Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 16, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
206941 4.3 警告 オラクル - Oracle Fusion Middleware の Oracle Access Manager における SSO Engine に関する脆弱性 CWE-noinfo
情報不足 		CVE-2015-4912 2015-10-22 14:17 2015-10-20 Show GitHub Exploit DB Packet Storm
206942 5 警告 オラクル - Oracle Fusion Middleware の Oracle JDeveloper における ADF Faces に関する脆弱性 CWE-noinfo
情報不足 		CVE-2015-4909 2015-10-22 14:17 2015-10-20 Show GitHub Exploit DB Packet Storm
206943 4.3 警告 オラクル - Oracle Fusion Middleware の Oracle GlassFish Server における Security に関する脆弱性 CWE-noinfo
情報不足 		CVE-2015-4899 2015-10-22 14:17 2015-10-20 Show GitHub Exploit DB Packet Storm
206944 4.3 警告 オラクル - Oracle Fusion Middleware の Oracle WebCenter Content における Content Server に関する脆弱性 CWE-noinfo
情報不足 		CVE-2015-4880 2015-10-22 14:17 2015-10-20 Show GitHub Exploit DB Packet Storm
206945 1.5 注意 オラクル - Oracle Fusion Middleware の Oracle Outside In Technology における Outside In Filters に関する脆弱性 CWE-noinfo
情報不足 		CVE-2015-4878 2015-10-22 14:17 2015-10-20 Show GitHub Exploit DB Packet Storm
206946 1.5 注意 オラクル - Oracle Fusion Middleware の Oracle Outside In Technology における Outside In Filters に関する脆弱性 CWE-noinfo
情報不足 		CVE-2015-4877 2015-10-22 14:17 2015-10-20 Show GitHub Exploit DB Packet Storm
206947 4.3 警告 オラクル - Oracle Fusion Middleware の Oracle WebCenter Content における Content Server に関する脆弱性 CWE-noinfo
情報不足 		CVE-2015-4867 2015-10-22 14:17 2015-10-20 Show GitHub Exploit DB Packet Storm
206948 4 警告 オラクル - Oracle Fusion Middleware の Oracle JDeveloper における ADF Faces に関する脆弱性 CWE-noinfo
情報不足 		CVE-2015-4838 2015-10-22 14:17 2015-10-20 Show GitHub Exploit DB Packet Storm
206949 4.3 警告 オラクル - Oracle Fusion Middleware の Oracle Identity Manager における OIM Legacy UI に関する脆弱性 CWE-noinfo
情報不足 		CVE-2015-4832 2015-10-22 14:17 2015-10-20 Show GitHub Exploit DB Packet Storm
206950 2.6 注意 オラクル - Oracle Fusion Middleware の Oracle HTTP Server における OSSL Module に関する脆弱性 CWE-noinfo
情報不足 		CVE-2015-4812 2015-10-22 14:17 2015-10-20 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 17, 2026, 4:15 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
801 7.5 HIGH
Network 		- - Netty is an asynchronous, event-driven network application framework. From 4.2.0.Final to 4.2.13.Final , Netty's epoll transport fails to detect and close TCP connections that receive a RST after bei… New CWE-772
 Missing Release of Resource after Effective Lifetime 		CVE-2026-42577 2026-05-15 01:26 2026-05-14 Show GitHub Exploit DB Packet Storm
802 - - - Netty is an asynchronous, event-driven network application framework. Prior to 4.2.13.Final and 4.1.133.Final, Netty's HttpProxyHandler constructs HTTP CONNECT requests with header validation explici… New CWE-113
HTTP Response Splitting 		CVE-2026-42578 2026-05-15 01:26 2026-05-14 Show GitHub Exploit DB Packet Storm
803 7.5 HIGH
Network 		- - Netty is an asynchronous, event-driven network application framework. Prior to 4.2.13.Final and 4.1.133.Final, Netty's DNS codec does not enforce RFC 1035 domain name constraints during either encodi… New CWE-20
CWE-400
CWE-626
 Improper Input Validation 
 Uncontrolled Resource Consumption
 Null Byte Interaction Error (Poison Null Byte) 		CVE-2026-42579 2026-05-15 01:26 2026-05-14 Show GitHub Exploit DB Packet Storm
804 6.5 MEDIUM
Network 		- - Netty is an asynchronous, event-driven network application framework. Prior to 4.2.13.Final and 4.1.133.Final, Netty's chunk size parser silently overflows int, enabling request smuggling attacks. Th… New CWE-190
CWE-444
 Integer Overflow or Wraparound
HTTP Request Smuggling 		CVE-2026-42580 2026-05-15 01:26 2026-05-14 Show GitHub Exploit DB Packet Storm
805 7.5 HIGH
Network 		- - Netty is an asynchronous, event-driven network application framework. Prior to 4.2.13.Final, when decoding header blocks, the non-Huffman branch of io.netty.handler.codec.http3.QpackDecoder#decodeHuf… New CWE-770
CWE-789
 Allocation of Resources Without Limits or Throttling
 Memory Allocation with Excessive Size Value 		CVE-2026-42582 2026-05-15 01:26 2026-05-14 Show GitHub Exploit DB Packet Storm
806 7.5 HIGH
Network 		- - Netty is an asynchronous, event-driven network application framework. Prior to 4.2.13.Final and 4.1.133.Final, Lz4FrameDecoder allocates a ByteBuf of size decompressedLength (up to 32 MB per block) b… New CWE-400
CWE-770
 Uncontrolled Resource Consumption
 Allocation of Resources Without Limits or Throttling 		CVE-2026-42583 2026-05-15 01:26 2026-05-14 Show GitHub Exploit DB Packet Storm
807 7.3 HIGH
Network 		- - Netty is an asynchronous, event-driven network application framework. Prior to 4.2.13.Final and 4.1.133.Final, HttpClientCodec pairs each inbound response with an outbound request by queue.poll() onc… New CWE-444
HTTP Request Smuggling 		CVE-2026-42584 2026-05-15 01:26 2026-05-14 Show GitHub Exploit DB Packet Storm
808 5.8 MEDIUM
Network 		- - Netty is an asynchronous, event-driven network application framework. Prior to 4.2.13.Final and 4.1.133.Final, HttpObjectDecoder strips a conflicting Content-Length header when a request carries both… New CWE-444
HTTP Request Smuggling 		CVE-2026-42581 2026-05-15 01:26 2026-05-14 Show GitHub Exploit DB Packet Storm
809 5.3 MEDIUM
Network 		- - Netty is an asynchronous, event-driven network application framework. Prior to 4.2.13.Final and 4.1.133.Final, the MQTT 5 header Properties section is parsed and buffered before any message size limi… New CWE-400
 Uncontrolled Resource Consumption 		CVE-2026-44248 2026-05-15 01:26 2026-05-14 Show GitHub Exploit DB Packet Storm
810 6.5 MEDIUM
Network 		- - Hermes WebUI prior to 0.51.44 - Release T contains a path traversal vulnerability in the session import endpoint that allows authenticated attackers to read arbitrary files by importing a crafted ses… New CWE-22
Path Traversal 		CVE-2026-22677 2026-05-15 01:24 2026-05-14 Show GitHub Exploit DB Packet Storm