Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 4, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
208951 4.3 警告 ブルーコートシステムズ - Blue Coat Malware Analysis Appliance のソフトウェアの search.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2015-0937 2015-04-20 17:00 2015-04-16 Show GitHub Exploit DB Packet Storm
208952 6.5 警告 オラクル - Oracle Supply Chain Products Suite の Oracle Demand Planning における Security に関する脆弱性 CWE-noinfo
情報不足
CVE-2015-2570 2015-04-20 16:16 2015-04-14 Show GitHub Exploit DB Packet Storm
208953 4.9 警告 オラクル - Oracle Supply Chain Products Suite の Oracle Agile Engineering Data Management における BAS - Base コンポーネントに関する脆弱性 CWE-noinfo
情報不足
CVE-2015-0490 2015-04-20 16:16 2015-04-14 Show GitHub Exploit DB Packet Storm
208954 4 警告 オラクル - Oracle Supply Chain Products Suite の Oracle Transportation Management における UI Infrastructure に関する脆弱性 CWE-noinfo
情報不足
CVE-2015-0465 2015-04-20 16:16 2015-04-14 Show GitHub Exploit DB Packet Storm
208955 5 警告 オラクル - Oracle Supply Chain Products Suite の Oracle Transportation Management における Security に関する脆弱性 CWE-noinfo
情報不足
CVE-2015-0464 2015-04-20 16:16 2015-04-14 Show GitHub Exploit DB Packet Storm
208956 4 警告 オラクル - Oracle Supply Chain Products Suite の Oracle Transportation Management における Security に関する脆弱性 CWE-noinfo
情報不足
CVE-2015-0463 2015-04-20 16:16 2015-04-14 Show GitHub Exploit DB Packet Storm
208957 4 警告 オラクル - Oracle Supply Chain Products Suite の Oracle Transportation Management における Security に関する脆弱性 CWE-noinfo
情報不足
CVE-2015-0462 2015-04-20 16:16 2015-04-14 Show GitHub Exploit DB Packet Storm
208958 2.1 注意 オラクル - Oracle Health Sciences Applications の Oracle Health Sciences Argus Safety における BIP Installer に関する脆弱性 CWE-noinfo
情報不足
CVE-2015-2579 2015-04-20 14:04 2015-04-14 Show GitHub Exploit DB Packet Storm
208959 4.3 警告 オラクル - Oracle Commerce Platform における Dynamo Application Framework - HTML Admin User Interface に関する脆弱性 CWE-noinfo
情報不足
CVE-2015-0510 2015-04-20 14:04 2015-04-14 Show GitHub Exploit DB Packet Storm
208960 4.3 警告 オラクル - Oracle Retail Applications の Oracle Retail Central Office における脆弱性 CWE-noinfo
情報不足
CVE-2015-0494 2015-04-20 14:04 2015-04-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 5, 2026, 4:51 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
551 - - - CVE-2026-33448 is a format string vulnerability in the logging subsystem of Secure Access client for MacOS prior to 14.50. Attackers with control of a modified server can force the client to dump t… New CWE-200
Information Exposure
CVE-2026-33448 2026-05-2 00:28 2026-05-1 Show GitHub Exploit DB Packet Storm
552 - - - CVE-2026-33449 is a buffer overflow in a message handling function of the Secure Access client prior to 14.50. Attackers with control of a modified server can send a cryptographically valid message… New CWE-121
Stack-based Buffer Overflow
CVE-2026-33449 2026-05-2 00:28 2026-05-1 Show GitHub Exploit DB Packet Storm
553 - - - CVE-2026-33450 is an out of bounds read vulnerability in the Secure Access MacOS client prior to 14.50. Attackers with control of a modified server can send a malformed packet to the client causing… New CWE-125
Out-of-bounds Read
CVE-2026-33450 2026-05-2 00:28 2026-05-1 Show GitHub Exploit DB Packet Storm
554 - - - CVE-2026-33451 is an arbitrary read/write vulnerability in the Secure Access Windows client prior to 14.50. Attackers with local control of the Windows client can send malformed data to an API and … New CWE-125
Out-of-bounds Read
CVE-2026-33451 2026-05-2 00:28 2026-05-1 Show GitHub Exploit DB Packet Storm
555 - - - CVE-2026-33452 is a buffer overflow vulnerability in the Secure Access Windows client prior to 14.50. Attackers with local control of the Windows client can use it to ‘blue screen’ the system. New CWE-121
Stack-based Buffer Overflow
CVE-2026-33452 2026-05-2 00:28 2026-05-1 Show GitHub Exploit DB Packet Storm
556 - - - CVE-2026-40949 is a buffer overflow vulnerability in the Secure Access Windows client prior to 14.50. Attackers with local control of the Windows client can use it to trigger a denial of service. New CWE-121
Stack-based Buffer Overflow
CVE-2026-40949 2026-05-2 00:28 2026-05-1 Show GitHub Exploit DB Packet Storm
557 - - - CVE-2026-40950 is a buffer overflow vulnerability in the Secure Access server prior to 14.50. Attackers with control of a modified client can send a specially crafted message to the server and caus… New CWE-121
Stack-based Buffer Overflow
CVE-2026-40950 2026-05-2 00:28 2026-05-1 Show GitHub Exploit DB Packet Storm
558 7.3 HIGH
Network
mozilla firefox
thunderbird
Memory safety bugs present in Thunderbird 150.0.0. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitr… Update CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2026-7324 2026-05-2 00:27 2026-04-29 Show GitHub Exploit DB Packet Storm
559 6.5 MEDIUM
Network
- - IBM Langflow Desktop 1.0.0 through 1.8.4 IBM Langflow is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, pote… New CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2026-3340 2026-05-2 00:27 2026-05-1 Show GitHub Exploit DB Packet Storm
560 6.4 MEDIUM
Network
- - IBM Langflow Desktop 1.6.0 through 1.8.4 Lanflow is vulnerable to stored cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus al… New CWE-89
SQL Injection
CVE-2026-3346 2026-05-2 00:27 2026-05-1 Show GitHub Exploit DB Packet Storm