Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":July 1, 2026, 4:01 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
259521 5.5 警告 オラクル - Oracle PeopleSoft and JDEdwards Suite の PeopleSoft Enterprise HRMS コンポーネントにおける脆弱性 CWE-noinfo
情報不足
CVE-2010-4441 2011-02-15 14:24 2011-01-18 Show GitHub Exploit DB Packet Storm
259522 5.5 警告 オラクル - Oracle PeopleSoft and JDEdwards Suite の PeopleSoft Enterprise CRM コンポーネントにおける脆弱性 CWE-noinfo
情報不足
CVE-2010-4419 2011-02-15 14:22 2011-01-18 Show GitHub Exploit DB Packet Storm
259523 7.5 危険 オラクル - Oracle PeopleSoft and JDEdwards Suite の PeopleSoft Enterprise PeopleTools コンポーネントにおける脆弱性 CWE-noinfo
情報不足
CVE-2010-4418 2011-02-15 14:19 2011-01-18 Show GitHub Exploit DB Packet Storm
259524 3.5 注意 オラクル - Oracle Supply Chain Products Suite の Oracle Transportation Manager コンポーネントにおける脆弱性 CWE-noinfo
情報不足
CVE-2010-4432 2011-02-15 14:01 2011-01-18 Show GitHub Exploit DB Packet Storm
259525 3.5 注意 オラクル - Oracle Supply Chain Products Suite の Agile Core コンポーネントにおける脆弱性 CWE-noinfo
情報不足
CVE-2010-4429 2011-02-15 13:57 2011-01-18 Show GitHub Exploit DB Packet Storm
259526 3.5 注意 オラクル - Oracle Supply Chain Products Suite の Agile Core コンポーネントにおける脆弱性 CWE-noinfo
情報不足
CVE-2010-3505 2011-02-15 13:55 2011-01-18 Show GitHub Exploit DB Packet Storm
259527 - - オラクル - Oracle WebLogic Node Manager に脆弱性 - - 2011-02-14 15:26 2010-10-13 Show GitHub Exploit DB Packet Storm
259528 4 警告 オラクル - Oracle Applications の Oracle Application Object Library コンポーネントにおける脆弱性 CWE-noinfo
情報不足
CVE-2010-3589 2011-02-14 15:25 2011-01-18 Show GitHub Exploit DB Packet Storm
259529 4.3 警告 オラクル - Oracle Applications の Oracle Common Applications コンポーネントにおける脆弱性 CWE-noinfo
情報不足
CVE-2010-3587 2011-02-14 15:25 2011-01-18 Show GitHub Exploit DB Packet Storm
259530 6.4 警告 オラクル - Oracle Enterprise Manager Grid Control の Real User Experience Insight コンポーネントにおける脆弱性 CWE-noinfo
情報不足
CVE-2010-3594 2011-02-14 15:24 2011-01-18 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:July 1, 2026, 4:27 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
209591 6.1 MEDIUM
Network
sixapart movable_type Cross-site scripting vulnerability in Movable Type series (Movable Type 7 r.4603 and earlier (Movable Type 7), Movable Type 6.5.2 and earlier (Movable Type 6.5), Movable Type Advanced 7 r.4603 and ea… CWE-79
Cross-site Scripting
CVE-2020-5528 2024-11-21 14:34 2020-02-6 Show GitHub Exploit DB Packet Storm
209592 5.9 MEDIUM
Network
fujixerox apeosware_management_suite The AWMS Mobile App for Android 2.0.0 to 2.0.5 and for iOS 2.0.0 to 2.0.8 does not verify X.509 certificates from servers, which allows man-in-the-middle attackers to spoof servers and obtain sensiti… CWE-295
Improper Certificate Validation 
CVE-2020-5526 2024-11-21 14:34 2020-01-31 Show GitHub Exploit DB Packet Storm
209593 7.4 HIGH
Network
nttdata
ashikagabank
sihd-bk
shikokubank
tohoku-bank
naganobank
77bank
hokkaidobank
hokugin
mypallete
ashigin
ikeda_senshu_bank
shikoku_bank
tougin
nagagin
77_bank
dogin
hokuriku_bank_portal
Android App 'MyPallete' and some of the Android banking applications based on 'MyPallete' do not verify X.509 certificates from servers, and also do not properly validate certificates with host-misma… CWE-295
Improper Certificate Validation 
CVE-2020-5523 2024-11-21 14:34 2020-01-28 Show GitHub Exploit DB Packet Storm
209594 7.4 HIGH
Network
fujixerox easy_netprint The kantan netprint App for Android 2.0.3 and earlier does not verify X.509 certificates from servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a… CWE-295
Improper Certificate Validation 
CVE-2020-5522 2024-11-21 14:34 2020-01-27 Show GitHub Exploit DB Packet Storm
209595 7.4 HIGH
Network
fujixerox easy_netprint The kantan netprint App for iOS 2.0.2 and earlier does not verify X.509 certificates from servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a cra… CWE-295
Improper Certificate Validation 
CVE-2020-5521 2024-11-21 14:34 2020-01-27 Show GitHub Exploit DB Packet Storm
209596 7.4 HIGH
Network
fujixerox netprint The netprint App for iOS 3.2.3 and earlier does not verify X.509 certificates from servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted ce… CWE-295
Improper Certificate Validation 
CVE-2020-5520 2024-11-21 14:34 2020-01-27 Show GitHub Exploit DB Packet Storm
209597 7.9 HIGH
Adjacent
philips hue_bridge_v2_firmware Philips Hue Bridge model 2.X prior to and including version 1935144020 contains a Heap-based Buffer Overflow when handling a long ZCL string during the commissioning phase, resulting in a remote code… CWE-787
 Out-of-bounds Write
CVE-2020-6007 2024-11-21 14:34 2020-01-24 Show GitHub Exploit DB Packet Storm
209598 5.3 MEDIUM
Network
vmware
oracle
spring_framework
flexcube_private_banking
insurance_policy_administration_j2ee
insurance_rules_palette
retail_service_backbone
retail_back_office
weblogic_server
application_test…
Spring Framework, versions 5.2.x prior to 5.2.3 are vulnerable to CSRF attacks through CORS preflight requests that target Spring MVC (spring-webmvc module) or Spring WebFlux (spring-webflux module) … CWE-352
 Origin Validation Error
CVE-2020-5397 2024-11-21 14:34 2020-01-18 Show GitHub Exploit DB Packet Storm
209599 7.5 HIGH
Network
vmware
oracle
netapp
spring_framework
flexcube_private_banking
insurance_policy_administration_j2ee
insurance_rules_palette
retail_service_backbone
retail_back_office
weblogic_server
application_test…
In Spring Framework, versions 5.2.x prior to 5.2.3, versions 5.1.x prior to 5.1.13, and versions 5.0.x prior to 5.0.16, an application is vulnerable to a reflected file download (RFD) attack when it … CWE-494
 Download of Code Without Integrity Check
CVE-2020-5398 2024-11-21 14:34 2020-01-17 Show GitHub Exploit DB Packet Storm
209600 6.5 MEDIUM
Network
phpbb phpbb phpBB 3.2.8 allows a CSRF attack that can approve pending group memberships. CWE-352
 Origin Validation Error
CVE-2020-5502 2024-11-21 14:34 2020-01-15 Show GitHub Exploit DB Packet Storm