010-05-13 15:10	2010-04-13	Show	GitHub Exploit DB Packet Storm

258672	4.3	警告	オラクル	-	Oracle E-Business Suite の Oracle Transportation Management コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0869	2010-05-13 15:10	2010-04-13	Show	GitHub Exploit DB Packet Storm

258673	4.3	警告	オラクル	-	Oracle E-Business Suite の Oracle Agile Engineering Data Management コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0871	2010-05-13 15:10	2010-04-13	Show	GitHub Exploit DB Packet Storm

258674	4.3	警告	オラクル	-	Oracle E-Business Suite の Oracle Agile Engineering Data Management コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0865	2010-05-13 15:09	2010-04-13	Show	GitHub Exploit DB Packet Storm

258675	5	警告	オラクル	-	Oracle E-Business Suite の Oracle HRMS (Self Service) コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0861	2010-05-13 15:09	2010-04-13	Show	GitHub Exploit DB Packet Storm

258676	7.6	危険	マイクロソフト	-	Internet Explorer において VBScript および Windows Help を使用する際に任意のコードが実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-0483	2010-05-12 15:20	2010-03-2	Show	GitHub Exploit DB Packet Storm

258677	7.1	危険	マイクロソフト	-	Microsoft Windows の kernel における SMB 応答パケットの処理に関するサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2009-3676	2010-05-12 15:20	2009-11-13	Show	GitHub Exploit DB Packet Storm

258678	5.8	警告	オラクル	-	Oracle E-Business Suite の Oracle iStore コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0868	2010-05-12 15:19	2010-04-13	Show	GitHub Exploit DB Packet Storm

258679	6.4	警告	オラクル	-	Oracle E-Business Suite の Oracle Application Object Library コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0859	2010-05-12 15:19	2010-04-13	Show	GitHub Exploit DB Packet Storm

258680	4.3	警告	オラクル	-	Oracle Collaboration Suite の User Interface コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0881	2010-05-12 15:19	2010-04-13	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 12, 2026, 4:20 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
208741	7.5	HIGH Network	jsonparser_project fedoraproject	jsonparser fedora	jsonparser 1.0.0 allows attackers to cause a denial of service (panic: runtime error: slice bounds out of range) via a GET call.	NVD-CWE-noinfo	CVE-2020-35381	2024-11-21 14:27	2020-12-16	Show	GitHub Exploit DB Packet Storm

208742	7.5	HIGH Network	gjson_project	gjson	GJSON before 1.6.4 allows attackers to cause a denial of service via crafted JSON.	NVD-CWE-noinfo	CVE-2020-35380	2024-11-21 14:27	2020-12-16	Show	GitHub Exploit DB Packet Storm

208743	6.1	MEDIUM Network	egavilanmedia	barcodes_generator	EGavilan Barcodes generator 1.0 is affected by: Cross Site Scripting (XSS) via the index.php. An Attacker is able to inject the XSS payload in the web application each time a user visits the website.	CWE-79 Cross-site Scripting	CVE-2020-35396	2024-11-21 14:27	2020-12-16	Show	GitHub Exploit DB Packet Storm

208744	6.1	MEDIUM Network	egavilanmedia	expense_management_system	XSS in the Add Expense Component of EGavilan Media Expense Management System 1.0 allows an attacker to permanently store malicious JavaScript code via the 'description' field	CWE-79 Cross-site Scripting	CVE-2020-35395	2024-11-21 14:27	2020-12-16	Show	GitHub Exploit DB Packet Storm

208745	7.5	HIGH Network	envoyproxy	envoy	Envoy before 1.16.1 mishandles dropped and truncated datagrams, as demonstrated by a segmentation fault for a UDP packet size larger than 1500.	NVD-CWE-noinfo	CVE-2020-35471	2024-11-21 14:27	2020-12-15	Show	GitHub Exploit DB Packet Storm

208746	8.8	HIGH Adjacent	envoyproxy	envoy	Envoy before 1.16.1 logs an incorrect downstream address because it considers only the directly connected peer, not the information in the proxy protocol header. This affects situations with tcp-prox…	NVD-CWE-noinfo	CVE-2020-35470	2024-11-21 14:27	2020-12-15	Show	GitHub Exploit DB Packet Storm

208747	5.3	MEDIUM Network	mpxj oracle	mpxj primavera_unifier	common/InputStreamHelper.java in Packwood MPXJ before 8.3.5 allows directory traversal in the zip stream handler flow, leading to the writing of files to arbitrary locations.	CWE-22 Path Traversal	CVE-2020-35460	2024-11-21 14:27	2020-12-15	Show	GitHub Exploit DB Packet Storm

208748	7.8	HIGH Local	gnome	glib	GNOME GLib before 2.65.3 has an integer overflow, that might lead to an out-of-bounds write, in g_option_group_add_entries. NOTE: the vendor's position is "Realistically this is not a security issue.…	CWE-787 CWE-190 Out-of-bounds Write Integer Overflow or Wraparound	CVE-2020-35457	2024-11-21 14:27	2020-12-15	Show	GitHub Exploit DB Packet Storm

208749	9.8	CRITICAL Network	mobileviewpoint	wireless_multiplex_terminal_playout_server	The Web Administrative Interface in Mobile Viewpoint Wireless Multiplex Terminal (WMT) Playout Server 20.2.8 and earlier has a default account with a password of "pokon."	CWE-798 Use of Hard-coded Credentials	CVE-2020-35338	2024-11-21 14:27	2020-12-15	Show	GitHub Exploit DB Packet Storm

208750	7.2	HIGH Network	classroombookings	classroombookings	SQL Injection in Classbooking before 2.4.1 via the username field of a CSV file when adding a new user.	CWE-89 SQL Injection	CVE-2020-35382	2024-11-21 14:27	2020-12-15	Show	GitHub Exploit DB Packet Storm