Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
131 9.8 緊急
Network 		SolarWinds Web Help Desk SolarWindsのWeb Help Deskにおける信頼できないデータのデシリアライゼーションに関する脆弱性 CWE-502
信頼性のないデータのデシリアライゼーション 		CVE-2025-40553 2026-02-5 15:51 2026-01-28 Show GitHub Exploit DB Packet Storm
132 9.8 緊急
Network 		SolarWinds Web Help Desk SolarWindsのWeb Help Deskにおける弱い認証に関する脆弱性 CWE-1390
脆弱な認証 		CVE-2025-40554 2026-02-5 15:51 2026-01-28 Show GitHub Exploit DB Packet Storm
133 5.5 警告
Local 		Pure Storage, Inc. Portworx Pure Storage, Inc.のPortworxにおけるエンコードおよびエスケープに関する脆弱性 CWE-116
不適切なエンコード、または出力のエスケープ 		CVE-2025-9127 2026-02-5 15:51 2025-12-4 Show GitHub Exploit DB Packet Storm
134 6.5 警告
Network 		Tildeslash Ltd. M/Monit Tildeslash Ltd.のM/Monitにおける認証情報の不十分な保護に関する脆弱性 CWE-522
認証情報の不十分な保護 		CVE-2020-36968 2026-02-5 15:51 2026-01-28 Show GitHub Exploit DB Packet Storm
135 8.8 重要
Network 		Tildeslash Ltd. M/Monit Tildeslash Ltd.のM/Monitにおける不正な認証に関する脆弱性 CWE-863
不正な認証 		CVE-2020-36969 2026-02-5 15:51 2026-01-28 Show GitHub Exploit DB Packet Storm
136 9.8 緊急
Network 		Joakim Nygard and Jacob Oettinger Webgrind Webgrind projectのWebgrindにおけるOS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2023-54339 2026-02-5 15:51 2026-01-13 Show GitHub Exploit DB Packet Storm
137 6.1 警告
Network 		Joakim Nygard and Jacob Oettinger Webgrind Webgrind projectのWebgrindにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2023-54341 2026-02-5 15:51 2026-01-13 Show GitHub Exploit DB Packet Storm
138 5.4 警告
Network 		tagify project tagify FactorialのTagifyにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2025-13983 2026-02-5 15:51 2026-01-28 Show GitHub Exploit DB Packet Storm
139 9.8 緊急
Network 		Petlibro, Inc. PETLIBRO Petlibro, Inc.のPETLIBROにおける認証の欠如に関する脆弱性 CWE-862
認証の欠如 		CVE-2025-15115 2026-02-5 15:50 2026-01-4 Show GitHub Exploit DB Packet Storm
140 7.5 重要
Network 		Redlib Redlib Redlibにおける複数の脆弱性 CWE-400
CWE-502
CVE-2025-30160 2026-02-5 15:50 2025-03-20 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 18, 2026, 4:11 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
307091 - oracle jd_edwards_enterpriseone
peoplesoft_enterprise 		Unspecified vulnerability in the PeopleSoft Enterprise HRMS component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.9.18 and 9.0.8 allows remote authenticated users to affect confide… NVD-CWE-noinfo
CVE-2008-5456 2012-10-23 11:56 2009-01-14 Show GitHub Exploit DB Packet Storm
307092 - oracle bea_product_suite Unspecified vulnerability in the Oracle BEA WebLogic Server Plugins for Apache, Sun and IIS web servers component in BEA Product Suite 10.3, 10.0 MP1, 9.2 MP3, 9.1, 9.0, 8.1 SP6, and 7.0 SP7 allows r… NVD-CWE-noinfo
CVE-2008-5457 2012-10-23 11:56 2009-01-14 Show GitHub Exploit DB Packet Storm
307093 - oracle e-business_suite
e-business_suite_12 		Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 11.5.10 and CU2 allows remote authenticated users to affect confidentiality and integrity via u… NVD-CWE-noinfo
CVE-2008-5458 2012-10-23 11:56 2009-01-14 Show GitHub Exploit DB Packet Storm
307094 - oracle bea_product_suite Unspecified vulnerability in the WebLogic Server component in BEA Product Suite 10.3 allows remote attackers to affect confidentiality via unknown vectors. CWE-264
Permissions, Privileges, and Access Controls 		CVE-2008-5459 2012-10-23 11:56 2009-01-14 Show GitHub Exploit DB Packet Storm
307095 - oracle bea_product_suite See following link for additional information: https://support.bea.com/application_content/product_portlets/securityadvisories/2807.html CWE-264
Permissions, Privileges, and Access Controls 		CVE-2008-5459 2012-10-23 11:56 2009-01-14 Show GitHub Exploit DB Packet Storm
307096 - oracle bea_product_suite Unspecified vulnerability in the WebLogic Server component in BEA Product Suite 10.3, 10.0 MP1, 9.2 MP3, 9.1, and 9.0 allows remote attackers to affect confidentiality via unknown vectors. CWE-200
Information Exposure 		CVE-2008-5460 2012-10-23 11:56 2009-01-14 Show GitHub Exploit DB Packet Storm
307097 - oracle bea_product_suite See following link for additional information: https://support.bea.com/application_content/product_portlets/securityadvisories/2810.html CWE-200
Information Exposure 		CVE-2008-5460 2012-10-23 11:56 2009-01-14 Show GitHub Exploit DB Packet Storm
307098 - oracle bea_product_suite Unspecified vulnerability in the WebLogic Server component in BEA Product Suite 10.3, 10.0 MP1, 9.2 MP3, 9.1, 9.0, 8.1 SP6, 7.0, and SP7 allows remote attackers to affect confidentiality, integrity, … CWE-200
CWE-264
Information Exposure
Permissions, Privileges, and Access Controls 		CVE-2008-5461 2012-10-23 11:56 2009-01-14 Show GitHub Exploit DB Packet Storm
307099 - oracle bea_product_suite Per: http://www.oracle.com/technology/deploy/security/critical-patch-updates/cpujan2009.html "Follow the link for each of the CVE numbers to obtain download, installation and other information per… CWE-200
CWE-264
Information Exposure
Permissions, Privileges, and Access Controls 		CVE-2008-5461 2012-10-23 11:56 2009-01-14 Show GitHub Exploit DB Packet Storm
307100 - oracle bea_product_suite Unspecified vulnerability in the WebLogic Portal component in BEA Product Suite 10.3, 10.2, 10.0 MP1, 9.2 MP3, and 8.1 SP6 allows remote attackers to affect confidentiality, integrity, and availabili… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2008-5462 2012-10-23 11:56 2009-01-14 Show GitHub Exploit DB Packet Storm