Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 27, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
212761	10	危険	レッドハット日立オラクル	-	Oracle Java SE および Java SE Embedded における JNDI に関する脆弱性	CWE-noinfo 情報不足	CVE-2014-0422	2015-03-17 17:39	2014-01-14	Show	GitHub Exploit DB Packet Storm

212762	5.5	警告	レッドハット日立オラクル	-	複数の Oracle Java 製品における Beans に関する脆弱性	CWE-noinfo 情報不足	CVE-2014-0423	2015-03-17 17:39	2014-01-14	Show	GitHub Exploit DB Packet Storm

212763	7.5	危険	レッドハット日立オラクル	-	Oracle Java SE における Deployment に関する脆弱性	CWE-noinfo 情報不足	CVE-2014-0424	2015-03-17 17:38	2014-01-14	Show	GitHub Exploit DB Packet Storm

212764	2.6	注意	アップルサン・マイクロシステムズ日立 IBM オラクル	-	Oracle Java SE における jhat に関する脆弱性	CWE-noinfo 情報不足	CVE-2013-5772	2015-03-17 17:37	2013-10-15	Show	GitHub Exploit DB Packet Storm

212765	6.4	警告	アップルサン・マイクロシステムズ日立 IBM オラクル	-	Oracle Java SE および Java SE Embedded における Libraries に関する脆弱性	CWE-noinfo 情報不足	CVE-2013-3829	2015-03-17 17:36	2013-10-15	Show	GitHub Exploit DB Packet Storm

212766	10	危険	レッドハット日立オラクル	-	Oracle Java SE および Java SE Embedded における CORBA に関する脆弱性	CWE-noinfo 情報不足	CVE-2014-0428	2015-03-17 17:36	2014-01-14	Show	GitHub Exploit DB Packet Storm

212767	5	警告	アップルサン・マイクロシステムズ日立 IBM オラクル	-	Oracle Java SE および Java SE Embedded における Libraries に関する脆弱性	CWE-noinfo 情報不足	CVE-2013-5774	2015-03-17 17:36	2013-10-15	Show	GitHub Exploit DB Packet Storm

212768	5	警告	アップルサン・マイクロシステムズ日立 IBM オラクル	-	Oracle Java SE および Java SE Embedded における Deployment に関する脆弱性	CWE-noinfo 情報不足	CVE-2013-5776	2015-03-17 17:35	2013-10-15	Show	GitHub Exploit DB Packet Storm

212769	4.3	警告	アップルサン・マイクロシステムズ日立 IBM オラクル	-	Oracle Java SE および Java SE Embedded における SCRIPTING に関する脆弱性	CWE-noinfo 情報不足	CVE-2013-5784	2015-03-17 17:35	2013-10-15	Show	GitHub Exploit DB Packet Storm

212770	10	危険	アップルサン・マイクロシステムズ日立 IBM オラクル	-	Oracle Java SE および Java SE Embedded における 2D に関する脆弱性	CWE-noinfo 情報不足	CVE-2013-5829	2015-03-17 17:33	2013-10-15	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 27, 2026, 4:52 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
2321	7.2	HIGH Network	-	-	Vvveb before 1.0.8.3 contains an unrestricted file upload vulnerability in the plugin upload endpoint that allows super_admin users to execute arbitrary PHP code by uploading a malicious plugin ZIP f…	CWE-61 CWE-434 UNIX Symbolic Link (Symlink) Following Unrestricted Upload of File with Dangerous Type	CVE-2026-41937	2026-05-15 01:24	2026-05-15	Show	GitHub Exploit DB Packet Storm

2322	-		-	-	A race condition vulnerability in Palo Alto Networks Prisma® Browser enables a locally authenticated non-admin user to bypass certain access and data control policies.	CWE-754 Improper Check for Unusual or Exceptional Conditions	CVE-2026-0235	2026-05-15 01:21	2026-05-14	Show	GitHub Exploit DB Packet Storm

2323	-		-	-	A code injection vulnerability in Palo Alto Networks Prisma® Browser on macOS fails to properly restrict access to its AppleScript interface allowing a locally authenticated non-admin user to leverag…	CWE-94 Code Injection	CVE-2026-0236	2026-05-15 01:21	2026-05-14	Show	GitHub Exploit DB Packet Storm

2324	-		-	-	A vulnerability in Palo Alto Networks Broker VM allows an authenticated administrator to inject arbitrary content into certain Broker VM fields.	CWE-20 Improper Input Validation	CVE-2026-0238	2026-05-15 01:21	2026-05-14	Show	GitHub Exploit DB Packet Storm

2325	-		-	-	An information disclosure vulnerability in the Chronosphere Chronocollector enables an unauthenticated attacker with network access to the collector service to retrieve sensitive information.	CWE-497 Exposure of Sensitive System Information to an Unauthorized Control Sphere	CVE-2026-0239	2026-05-15 01:21	2026-05-14	Show	GitHub Exploit DB Packet Storm

2326	-		-	-	An information disclosure vulnerability in Trust Protection Foundation enables an authenticated attacker to obtain sensitive information from the server's vault. Successful exploitation of this issue…	CWE-497 Exposure of Sensitive System Information to an Unauthorized Control Sphere	CVE-2026-0240	2026-05-15 01:21	2026-05-14	Show	GitHub Exploit DB Packet Storm

2327	-		-	-	Incorrect Authorization vulnerabilities in Trust Protection Foundation allow attackers to bypass access controls and perform unauthorized actions on restricted resources.	CWE-754 Improper Check for Unusual or Exceptional Conditions	CVE-2026-0241	2026-05-15 01:21	2026-05-14	Show	GitHub Exploit DB Packet Storm

2328	-		-	-	A SQL injection vulnerability in Trust Protection Foundation allows an authenticated attacker to execute arbitrary SQL commands against the product database. Successful exploitation could allow an at…	CWE-89 SQL Injection	CVE-2026-0242	2026-05-15 01:21	2026-05-14	Show	GitHub Exploit DB Packet Storm

2329	-		-	-	An improper certificate validation vulnerability in the Palo Alto Networks Prisma SD-WAN ION enables man-in-the-middle (MitM) attacker to impersonate the controller.	CWE-295 Improper Certificate Validation	CVE-2026-0244	2026-05-15 01:21	2026-05-14	Show	GitHub Exploit DB Packet Storm

2330	-		-	-	Multiple information disclosure vulnerabilities in Prisma Access Agent® allow a local user to access sensitive configuration data and credentials. The Prisma Access Agent on Linux, ChromeOS, Andro…	CWE-200 Information Exposure	CVE-2026-0245	2026-05-15 01:21	2026-05-14	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed