Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
194131 7.5 重要
Network 		オラクル - Oracle Fusion Middleware の Oracle Outside In Technology における Outside In Filters に関する脆弱性 CWE-284
不適切なアクセス制御 		CVE-2017-3269 2017-02-6 11:24 2017-01-17 Show GitHub Exploit DB Packet Storm
194132 7.5 重要
Network 		オラクル - Oracle Fusion Middleware の Oracle Outside In Technology における Outside In Filters に関する脆弱性 CWE-noinfo
情報不足 		CVE-2017-3268 2017-02-6 11:24 2017-01-17 Show GitHub Exploit DB Packet Storm
194133 7.5 重要
Network 		オラクル - Oracle Fusion Middleware の Oracle Outside In Technology における Outside In Filters に関する脆弱性 CWE-noinfo
情報不足 		CVE-2017-3267 2017-02-6 11:24 2017-01-17 Show GitHub Exploit DB Packet Storm
194134 9.8 緊急
Network 		オラクル - Oracle Fusion Middleware の Oracle Outside In Technology における Outside In Filters に関する脆弱性 CWE-284
不適切なアクセス制御 		CVE-2017-3266 2017-02-6 11:24 2017-01-17 Show GitHub Exploit DB Packet Storm
194135 5.8 警告
Network 		オラクル - Oracle Fusion Middleware の Oracle JDeveloper における ADF Faces に関する脆弱性 CWE-200
情報漏えい 		CVE-2017-3255 2017-02-6 11:24 2017-01-17 Show GitHub Exploit DB Packet Storm
194136 7.3 重要
Network 		オラクル - Oracle Fusion Middleware の Oracle GlassFish Server における Security に関する脆弱性 CWE-200
情報漏えい 		CVE-2017-3250 2017-02-6 11:24 2017-01-17 Show GitHub Exploit DB Packet Storm
194137 7.3 重要
Network 		オラクル - Oracle Fusion Middleware の Oracle GlassFish Server における Security に関する脆弱性 CWE-noinfo
情報不足 		CVE-2017-3249 2017-02-6 11:24 2017-01-17 Show GitHub Exploit DB Packet Storm
194138 9.8 緊急
Network 		オラクル - Oracle Fusion Middleware の Oracle WebLogic Server における Core Components に関する脆弱性 CWE-noinfo
情報不足 		CVE-2017-3248 2017-02-6 11:24 2017-01-17 Show GitHub Exploit DB Packet Storm
194139 4.3 警告
Network 		オラクル - Oracle Fusion Middleware の Oracle GlassFish Server における Core に関する脆弱性 CWE-284
不適切なアクセス制御 		CVE-2017-3247 2017-02-6 11:24 2017-01-17 Show GitHub Exploit DB Packet Storm
194140 3.3 低
Local 		オラクル - Oracle Fusion Middleware の Oracle GlassFish Server における Administration に関する脆弱性 CWE-200
情報漏えい 		CVE-2017-3239 2017-02-6 11:24 2017-01-17 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 20, 2026, 4:09 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
531 - - - MCPHub in versions below 0.11.0 is vulnerable to authentication bypass. Some endpoints are not protected by authentication middleware, allowing an unauthenticated attacker to perform actions in the n… Update CWE-639
 Authorization Bypass Through User-Controlled Key 		CVE-2025-13822 2026-04-18 00:24 2026-04-14 Show GitHub Exploit DB Packet Storm
532 5.4 MEDIUM
Network 		- - Kiuwan SAST improperly authorizes SSO logins for locally disabled mapped user accounts, allowing disabled users to continue accessing the application. Kiuwan Cloud was affected, and Kiuwan SAST on-pr… Update CWE-863
 Incorrect Authorization 		CVE-2026-24069 2026-04-18 00:24 2026-04-14 Show GitHub Exploit DB Packet Storm
533 7.4 HIGH
Network 		- - In Eclipse Jetty, the HTTP/1.1 parser is vulnerable to request smuggling when chunk extensions are used, similar to the "funky chunks" techniques outlined here: * https://w4ke.info/2025/06/18/funk… Update CWE-444
HTTP Request Smuggling 		CVE-2026-2332 2026-04-18 00:24 2026-04-14 Show GitHub Exploit DB Packet Storm
534 7.1 HIGH
Network 		- - A vulnerability has been identified in Industrial Edge Management Pro V1 (All versions >= V1.7.6 < V1.15.17), Industrial Edge Management Pro V2 (All versions >= V2.0.0 < V2.1.1), Industrial Edge Mana… Update CWE-305
 Authentication Bypass by Primary Weakness 		CVE-2026-33892 2026-04-18 00:24 2026-04-14 Show GitHub Exploit DB Packet Storm
535 4.3 MEDIUM
Network 		- - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache PDFBox Examples. This issue affects the ExtractEmbeddedFiles example in Apache PDFBox: from 2.… Update CWE-22
Path Traversal 		CVE-2026-33929 2026-04-18 00:24 2026-04-14 Show GitHub Exploit DB Packet Storm
536 - - - Improper neutralization of argument delimiters in a command ('argument injection') vulnerability in upKeeper Solutions upKeeper Instant Privilege Access allows Hijacking a Privileged Thread of Execut… Update CWE-88
Argument Injection 		CVE-2026-2449 2026-04-18 00:24 2026-04-14 Show GitHub Exploit DB Packet Storm
537 - - - .NET misconfiguration: use of impersonation vulnerability in upKeeper Solutions upKeeper Instant Privilege Access allows Hijacking a Privileged Thread of Execution.This issue affects upKeeper Instant… Update CWE-520
 .NET Misconfiguration: Use of Impersonation 		CVE-2026-2450 2026-04-18 00:24 2026-04-14 Show GitHub Exploit DB Packet Storm
538 - - - A vulnerability in the AdminServer component of OpenEdge on all supported platforms grants its authenticated users OS-level access to the server through the adopted authority of the AdminServer proce… Update CWE-552
 Files or Directories Accessible to External Parties 		CVE-2025-7389 2026-04-18 00:24 2026-04-14 Show GitHub Exploit DB Packet Storm
539 - - - The OECH1 prefix encoding is intended to obfuscate values across the OpenEdge platform.  It has been identified as cryptographically weak and unsuitable for stored encodings and enterprise applicatio… Update CWE-257
 Storing Passwords in a Recoverable Format 		CVE-2025-8095 2026-04-18 00:24 2026-04-14 Show GitHub Exploit DB Packet Storm
540 9.8 CRITICAL
Network 		- - An issue in Hostbill v.2025-11-24 and 2025-12-01 allows a remote attacker to execute arbitrary code and escalate privileges via the CSV registration field Update CWE-1236
 Improper Neutralization of Formula Elements in a CSV File 		CVE-2026-31049 2026-04-18 00:24 2026-04-14 Show GitHub Exploit DB Packet Storm