Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
201421 9.3 危険 マイクロソフト - Microsoft Edge の Chakra JavaScript エンジンにおける任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2016-0024 2016-01-15 11:22 2016-01-12 Show GitHub Exploit DB Packet Storm
201422 9.3 危険 マイクロソフト - Microsoft Edge における任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2016-0003 2016-01-15 11:22 2016-01-12 Show GitHub Exploit DB Packet Storm
201423 9 危険 LaCie
Seagate Technology LLC
- Seagate および LaCie ワイヤレスストレージ製品に複数の脆弱性 CWE-22
CWE-255
CWE-Other
CVE-2015-2874
CVE-2015-2875
CVE-2015-2876
2016-01-14 18:13 2015-09-1 Show GitHub Exploit DB Packet Storm
201424 4.3 警告 Phusion B.V. - Phusion Passenger の agent/Core/Controller/SendRequest.cpp におけるアプリケーションに渡されるヘッダを偽造される脆弱性 CWE-20
不適切な入力確認
CVE-2015-7519 2016-01-14 18:01 2015-12-7 Show GitHub Exploit DB Packet Storm
201425 5 警告 Novell
Quassel IRC
- Quassel の core/coreuserinputhandler.cpp の CoreUserInputHandler::doMode 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他
CVE-2015-8547 2016-01-14 17:35 2015-11-23 Show GitHub Exploit DB Packet Storm
201426 3.5 注意 Atlassian - 複数のAtlassian JIRA 製品における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2015-8481 2016-01-14 17:27 2015-12-9 Show GitHub Exploit DB Packet Storm
201427 5.8 警告 ブルーコートシステムズ - Blue Coat ProxySG および Advanced Secure Gateway におけるオープンリダイレクトの脆弱性 CWE-Other
その他
CVE-2015-8597 2016-01-14 17:20 2015-12-17 Show GitHub Exploit DB Packet Storm
201428 5 警告 Ricard Torres - WordPress 用 Zip Attachments プラグインの download.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2015-4694 2016-01-14 17:10 2015-06-12 Show GitHub Exploit DB Packet Storm
201429 9.3 危険 Pygments
Canonical
- Pygments の formatters/img.py の FontManager._get_nix_font_path 関数における任意のコマンドを実行される脆弱性 CWE-78
OSコマンド・インジェクション
CVE-2015-8557 2016-01-14 16:52 2015-08-21 Show GitHub Exploit DB Packet Storm
201430 2.1 注意 Gummi project
Novell
- Gummi における任意のファイルに書き込まれる脆弱性 CWE-59
リンク解釈の問題
CVE-2015-7758 2016-01-14 16:12 2015-11-29 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 26, 2026, 4:08 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
651 5.4 MEDIUM
Network
openmage magento Magento Long Term Support (LTS) is an unofficial, community-driven project provides an alternative to the Magento Community Edition e-commerce platform with a high level of backward compatibility. Pr… Update CWE-862
 Missing Authorization
CVE-2026-40098 2026-04-24 02:46 2026-04-21 Show GitHub Exploit DB Packet Storm
652 8.8 HIGH
Network
openmage magento Magento Long Term Support (LTS) is an unofficial, community-driven project provides an alternative to the Magento Community Edition e-commerce platform with a high level of backward compatibility. Pr… Update CWE-434
 Unrestricted Upload of File with Dangerous Type 
CVE-2026-40488 2026-04-24 02:45 2026-04-21 Show GitHub Exploit DB Packet Storm
653 6.8 MEDIUM
Local
oracle financial_services_analytical_applications_infrastructure Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications (component: User Interface). Supported versions that are affec… New CWE-284
Improper Access Control
CVE-2026-34325 2026-04-24 01:43 2026-04-22 Show GitHub Exploit DB Packet Storm
654 6.5 MEDIUM
Network
oracle life_sciences_inform Vulnerability in the Oracle Life Sciences InForm product of Oracle Life Science Applications (component: App Server). Supported versions that are affected are 7.0.1.0 and 7.0.1.1. Easily exploitabl… New CWE-284
Improper Access Control
CVE-2026-34324 2026-04-24 01:42 2026-04-22 Show GitHub Exploit DB Packet Storm
655 6.3 MEDIUM
Network
oracle life_sciences_inform Vulnerability in the Oracle Life Sciences InForm product of Oracle Life Science Applications (component: IDM Authentication). Supported versions that are affected are 7.0.1.0 and 7.0.1.1. Easily ex… New CWE-284
Improper Access Control
CVE-2026-34323 2026-04-24 01:41 2026-04-22 Show GitHub Exploit DB Packet Storm
656 4.8 MEDIUM
Network
oracle financial_services_analytical_applications_infrastructure Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications (component: User Interface). Supported versions that are affec… New CWE-285
Improper Authorization
CVE-2026-34321 2026-04-24 01:41 2026-04-22 Show GitHub Exploit DB Packet Storm
657 6.8 MEDIUM
Network
oracle financial_services_analytical_applications_infrastructure Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications (component: Platform). Supported versions that are affected ar… New NVD-CWE-noinfo
CVE-2026-34314 2026-04-24 01:40 2026-04-22 Show GitHub Exploit DB Packet Storm
658 6.5 MEDIUM
Network
oracle financial_services_analytical_applications_infrastructure Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications (component: Platform). Supported versions that are affected ar… New CWE-200
Information Exposure
CVE-2026-34313 2026-04-24 01:35 2026-04-22 Show GitHub Exploit DB Packet Storm
659 9.1 CRITICAL
Network
freescout freescout FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.213, attachment download tokens are generated using a weak and predictable formula: `md5(APP_KEY + attachment_id + s… New CWE-330
CWE-340
 Use of Insufficiently Random Values
 Generation of Predictable Numbers or Identifiers
CVE-2026-40496 2026-04-24 01:32 2026-04-21 Show GitHub Exploit DB Packet Storm
660 8.1 HIGH
Network
freescout freescout FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.213, FreeScout's `Helper::stripDangerousTags()` removes `<script>`, `<form>`, `<iframe>`, `<object>` but does NOT st… New CWE-79
Cross-site Scripting
CVE-2026-40497 2026-04-24 01:32 2026-04-21 Show GitHub Exploit DB Packet Storm