Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 20, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
209211	10	危険	アップル VMware 日立サン・マイクロシステムズレッドハット	-	Oracle Java SE の Java Runtime Environment (JRE) コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2011-3549	2015-08-11 16:16	2011-10-18	Show	GitHub Exploit DB Packet Storm

209212	10	危険	アップル VMware 日立サン・マイクロシステムズレッドハット	-	Oracle Java SE の Java Runtime Environment (JRE) コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2011-3548	2015-08-11 16:16	2011-10-18	Show	GitHub Exploit DB Packet Storm

209213	5	警告	アップル VMware 日立サン・マイクロシステムズレッドハット	-	Oracle Java SE の Java Runtime Environment (JRE) コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2011-3547	2015-08-11 16:16	2011-10-18	Show	GitHub Exploit DB Packet Storm

209214	5.8	警告	アップルレッドハット VMware サン・マイクロシステムズオラクル	-	Oracle Java SE の Java Runtime Environment (JRE) コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2011-3546	2015-08-11 16:16	2011-10-18	Show	GitHub Exploit DB Packet Storm

209215	10	危険	アップルサン・マイクロシステムズオラクル VMware 日立レッドハット	-	Oracle Java SE の Java Runtime Environment (JRE) コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2011-3545	2015-08-11 16:16	2011-10-18	Show	GitHub Exploit DB Packet Storm

209216	10	危険	アップル VMware サン・マイクロシステムズレッドハット	-	Oracle Java SE の Java Runtime Environment (JRE) コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2011-3544	2015-08-11 16:16	2011-10-18	Show	GitHub Exploit DB Packet Storm

209217	10	危険	アップル VMware 日立サン・マイクロシステムズレッドハット	-	Oracle Java SE の Java Runtime Environment (JRE) コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2011-3521	2015-08-11 16:16	2011-10-18	Show	GitHub Exploit DB Packet Storm

209218	7.6	危険	サン・マイクロシステムズ VMware レッドハット	-	Windows 上で稼働する Oracle Java SE の Java Runtime Environment (JRE) コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2011-3516	2015-08-11 16:16	2011-10-18	Show	GitHub Exploit DB Packet Storm

209219	7.6	危険	アップル日立サン・マイクロシステムズ	-	Oracle Java SE の Java Runtime Environment における JMX の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2012-5089	2015-08-11 15:48	2012-10-16	Show	GitHub Exploit DB Packet Storm

209220	7.6	危険	アップル日立サン・マイクロシステムズ	-	Oracle Java SE の Java Runtime Environment における Swing の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2012-5084	2015-08-11 15:48	2012-10-16	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 21, 2026, 4:10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
2091	7.8	HIGH Local	-	-	Weak authentication in Dynamics Business Central allows an authorized attacker to elevate privileges locally.	CWE-1390 Weak Authentication	CVE-2026-40417	2026-05-14 00:34	2026-05-13	Show	GitHub Exploit DB Packet Storm

2092	7.2	HIGH Network	-	-	An administrative user with access to configure webhooks can execute arbitrary commands by configuring and then triggering webhooks containing specific FreeMarker template syntax. This issue affe…	CWE-77 Command Injection	CVE-2026-8431	2026-05-14 00:34	2026-05-13	Show	GitHub Exploit DB Packet Storm

2093	9.9	CRITICAL Network	-	-	Authorization vulnerability in pgAdmin 4 server mode affecting Server Groups, Servers, Shared Servers, Background Processes, and Debugger modules. Multiple endpoints fetched user-owned objects witho…	CWE-284 Improper Access Control	CVE-2026-7813	2026-05-14 00:34	2026-05-12	Show	GitHub Exploit DB Packet Storm

2094	4.8	MEDIUM Network	-	-	Stored cross-site scripting (XSS) vulnerability in pgAdmin 4 Browser Tree and Explain Visualizer modules. User-controlled PostgreSQL object names (database, schema, table, column, etc.) were assigne…	CWE-79 Cross-site Scripting	CVE-2026-7814	2026-05-14 00:34	2026-05-12	Show	GitHub Exploit DB Packet Storm

2095	8.8	HIGH Network	-	-	SQL injection vulnerability in pgAdmin 4 Maintenance Tool. Four user-supplied JSON fields (buffer_usage_limit, vacuum_parallel, vacuum_index_cleanup, reindex_tablespace) were concatenated directly i…	CWE-89 SQL Injection	CVE-2026-7815	2026-05-14 00:34	2026-05-12	Show	GitHub Exploit DB Packet Storm

2096	8.8	HIGH Network	-	-	OS command injection (CWE-78) vulnerability in pgAdmin 4 Import/Export query export. User-supplied input was interpolated directly into a psql \copy metacommand template without sanitization. An aut…	CWE-89 SQL Injection	CVE-2026-7816	2026-05-14 00:34	2026-05-12	Show	GitHub Exploit DB Packet Storm

2097	6.5	MEDIUM Network	-	-	Local file inclusion (LFI) and server-side request forgery (SSRF) vulnerabilities in pgAdmin 4 LLM API configuration endpoints. User-supplied api_key_file and api_url preferences were passed to the …	CWE-552 Files or Directories Accessible to External Parties	CVE-2026-7817	2026-05-14 00:34	2026-05-12	Show	GitHub Exploit DB Packet Storm

2098	7.0	HIGH Local	-	-	Deserialization of untrusted data (CWE-502) in pgAdmin 4 FileBackedSessionManager. The session manager performed unsafe deserialization of session-file contents (using Python's standard object-seria…	CWE-502 Deserialization of Untrusted Data	CVE-2026-7818	2026-05-14 00:34	2026-05-12	Show	GitHub Exploit DB Packet Storm

2099	8.1	HIGH Network	-	-	Symbolic-link path traversal (CWE-61, CWE-22) in pgAdmin 4 File Manager. check_access_permission used os.path.abspath, which resolves '..' but does not resolve symbolic links, while the subsequent k…	CWE-61 UNIX Symbolic Link (Symlink) Following	CVE-2026-7819	2026-05-14 00:34	2026-05-12	Show	GitHub Exploit DB Packet Storm

2100	6.5	MEDIUM Network	-	-	Improper restriction of excessive authentication attempts (CWE-307) in pgAdmin 4. pgAdmin enforces MAX_LOGIN_ATTEMPTS only inside its custom /authenticate/login view. Flask-Security's default /login…	CWE-307 mproper Restriction of Excessive Authentication Attempts	CVE-2026-7820	2026-05-14 00:34	2026-05-12	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed