Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 27, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
260831	3.5	注意	Drupal サイバートラスト株式会社	-	Drupal の Menu モジュールにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-4370	2010-02-2 11:43	2009-12-16	Show	GitHub Exploit DB Packet Storm

260832	3.5	注意	Drupal サイバートラスト株式会社	-	Drupal の Contact モジュールにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-4369	2010-02-2 11:42	2009-12-16	Show	GitHub Exploit DB Packet Storm

260833	7.5	危険	日立	-	Cosminexus、Processing Kit for XML および Hitachi Developer's Kit for Java におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	-	2010-02-2 11:42	2009-12-22	Show	GitHub Exploit DB Packet Storm

260834	4.3	警告	VMware	-	複数の VMware 製品におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-3731	2010-02-1 11:52	2009-12-15	Show	GitHub Exploit DB Packet Storm

260835	10	危険	サイバートラスト株式会社 Linux	-	Linux kernel および gxsnmp パッケージの asn1 の実装における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2008-1673	2010-02-1 11:51	2008-06-10	Show	GitHub Exploit DB Packet Storm

260836	10	危険	ヒューレット・パッカード	-	複数の Symantec 製品の VRTSweb における任意のコードを実行される脆弱性	CWE-287 不適切な認証	CVE-2009-3027	2010-02-1 11:51	2009-12-8	Show	GitHub Exploit DB Packet Storm

260837	9.3	危険	KDE project Glyph & Cog, LLC GNOME Project サイバートラスト株式会社レッドハット	-	Xpdf、gpdf および kpdf の FoFiType1::parse 関数における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2009-4035	2010-01-29 09:54	2009-12-16	Show	GitHub Exploit DB Packet Storm

260838	7.8	危険	Mozilla Foundation	-	Mozilla Firefox/SeaMonkey の GeckoActiveXObject 関数における重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2009-3987	2010-01-29 09:54	2009-12-15	Show	GitHub Exploit DB Packet Storm

260839	7.6	危険	サイバートラスト株式会社 Mozilla Foundation レッドハット	-	Mozilla Firefox/SeaMonkey における任意の JavaScript を実行される脆弱性	CWE-94 コード・インジェクション	CVE-2009-3986	2010-01-29 09:54	2009-12-15	Show	GitHub Exploit DB Packet Storm

260840	6.8	警告	サイバートラスト株式会社 Mozilla Foundation レッドハット	-	Mozilla Firefox/SeaMonkey におけるコンテンツを偽装される脆弱性	CWE-Other その他	CVE-2009-3985	2010-01-29 09:53	2009-12-15	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 27, 2026, 4:35 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
219921	4.7	MEDIUM Network	oracle	crm_technical_foundation	Vulnerability in the Oracle CRM Technical Foundation product of Oracle E-Business Suite (component: Preferences). Supported versions that are affected are 12.1.3 and 12.2.3-12.2.9. Easily exploitable…	NVD-CWE-noinfo	CVE-2020-14659	2024-11-21 14:03	2020-07-16	Show	GitHub Exploit DB Packet Storm

219922	9.1	CRITICAL Network	oracle	marketing	Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Marketing Administration). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.9. Easily exploi…	NVD-CWE-noinfo	CVE-2020-14658	2024-11-21 14:03	2020-07-16	Show	GitHub Exploit DB Packet Storm

219923	7.6	HIGH Network	oracle	crm_technical_foundation	Vulnerability in the Oracle CRM Technical Foundation product of Oracle E-Business Suite (component: Preferences). Supported versions that are affected are 12.1.3 and 12.2.3-12.2.9. Easily exploitable…	NVD-CWE-noinfo	CVE-2020-14657	2024-11-21 14:03	2020-07-16	Show	GitHub Exploit DB Packet Storm

219924	4.9	MEDIUM Network	netapp canonical oracle	snapcenter oncommand_workflow_automation oncommand_insight active_iq_unified_manager ubuntu_linux mysql	Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Locking). Supported versions that are affected are 8.0.20 and prior. Easily exploitable vulnerability allows high privile…	NVD-CWE-noinfo	CVE-2020-14656	2024-11-21 14:03	2020-07-16	Show	GitHub Exploit DB Packet Storm

219925	6.5	MEDIUM Network	oracle	security_service	Vulnerability in the Oracle Security Service product of Oracle Fusion Middleware (component: SSL API). Supported versions that are affected are 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0. Difficult to exp…	NVD-CWE-noinfo	CVE-2020-14655	2024-11-21 14:03	2020-07-16	Show	GitHub Exploit DB Packet Storm

219926	4.9	MEDIUM Network	netapp canonical oracle	snapcenter oncommand_workflow_automation oncommand_insight active_iq_unified_manager ubuntu_linux mysql	Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.20 and prior. Easily exploitable vulnerability allows high privi…	NVD-CWE-noinfo	CVE-2020-14654	2024-11-21 14:03	2020-07-16	Show	GitHub Exploit DB Packet Storm

219927	5.4	MEDIUM Network	oracle	primavera_p6_enterprise_project_portfolio_management	Vulnerability in the Primavera P6 Enterprise Project Portfolio Management product of Oracle Construction and Engineering (component: Web Access). Supported versions that are affected are 16.1.0.0-16.…	NVD-CWE-noinfo	CVE-2020-14653	2024-11-21 14:03	2020-07-16	Show	GitHub Exploit DB Packet Storm

219928	6.5	MEDIUM Network	oracle	weblogic_server	Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0…	NVD-CWE-noinfo	CVE-2020-14652	2024-11-21 14:03	2020-07-16	Show	GitHub Exploit DB Packet Storm

219929	5.5	MEDIUM Network	netapp canonical oracle	snapcenter oncommand_workflow_automation oncommand_insight active_iq_unified_manager ubuntu_linux mysql	Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Roles). Supported versions that are affected are 8.0.20 and prior. Easily exploitable vulnerability allows high…	NVD-CWE-noinfo	CVE-2020-14651	2024-11-21 14:03	2020-07-16	Show	GitHub Exploit DB Packet Storm

219930	5.3	MEDIUM Local	oracle opensuse	vm_virtualbox leap	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.44, prior to 6.0.24 and prior to 6.1.12. Difficult …	NVD-CWE-noinfo	CVE-2020-14650	2024-11-21 14:03	2020-07-16	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed