Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 13, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
201691 5.9 警告
Network
JCraft, Inc. - Windows 上で稼動する JCraft JSch におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2016-5725 2017-01-31 14:01 2016-08-30 Show GitHub Exploit DB Packet Storm
201692 8.8 重要
Local
Firejail project - Firejail におけるサンドボックス外で任意のコマンドを実行される脆弱性 CWE-284
不適切なアクセス制御
CVE-2016-9016 2017-01-31 13:54 2016-10-25 Show GitHub Exploit DB Packet Storm
201693 9.8 緊急
Network
Sociomantic Labs - sociomantic-tsunami git-hub における任意のコードを実行される脆弱性 CWE-284
不適切なアクセス制御
CVE-2016-7794 2017-01-31 13:50 2016-09-7 Show GitHub Exploit DB Packet Storm
201694 8.8 重要
Network
Sociomantic Labs - sociomantic-tsunami git-hub における任意のコードを実行される脆弱性 CWE-284
不適切なアクセス制御
CVE-2016-7793 2017-01-31 13:50 2016-09-7 Show GitHub Exploit DB Packet Storm
201695 4 警告
Local
Info-ZIP - Info-Zip UnZip の list.c の list_files 関数におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2014-9913 2017-01-31 13:36 2014-11-3 Show GitHub Exploit DB Packet Storm
201696 6.1 警告
Network
BlackBerry - BlackBerry の WatchDox サーバコンポーネントの Appliance-X および vApp における反射型クロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2017-3890 2017-01-31 12:23 2017-01-10 Show GitHub Exploit DB Packet Storm
201697 9.8 緊急
Network
Intelliants - Subrion CMS の includes/classes/ia.core.users.php における PHP オブジェクトインジェクション攻撃を実行される脆弱性 CWE-94
コード・インジェクション
CVE-2017-5543 2017-01-31 11:33 2017-01-17 Show GitHub Exploit DB Packet Storm
201698 6.1 警告
Network
Symphony CMS - Symphony CMS の template/usererror.missing_extension.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2017-5542 2017-01-31 11:31 2017-01-18 Show GitHub Exploit DB Packet Storm
201699 5.3 警告
Network
Symphony CMS - Symphony CMS の template/usererror.missing_extension.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2017-5541 2017-01-31 11:31 2017-01-18 Show GitHub Exploit DB Packet Storm
201700 7.5 重要
Network
Viprinet Europe GmbH - Viprinet Multichannel VPN Router 300 のハードウェア VPN クライアントにおける反射攻撃を実行される脆弱性 CWE-20
不適切な入力確認
CVE-2014-9755 2017-01-31 11:28 2014-01-30 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 14, 2026, 4:12 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2971 8.8 HIGH
Network
oracle e-business_suite Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability all… CWE-306
Missing Authentication for Critical Function
CVE-2026-46826 2026-06-4 02:43 2026-05-29 Show GitHub Exploit DB Packet Storm
2972 8.8 HIGH
Network
oracle e-business_suite Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Self Service Manager). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability al… CWE-269
CWE-284
CWE-287
CWE-306
 Improper Privilege Management
Improper Access Control
Improper Authentication
Missing Authentication for Critical Function
CVE-2026-46827 2026-06-4 02:43 2026-05-29 Show GitHub Exploit DB Packet Storm
2973 8.1 HIGH
Network
oracle e-business_suite Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability all… CWE-284
Improper Access Control
CVE-2026-46828 2026-06-4 02:42 2026-05-29 Show GitHub Exploit DB Packet Storm
2974 7.5 HIGH
Network
oracle rest_data_services Vulnerability in Oracle REST Data Services (component: Mongoapi). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows unauthenticated attacker with networ… CWE-400
 Uncontrolled Resource Consumption
CVE-2026-46829 2026-06-4 02:41 2026-05-29 Show GitHub Exploit DB Packet Storm
2975 6.5 MEDIUM
Network
nextcloud approval Nextcloud is an open source content collaboration platform. Prior to version 2.7.2, a privilege escalation vulnerability exists in the Approval app that allows a user without sharing permissions to f… CWE-285
Improper Authorization
CVE-2026-45275 2026-06-4 02:39 2026-06-2 Show GitHub Exploit DB Packet Storm
2976 9.1 CRITICAL
Network
oracle e-business_suite Vulnerability in the Oracle Internet Procurement Connector product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploi… CWE-284
Improper Access Control
CVE-2026-46819 2026-06-4 02:37 2026-05-29 Show GitHub Exploit DB Packet Storm
2977 3.3 LOW
Local
nextcloud approval Nextcloud is an open source content collaboration platform. Prior to version 2.7.2, authenticated users can check if arbitrary files are associated with specific approval workflows where they can req… CWE-200
NVD-CWE-noinfo
Information Exposure
CVE-2026-45277 2026-06-4 02:36 2026-06-2 Show GitHub Exploit DB Packet Storm
2978 6.1 MEDIUM
Network
nextcloud user_oidc Nextcloud is an open source content collaboration platform. From version 6.1.0 to before version 8.2.2, an attacker can craft links that would redirect users to another website, when the victim uses … CWE-601
Open Redirect
CVE-2026-45278 2026-06-4 02:34 2026-06-2 Show GitHub Exploit DB Packet Storm
2979 7.5 HIGH
Network
mosaic5g flexric FlexRIC v2.0.0 crashes when the iApp receives an E42_RIC_SUBSCRIPTION_REQUEST referencing a non-existent E2 Node. The lookup function returns NULL, which is enforced by assert() in Debug builds (SIGA… CWE-476
 NULL Pointer Dereference
CVE-2026-37226 2026-06-4 02:16 2026-06-2 Show GitHub Exploit DB Packet Storm
2980 7.5 HIGH
Network
mosaic5g flexric FlexRIC v2.0.0 contains a reachable assertion in e2ap_recv_sctp_msg() (src/lib/ep/e2ap_ep.c). The function allocates a fixed 32KB receive buffer and enforces assert(rc < len) on the sctp_recvmsg() re… CWE-617
 Reachable Assertion
CVE-2026-37228 2026-06-4 02:16 2026-06-2 Show GitHub Exploit DB Packet Storm