Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
199311 7.1 重要
Local
The PHP Group - PHP の ext/soap/php_http.c の make_http_soap_request 関数におけるプロセスメモリから重要な情報を取得される脆弱性 CWE-20
不適切な入力確認
CVE-2016-3185 2016-05-23 11:35 2016-03-3 Show GitHub Exploit DB Packet Storm
199312 5.9 警告
Network
F5 Networks - 複数の F5 製品におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2015-8099 2016-05-23 11:09 2015-11-9 Show GitHub Exploit DB Packet Storm
199313 9.8 緊急
Network
Canonical - ubuntu-core-launcher パッケージの setup_snappy_os_mounts 関数における重要な情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2016-1580 2016-05-23 10:32 2016-04-29 Show GitHub Exploit DB Packet Storm
199314 9.8 緊急
Network
Apache Software Foundation - Apache Xerces-C++ の validators/DTD/DTDScanner.cpp における脆弱性 CWE-Other
その他
CVE-2016-2099 2016-05-23 10:20 2016-05-16 Show GitHub Exploit DB Packet Storm
199315 9.8 緊急
Network
Oxide project
Canonical
- Oxide におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他
CVE-2016-1578 2016-05-23 10:10 2016-04-27 Show GitHub Exploit DB Packet Storm
199316 5.3 警告
Network
OpenAFS - OpenAFS のクライアントにおける重要なメモリ情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2016-4536 2016-05-20 17:06 2016-03-16 Show GitHub Exploit DB Packet Storm
199317 6.5 警告
Network
Debian
OpenAFS
- OpenAFS の ptserver/ptprocs.c の newEntry 関数におけるアクセス制限を回避される脆弱性 CWE-Other
その他
CVE-2016-2860 2016-05-20 17:06 2016-03-16 Show GitHub Exploit DB Packet Storm
199318 8.1 重要
Network
Google - Android 上で稼働する Google Chrome におけるディレクトリトラバーサル攻撃を実行される脆弱性 CWE-22
パス・トラバーサル
CVE-2016-1671 2016-05-20 16:49 2016-05-11 Show GitHub Exploit DB Packet Storm
199319 5.3 警告
Network
Google - Google Chrome の content/browser/loader/resource_dispatcher_host_impl.cc における任意の HTTP リクエストを送信される脆弱性 CWE-362
競合状態
CVE-2016-1670 2016-05-20 16:49 2016-05-11 Show GitHub Exploit DB Packet Storm
199320 8.8 重要
Network
Google - Google Chrome で使用される Google V8 の zone.cc の Zone::New 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2016-1669 2016-05-20 16:49 2016-05-11 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 25, 2026, 4:08 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
551 6.8 MEDIUM
Local
oracle financial_services_analytical_applications_infrastructure Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications (component: User Interface). Supported versions that are affec… New CWE-284
Improper Access Control
CVE-2026-34325 2026-04-24 01:43 2026-04-22 Show GitHub Exploit DB Packet Storm
552 6.5 MEDIUM
Network
oracle life_sciences_inform Vulnerability in the Oracle Life Sciences InForm product of Oracle Life Science Applications (component: App Server). Supported versions that are affected are 7.0.1.0 and 7.0.1.1. Easily exploitabl… New CWE-284
Improper Access Control
CVE-2026-34324 2026-04-24 01:42 2026-04-22 Show GitHub Exploit DB Packet Storm
553 6.3 MEDIUM
Network
oracle life_sciences_inform Vulnerability in the Oracle Life Sciences InForm product of Oracle Life Science Applications (component: IDM Authentication). Supported versions that are affected are 7.0.1.0 and 7.0.1.1. Easily ex… New CWE-284
Improper Access Control
CVE-2026-34323 2026-04-24 01:41 2026-04-22 Show GitHub Exploit DB Packet Storm
554 4.8 MEDIUM
Network
oracle financial_services_analytical_applications_infrastructure Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications (component: User Interface). Supported versions that are affec… New CWE-285
Improper Authorization
CVE-2026-34321 2026-04-24 01:41 2026-04-22 Show GitHub Exploit DB Packet Storm
555 6.8 MEDIUM
Network
oracle financial_services_analytical_applications_infrastructure Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications (component: Platform). Supported versions that are affected ar… New NVD-CWE-noinfo
CVE-2026-34314 2026-04-24 01:40 2026-04-22 Show GitHub Exploit DB Packet Storm
556 6.5 MEDIUM
Network
oracle financial_services_analytical_applications_infrastructure Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications (component: Platform). Supported versions that are affected ar… New CWE-200
Information Exposure
CVE-2026-34313 2026-04-24 01:35 2026-04-22 Show GitHub Exploit DB Packet Storm
557 9.1 CRITICAL
Network
freescout freescout FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.213, attachment download tokens are generated using a weak and predictable formula: `md5(APP_KEY + attachment_id + s… New CWE-330
CWE-340
 Use of Insufficiently Random Values
 Generation of Predictable Numbers or Identifiers
CVE-2026-40496 2026-04-24 01:32 2026-04-21 Show GitHub Exploit DB Packet Storm
558 8.1 HIGH
Network
freescout freescout FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.213, FreeScout's `Helper::stripDangerousTags()` removes `<script>`, `<form>`, `<iframe>`, `<object>` but does NOT st… New CWE-79
Cross-site Scripting
CVE-2026-40497 2026-04-24 01:32 2026-04-21 Show GitHub Exploit DB Packet Storm
559 8.3 HIGH
Network
- - WeKan before 8.35 contains a missing authorization vulnerability in the Integration REST API endpoints that allows authenticated board members to perform administrative actions without proper privile… New CWE-862
 Missing Authorization
CVE-2026-41454 2026-04-24 01:27 2026-04-23 Show GitHub Exploit DB Packet Storm
560 8.5 HIGH
Network
- - WeKan before 8.35 contains a server-side request forgery vulnerability in webhook integration URL handling where the url schema field accepts any string without protocol restriction or destination va… New CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2026-41455 2026-04-24 01:27 2026-04-23 Show GitHub Exploit DB Packet Storm