Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
250981	5.5	警告	オラクル	-	Oracle PeopleSoft and JDEdwards Suite の PeopleSoft Enterprise PeopleTools コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-2402	2010-08-6 18:28	2010-07-13	Show	GitHub Exploit DB Packet Storm

250982	5.5	警告	オラクル	-	Oracle PeopleSoft and JDEdwards Suite の PeopleSoft Enterprise HCM - eProfile Mgr コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-2401	2010-08-6 18:28	2010-07-13	Show	GitHub Exploit DB Packet Storm

250983	1.9	注意	オラクル	-	Oracle Supply Chain Products Suite の Oracle Transportation Management コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-2371	2010-08-6 18:27	2010-07-13	Show	GitHub Exploit DB Packet Storm

250984	4.3	警告	オラクル	-	Oracle Supply Chain Products Suite の Oracle Transportation Management コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-2372	2010-08-6 18:27	2010-07-13	Show	GitHub Exploit DB Packet Storm

250985	10	危険	アップルサイバートラスト株式会社サン・マイクロシステムズレッドハット	-	複数の Oracle 製品の New Java Plug-in コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0887	2010-08-5 17:16	2010-04-15	Show	GitHub Exploit DB Packet Storm

250986	2.6	注意	オラクル	-	Oracle E-Business Suite の Oracle Knowledge Management コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0836	2010-08-5 16:36	2010-07-13	Show	GitHub Exploit DB Packet Storm

250987	3.5	注意	オラクル	-	Oracle E-Business Suite の Oracle Applications Framework コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0909	2010-08-5 16:35	2010-07-13	Show	GitHub Exploit DB Packet Storm

250988	4.3	警告	オラクル	-	Oracle E-Business Suite の Oracle Applications Manager コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0913	2010-08-5 16:35	2010-07-13	Show	GitHub Exploit DB Packet Storm

250989	4.3	警告	オラクル	-	Oracle E-Business Suite の Oracle Applications Manager コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0905	2010-08-5 16:35	2010-07-13	Show	GitHub Exploit DB Packet Storm

250990	4.3	警告	オラクル	-	Oracle E-Business Suite の Oracle Applications Framework コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0912	2010-08-5 16:35	2010-07-13	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:April 26, 2026, 4:08 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
256331	-	-	-	The RFC enabled function module allows a low privileged user to perform denial of service on any user and also change or delete favourite nodes. By sending a crafted packet in the function module tar…	CWE-862 Missing Authorization	CVE-2024-45285	2024-09-10 14:15	2024-09-10	Show	GitHub Exploit DB Packet Storm

256332	-	-	-	An authenticated attacker with high privilege can use functions of SLCM transactions to which access should be restricted. This may result in an escalation of privileges causing low impact on integri…	CWE-862 Missing Authorization	CVE-2024-45284	2024-09-10 14:15	2024-09-10	Show	GitHub Exploit DB Packet Storm

256333	-	-	-	SAP NetWeaver AS for Java allows an authorized attacker to obtain sensitive information. The attacker could obtain the username and password when creating an RFC destination. After successful exploit…	CWE-256 Plaintext Storage of a Password	CVE-2024-45283	2024-09-10 14:15	2024-09-10	Show	GitHub Exploit DB Packet Storm

256334	-	-	-	SAP BusinessObjects Business Intelligence Platform allows a high privilege user to run client desktop applications even if some of the DLLs are not digitally signed or if the signature is broken. The…	CWE-426 Untrusted Search Path	CVE-2024-45281	2024-09-10 14:15	2024-09-10	Show	GitHub Exploit DB Packet Storm

256335	-	-	-	Due to insufficient encoding of user-controlled inputs, SAP NetWeaver AS Java allows malicious scripts to be executed in the login application. This has a limited impact on confidentiality and integr…	CWE-79 Cross-site Scripting	CVE-2024-45280	2024-09-10 14:15	2024-09-10	Show	GitHub Exploit DB Packet Storm

256336	-	-	-	Due to insufficient input validation, CRM Blueprint Application Builder Panel of SAP NetWeaver Application Server for ABAP allows an unauthenticated attacker to craft a URL link which could embed a m…	CWE-79 Cross-site Scripting	CVE-2024-45279	2024-09-10 14:15	2024-09-10	Show	GitHub Exploit DB Packet Storm

256337	-	-	-	Under certain conditions Statutory Reports in SAP S/4 HANA allows an attacker with basic privileges to access information which would otherwise be restricted. The vulnerability could expose internal …	CWE-213 Exposure of Sensitive Information Due to Incompatible Policies	CVE-2024-44121	2024-09-10 14:15	2024-09-10	Show	GitHub Exploit DB Packet Storm

256338	-	-	-	SAP NetWeaver Enterprise Portal is vulnerable to reflected cross site scripting due to insufficient encoding of user-controlled input. An unauthenticated attacker could craft a malicious URL and tric…	CWE-79 Cross-site Scripting	CVE-2024-44120	2024-09-10 14:15	2024-09-10	Show	GitHub Exploit DB Packet Storm

256339	-	-	-	The RFC enabled function module allows a low privileged user to perform various actions, such as modifying the URLs of any user's favourite nodes and workbook ID. There is low impact on integrity and…	-	CVE-2024-44117	2024-09-10 14:15	2024-09-10	Show	GitHub Exploit DB Packet Storm

256340	-	-	-	All versions of the package node-gettext are vulnerable to Prototype Pollution via the addTranslations() function in gettext.js due to improper user input sanitization.	-	CVE-2024-21528	2024-09-10 14:15	2024-09-10	Show	GitHub Exploit DB Packet Storm