Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
1281 7.5 重要
Network 		GitLab.org GitLab GitLab.orgのGitLabにおける不正な認証に関する脆弱性 CWE-863
不正な認証 		CVE-2025-13928 2026-01-28 12:38 2026-01-22 Show GitHub Exploit DB Packet Storm
1282 7.5 重要
Network 		IBM IBM Concert Software IBMのIBM Concert Softwareにおけるヒープインスペクションに関する脆弱性 CWE-244
ヒープインスペクション 		CVE-2025-1719 2026-01-28 12:38 2026-01-20 Show GitHub Exploit DB Packet Storm
1283 7.5 重要
Network 		IBM IBM Concert Software IBMのIBM Concert Softwareにおけるヒープインスペクションに関する脆弱性 CWE-244
ヒープインスペクション 		CVE-2025-1722 2026-01-28 12:38 2026-01-20 Show GitHub Exploit DB Packet Storm
1284 5.4 警告
Physics 		サムスン Wear OS サムスンのWear OSにおける不特定の脆弱性 CWE-noinfo
情報不足 		CVE-2025-20939 2026-01-28 12:38 2025-04-8 Show GitHub Exploit DB Packet Storm
1285 6.2 警告
Local 		サムスン Wear OS サムスンのWear OSにおける重要な情報のセキュアでない格納に関する脆弱性 CWE-922
重要な情報のセキュアでない格納 		CVE-2025-20945 2026-01-28 12:37 2025-04-8 Show GitHub Exploit DB Packet Storm
1286 8.8 重要
Adjacent 		サムスン Wear OS サムスンのWear OSにおける不特定の脆弱性 CWE-noinfo
情報不足 		CVE-2025-20946 2026-01-28 12:37 2025-04-8 Show GitHub Exploit DB Packet Storm
1287 7.4 重要
Adjacent 		ジュニパーネットワークス Junos OS ジュニパーネットワークスのJunos OSにおける不適切な長さの値によるバッファへのアクセスに関する脆弱性 CWE-805
不適切な長さの値によるバッファへのアクセス 		CVE-2025-21591 2026-01-28 12:37 2025-04-9 Show GitHub Exploit DB Packet Storm
1288 5.5 警告
Local 		ジュニパーネットワークス Junos OS ジュニパーネットワークスのJunos OSにおける情報漏えいに関する脆弱性 CWE-200
情報漏えい 		CVE-2025-21592 2026-01-28 12:37 2025-01-9 Show GitHub Exploit DB Packet Storm
1289 6.5 警告
Adjacent 		ジュニパーネットワークス Junos OS Evolved
Junos OS 		ジュニパーネットワークスのJunos OS等の複数製品におけるライフタイムを通してのリソース制御に関する脆弱性 CWE-664
ライフタイムを通してのリソースの不適切な制御 		CVE-2025-21593 2026-01-28 12:37 2025-01-9 Show GitHub Exploit DB Packet Storm
1290 7.5 重要
Network 		ジュニパーネットワークス Junos OS ジュニパーネットワークスのJunos OSにおける例外的な状態のチェックに関する脆弱性 CWE-754
例外的な状態における不適切なチェック 		CVE-2025-21594 2026-01-28 12:37 2025-04-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 26, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
581 7.5 HIGH
Network 		oracle weblogic_server Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Services). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0… New CWE-200
Information Exposure 		CVE-2026-34305 2026-04-24 23:27 2026-04-22 Show GitHub Exploit DB Packet Storm
582 6.5 MEDIUM
Network 		oracle peoplesoft_enterprise_fin_project_costing Vulnerability in the PeopleSoft Enterprise FIN Project Costing product of Oracle PeopleSoft (component: Projects). The supported version that is affected is 9.2. Easily exploitable vulnerability al… New CWE-284
Improper Access Control 		CVE-2026-34306 2026-04-24 23:26 2026-04-22 Show GitHub Exploit DB Packet Storm
583 5.4 MEDIUM
Network 		oracle peoplesoft_enterprise_peopletools Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Workflow). Supported versions that are affected are 8.61-8.62. Easily exploitable vulnerability allows… New CWE-284
Improper Access Control 		CVE-2026-34307 2026-04-24 23:26 2026-04-22 Show GitHub Exploit DB Packet Storm
584 8.1 HIGH
Network 		oracle peoplesoft_enterprise_peopletools Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Security). Supported versions that are affected are 8.61-8.62. Easily exploitable vulnerability allows… New CWE-284
Improper Access Control 		CVE-2026-34309 2026-04-24 23:25 2026-04-22 Show GitHub Exploit DB Packet Storm
585 7.5 HIGH
Network 		oracle financial_services_analytical_applications_infrastructure Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications (component: Platform). Supported versions that are affected ar… New CWE-284
Improper Access Control 		CVE-2026-34310 2026-04-24 23:25 2026-04-22 Show GitHub Exploit DB Packet Storm
586 6.5 MEDIUM
Network 		oracle weblogic_server Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Services). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0… New CWE-285
CWE-601
Improper Authorization
Open Redirect 		CVE-2026-34315 2026-04-24 23:24 2026-04-22 Show GitHub Exploit DB Packet Storm
587 8.1 HIGH
Network 		sysadminsmedia homebox HomeBox is a home inventory and organization system. Versions prior to 0.25.0 contain a vulnerability where the defaultGroup ID remained permanently assigned to a user after being invited to a group,… Update CWE-708
 Incorrect Ownership Assignment 		CVE-2026-40196 2026-04-24 23:23 2026-04-18 Show GitHub Exploit DB Packet Storm
588 3.7 LOW
Network 		vmware spring_security Vulnerability in Spring Spring Security. If an application is using the UserDetails#isEnabled, #isAccountNonExpired, or #isAccountNonLocked user attributes, to enable, expire, or lock users, then Dao… New CWE-208
 Information Exposure Through Timing Discrepancy 		CVE-2026-22746 2026-04-24 23:20 2026-04-22 Show GitHub Exploit DB Packet Storm
589 8.1 HIGH
Network 		vmware spring_security Vulnerability in Spring Spring Security. SubjectX500PrincipalExtractor does not correctly handle certain malformed X.509 certificate CN values, which can lead to reading the wrong value for the usern… New CWE-297
 Improper Validation of Certificate with Host Mismatch 		CVE-2026-22747 2026-04-24 23:18 2026-04-22 Show GitHub Exploit DB Packet Storm
590 6.5 MEDIUM
Network 		vmware spring_security Vulnerability in Spring Spring Security. When an application configures JWT decoding with NimbusJwtDecoder  or NimbusReactiveJwtDecoder, it must configure an OAuth2TokenValidator<Jwt> separately, for… New CWE-20
 Improper Input Validation  		CVE-2026-22748 2026-04-24 23:18 2026-04-22 Show GitHub Exploit DB Packet Storm