Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
1251 4.9 警告
Network 		HGiga isherlock HGigaのisherlockにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2024-4297 2026-01-28 12:39 2024-04-29 Show GitHub Exploit DB Packet Storm
1252 9.8 緊急
Network 		Joom Sky JS Help Desk Joom SkyのWordPress用JS Help Deskにおける認証の欠如に関する脆弱性 CWE-862
認証の欠如 		CVE-2024-43274 2026-01-28 12:39 2024-11-1 Show GitHub Exploit DB Packet Storm
1253 5.8 警告
Network 		ジュニパーネットワークス Junos OS Evolved ジュニパーネットワークスのJunos OS Evolvedにおける例外的な状態の処理に関する脆弱性 CWE-755
例外的な状態における不適切な処理 		CVE-2024-47489 2026-01-28 12:39 2024-10-11 Show GitHub Exploit DB Packet Storm
1254 8.2 重要
Network 		ジュニパーネットワークス Junos OS Evolved ジュニパーネットワークスのJunos OS Evolvedにおける意図するエンドポイントとの通信チャネルの制限に関する脆弱性 CWE-923
意図するエンドポイントとの通信チャネルの不適切な制限 		CVE-2024-47490 2026-01-28 12:39 2024-10-11 Show GitHub Exploit DB Packet Storm
1255 5.9 警告
Network 		ジュニパーネットワークス Junos OS Evolved
Junos OS 		ジュニパーネットワークスのJunos OS等の複数製品における例外的な状態の処理に関する脆弱性 CWE-755
例外的な状態における不適切な処理 		CVE-2024-47491 2026-01-28 12:39 2024-10-11 Show GitHub Exploit DB Packet Storm
1256 6.5 警告
Adjacent 		ジュニパーネットワークス Junos OS ジュニパーネットワークスのJunos OSにおける有効期限後のメモリの解放の欠如に関する脆弱性 CWE-401
有効期限後のメモリの解放の欠如 		CVE-2024-47493 2026-01-28 12:39 2024-10-11 Show GitHub Exploit DB Packet Storm
1257 5.9 警告
Network 		ジュニパーネットワークス Junos OS ジュニパーネットワークスのJunos OSにおけるTime-of-check Time-of-use (TOCTOU) 競合状態の脆弱性 CWE-367
Time-of-check Time-of-use (TOCTOU) 競合状態 		CVE-2024-47494 2026-01-28 12:39 2024-10-11 Show GitHub Exploit DB Packet Storm
1258 6.7 警告
Local 		ジュニパーネットワークス Junos OS Evolved ジュニパーネットワークスのJunos OS Evolvedにおけるユーザ制御の鍵による認証回避に関する脆弱性 CWE-639
ユーザ制御の鍵による認証回避 		CVE-2024-47495 2026-01-28 12:39 2024-10-11 Show GitHub Exploit DB Packet Storm
1259 5.5 警告
Local 		ジュニパーネットワークス Junos OS ジュニパーネットワークスのJunos OSにおけるNULL ポインタデリファレンスに関する脆弱性 CWE-476
NULL ポインタデリファレンス 		CVE-2024-47496 2026-01-28 12:39 2024-10-11 Show GitHub Exploit DB Packet Storm
1260 7.5 重要
Network 		ジュニパーネットワークス Junos OS ジュニパーネットワークスのJunos OSにおけるリソースの枯渇に関する脆弱性 CWE-400
リソースの枯渇 		CVE-2024-47497 2026-01-28 12:39 2024-10-11 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 25, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
551 6.8 MEDIUM
Local 		oracle financial_services_analytical_applications_infrastructure Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications (component: User Interface). Supported versions that are affec… New CWE-284
Improper Access Control 		CVE-2026-34325 2026-04-24 01:43 2026-04-22 Show GitHub Exploit DB Packet Storm
552 6.5 MEDIUM
Network 		oracle life_sciences_inform Vulnerability in the Oracle Life Sciences InForm product of Oracle Life Science Applications (component: App Server). Supported versions that are affected are 7.0.1.0 and 7.0.1.1. Easily exploitabl… New CWE-284
Improper Access Control 		CVE-2026-34324 2026-04-24 01:42 2026-04-22 Show GitHub Exploit DB Packet Storm
553 6.3 MEDIUM
Network 		oracle life_sciences_inform Vulnerability in the Oracle Life Sciences InForm product of Oracle Life Science Applications (component: IDM Authentication). Supported versions that are affected are 7.0.1.0 and 7.0.1.1. Easily ex… New CWE-284
Improper Access Control 		CVE-2026-34323 2026-04-24 01:41 2026-04-22 Show GitHub Exploit DB Packet Storm
554 4.8 MEDIUM
Network 		oracle financial_services_analytical_applications_infrastructure Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications (component: User Interface). Supported versions that are affec… New CWE-285
Improper Authorization 		CVE-2026-34321 2026-04-24 01:41 2026-04-22 Show GitHub Exploit DB Packet Storm
555 6.8 MEDIUM
Network 		oracle financial_services_analytical_applications_infrastructure Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications (component: Platform). Supported versions that are affected ar… New NVD-CWE-noinfo
CVE-2026-34314 2026-04-24 01:40 2026-04-22 Show GitHub Exploit DB Packet Storm
556 6.5 MEDIUM
Network 		oracle financial_services_analytical_applications_infrastructure Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications (component: Platform). Supported versions that are affected ar… New CWE-200
Information Exposure 		CVE-2026-34313 2026-04-24 01:35 2026-04-22 Show GitHub Exploit DB Packet Storm
557 9.1 CRITICAL
Network 		freescout freescout FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.213, attachment download tokens are generated using a weak and predictable formula: `md5(APP_KEY + attachment_id + s… New CWE-330
CWE-340
 Use of Insufficiently Random Values
 Generation of Predictable Numbers or Identifiers 		CVE-2026-40496 2026-04-24 01:32 2026-04-21 Show GitHub Exploit DB Packet Storm
558 8.1 HIGH
Network 		freescout freescout FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.213, FreeScout's `Helper::stripDangerousTags()` removes `<script>`, `<form>`, `<iframe>`, `<object>` but does NOT st… New CWE-79
Cross-site Scripting 		CVE-2026-40497 2026-04-24 01:32 2026-04-21 Show GitHub Exploit DB Packet Storm
559 8.3 HIGH
Network 		- - WeKan before 8.35 contains a missing authorization vulnerability in the Integration REST API endpoints that allows authenticated board members to perform administrative actions without proper privile… New CWE-862
 Missing Authorization 		CVE-2026-41454 2026-04-24 01:27 2026-04-23 Show GitHub Exploit DB Packet Storm
560 8.5 HIGH
Network 		- - WeKan before 8.35 contains a server-side request forgery vulnerability in webhook integration URL handling where the url schema field accepts any string without protocol restriction or destination va… New CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2026-41455 2026-04-24 01:27 2026-04-23 Show GitHub Exploit DB Packet Storm