Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 8, 2026, 4:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
209401 5.8 警告 オラクル - Oracle Enterprise Manager Grid Control の Enterprise Manager Base Platform における Agent Next Gen に関する脆弱性 CWE-noinfo
情報不足 		CVE-2015-4859 2015-10-22 14:53 2015-10-20 Show GitHub Exploit DB Packet Storm
209402 4.3 警告 オラクル - Oracle E-Business Suite の Oracle Application Object Library における Single Signon に関する脆弱性 CWE-noinfo
情報不足 		CVE-2015-4854 2015-10-22 14:53 2015-10-20 Show GitHub Exploit DB Packet Storm
209403 6.8 警告 オラクル - Oracle E-Business Suite の Oracle iSupplier Portal における XML input に関する脆弱性 CWE-noinfo
情報不足 		CVE-2015-4851 2015-10-22 14:53 2015-10-20 Show GitHub Exploit DB Packet Storm
209404 6.8 警告 オラクル - Oracle E-Business Suite の Oracle Payments における Punch-in に関する脆弱性 CWE-noinfo
情報不足 		CVE-2015-4849 2015-10-22 14:53 2015-10-20 Show GitHub Exploit DB Packet Storm
209405 3.6 注意 オラクル - Oracle E-Business Suite の Oracle Applications Manager における SQL Extensions に関する脆弱性 CWE-noinfo
情報不足 		CVE-2015-4846 2015-10-22 14:53 2015-10-20 Show GitHub Exploit DB Packet Storm
209406 4.3 警告 オラクル - Oracle E-Business Suite の Oracle Application Object Library における Java APIs - AOL/J に関する脆弱性 CWE-noinfo
情報不足 		CVE-2015-4845 2015-10-22 14:53 2015-10-20 Show GitHub Exploit DB Packet Storm
209407 4 警告 オラクル - Oracle E-Business Suite の Oracle Applications DBA における Online patching に関する脆弱性 CWE-noinfo
情報不足 		CVE-2015-4762 2015-10-22 14:53 2015-10-20 Show GitHub Exploit DB Packet Storm
209408 3.6 注意 オラクル - Oracle Enterprise Manager Grid Control の Enterprise Manager Ops Center における Ops Center に関する脆弱性 CWE-noinfo
情報不足 		CVE-2015-2633 2015-10-22 14:53 2015-10-20 Show GitHub Exploit DB Packet Storm
209409 1.2 注意 オラクル - Oracle Hyperion の Hyperion Installation Technology における Essbase Rapid Deploy に関する脆弱性 CWE-noinfo
情報不足 		CVE-2015-4823 2015-10-22 14:50 2015-10-20 Show GitHub Exploit DB Packet Storm
209410 7.5 危険 Mozilla Foundation
オラクル		 - Mozilla Network Security Services におけるデータスマグリング攻撃を実行される脆弱性 CWE-Other
その他 		CVE-2014-1569 2015-10-22 14:20 2014-12-1 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 8, 2026, 4:09 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
3031 - - - A Cross-Site Request Forgery (CSRF) vulnerability was discovered in the delete.php endpoint of Jason2605 AdminPanel 4.0. - CVE-2026-30498 2026-05-28 00:16 2026-05-28 Show GitHub Exploit DB Packet Storm
3032 2.7 LOW
Network 		gtranslate gtranslate Modification of Assumed-Immutable Data (MAID) vulnerability in Drupal Translate Drupal with GTranslate allows Resource Location Spoofing. This issue affects Translate Drupal with GTranslate: from 0.… CWE-471
 Modification of Assumed-Immutable Data (MAID) 		CVE-2026-8492 2026-05-28 00:15 2026-05-20 Show GitHub Exploit DB Packet Storm
3033 9.8 CRITICAL
Network 		date_ical_project date_ical Missing Authorization vulnerability in Drupal Date iCal allows Forceful Browsing. This issue affects Date iCal: from 0.0.0 before 4.0.15. CWE-862
 Missing Authorization 		CVE-2026-8495 2026-05-28 00:14 2026-05-20 Show GitHub Exploit DB Packet Storm
3034 5.4 MEDIUM
Network 		colorbox_inline_project colorbox_inline Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Colorbox Inline allows Cross-Site Scripting (XSS). This issue affects Colorbox Inline: fr… CWE-79
Cross-site Scripting 		CVE-2026-8493 2026-05-28 00:08 2026-05-20 Show GitHub Exploit DB Packet Storm
3035 3.7 LOW
Network 		adcisolutions node_view_permissions Improper Check for Unusual or Exceptional Conditions vulnerability in Drupal Node View Permissions allows Forceful Browsing. This issue affects Node View Permissions: from 0.0.0 before 1.7.0, from 2… CWE-754
 Improper Check for Unusual or Exceptional Conditions 		CVE-2026-8491 2026-05-28 00:00 2026-05-20 Show GitHub Exploit DB Packet Storm
3036 9.1 CRITICAL
Network 		- - Lumiverse is a full-featured AI chat application. Prior to 0.9.7, when the primary toSmbPath(fullPath) call throws, the method falls back to a dirname/basename split and only validates the directory … CWE-88
Argument Injection 		CVE-2026-44449 2026-05-27 23:57 2026-05-27 Show GitHub Exploit DB Packet Storm
3037 9.9 CRITICAL
Network 		- - Lumiverse is a full-featured AI chat application. Prior to 0.9.7, the MCP server creation endpoint validates the command field against an allowlist of binary names but forwards the args array to the … CWE-88
Argument Injection 		CVE-2026-44450 2026-05-27 23:57 2026-05-27 Show GitHub Exploit DB Packet Storm
3038 7.1 HIGH
Network 		- - The EventPress WordPress theme before 22.2 does not sanitize or escape the 'id' parameter in the eventpress_customizer_notify_dismiss_action AJAX handler before outputting it back in the response, al… CWE-79
Cross-site Scripting 		CVE-2026-6268 2026-05-27 23:55 2026-05-27 Show GitHub Exploit DB Packet Storm
3039 8.8 HIGH
Adjacent 		- - An attacker is able to downgrade the security of a Bluetooth LE connection by deleting an existing bond, spoofing the bonded device and creating a new bond. CWE-290
 Authentication Bypass by Spoofing 		CVE-2026-8676 2026-05-27 23:54 2026-05-27 Show GitHub Exploit DB Packet Storm
3040 5.8 MEDIUM
Local 		- - When the director sends a long-running request (e.g. compile_package), the agent's reply JSON is consumed by AgentClient. inject_compile_log (line 332-339) reads response['value']['result']['compile_… CWE-22
Path Traversal 		CVE-2026-41009 2026-05-27 23:54 2026-05-27 Show GitHub Exploit DB Packet Storm