Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 27, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
212781	5	警告	アップルサン・マイクロシステムズ日立 IBM オラクル	-	Oracle Java SE および Java SE Embedded における Deployment に関する脆弱性	CWE-noinfo 情報不足	CVE-2013-5818	2015-03-17 17:24	2013-10-15	Show	GitHub Exploit DB Packet Storm

212782	5	警告	アップルサン・マイクロシステムズ日立 IBM オラクル	-	Oracle Java SE および Java SE Embedded における Libraries に関する脆弱性	CWE-noinfo 情報不足	CVE-2013-5840	2015-03-17 17:23	2013-10-15	Show	GitHub Exploit DB Packet Storm

212783	10	危険	アップルサン・マイクロシステムズ日立 IBM オラクル	-	Oracle Java SE および Java SE Embedded における Libraries に関する脆弱性	CWE-noinfo 情報不足	CVE-2013-5842	2015-03-17 17:23	2013-10-15	Show	GitHub Exploit DB Packet Storm

212784	10	危険	アップルサン・マイクロシステムズ日立 IBM オラクル	-	複数の Oracle Java 製品における 2D に関する脆弱性	CWE-noinfo 情報不足	CVE-2013-5843	2015-03-17 17:22	2013-10-15	Show	GitHub Exploit DB Packet Storm

212785	5	警告	アップルサン・マイクロシステムズ日立 IBM オラクル	-	Oracle Java SE および Java SE Embedded における Deployment に関する脆弱性	CWE-noinfo 情報不足	CVE-2013-5819	2015-03-17 17:22	2013-10-15	Show	GitHub Exploit DB Packet Storm

212786	5	警告	アップルサン・マイクロシステムズ日立 IBM オラクル	-	Oracle Java SE および Java SE Embedded における JAX-WS に関する脆弱性	CWE-noinfo 情報不足	CVE-2013-5820	2015-03-17 17:22	2013-10-15	Show	GitHub Exploit DB Packet Storm

212787	5	警告	アップルサン・マイクロシステムズ日立 IBM オラクル	-	複数の Oracle Java 製品における Security に関する脆弱性	CWE-noinfo 情報不足	CVE-2013-5823	2015-03-17 17:21	2013-10-15	Show	GitHub Exploit DB Packet Storm

212788	10	危険	アップルサン・マイクロシステムズ日立 IBM オラクル	-	Oracle Java SE および Java SE Embedded における Deployment に関する脆弱性	CWE-noinfo 情報不足	CVE-2013-5824	2015-03-17 17:20	2013-10-15	Show	GitHub Exploit DB Packet Storm

212789	7.5	危険	Schneider Electric	-	Schneider Electric Pelco DS-NVs の DLL におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2015-0982	2015-03-17 15:59	2015-03-6	Show	GitHub Exploit DB Packet Storm

212790	7.5	危険	SCADA Engine	-	SCADA Engine BACnet OPC Server の SOAP Web インターフェースにおける認証を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2015-0981	2015-03-17 15:59	2015-03-10	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 27, 2026, 4:52 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
2301	7.1	HIGH Network	-	-	SOGo before 5.12.7, when PostgreSQL or MariaDB is used, and cleartext passwords are stored, allows SQL injection. This is related to c_password = '%@' in changePasswordForLogin.	CWE-89 SQL Injection	CVE-2026-46446	2026-05-15 01:49	2026-05-14	Show	GitHub Exploit DB Packet Storm

2302	-		-	-	Stored Cross-Site Scripting (XSS) in Stel Order v3.25.1 and earlier, located at the ‘/app/FrontController’ endpoint via the ‘legalName’ and ‘employeeID’ parameters. The lack of proper input sanitizat…	CWE-79 Cross-site Scripting	CVE-2026-5790	2026-05-15 01:46	2026-05-14	Show	GitHub Exploit DB Packet Storm

2303	-		-	-	Unsafe object reference (IDOR) in Stel Order v3.25.1 and earlier versions, specifically in the ‘/app/FrontController’ endpoint, through manipulation of the ‘employeeID’ parameter. An authenticated at…	CWE-639 Authorization Bypass Through User-Controlled Key	CVE-2026-5798	2026-05-15 01:46	2026-05-14	Show	GitHub Exploit DB Packet Storm

2304	9.9	CRITICAL Network	-	-	ERPNext is a free and open source Enterprise Resource Planning tool. Prior to 16.9.1, certain endpoints failed to enforce proper authorization checks, allowing users to modify data beyond their permi…	CWE-862 Missing Authorization	CVE-2026-44442	2026-05-15 01:45	2026-05-14	Show	GitHub Exploit DB Packet Storm

2305	6.5	MEDIUM Network	-	-	ShellHub is a centralized SSH gateway. Prior to 0.24.2, GET /api/namespaces/:tenant returns the full namespace object — including the members list (user IDs, e-mails, roles), settings, and device cou…	CWE-639 Authorization Bypass Through User-Controlled Key	CVE-2026-44426	2026-05-15 01:44	2026-05-14	Show	GitHub Exploit DB Packet Storm

2306	7.5	HIGH Network	mediawiki	mediawiki	Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation MediaWiki. This issue affects MediaWiki: from * before 1.43.7, 1.44.4, 1.45.2.	CWE-200 NVD-CWE-noinfo Information Exposure	CVE-2026-34088	2026-05-15 01:43	2026-05-12	Show	GitHub Exploit DB Packet Storm

2307	7.5	HIGH Network	mediawiki	checkuser	Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation CheckUser. This issue affects CheckUser: from 1.45.0 before 1.45.2.	CWE-200 Information Exposure	CVE-2026-34090	2026-05-15 01:42	2026-05-12	Show	GitHub Exploit DB Packet Storm

2308	7.5	HIGH Network	mediawiki	mediawiki	Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation MediaWiki. This issue affects MediaWiki: from * before 1.43.7, 1.44.4, 1.45.2.	CWE-200 NVD-CWE-noinfo Information Exposure	CVE-2026-34091	2026-05-15 01:42	2026-05-12	Show	GitHub Exploit DB Packet Storm

2309	7.5	HIGH Network	mediawiki	mediawiki	Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/Skin/Skin.Php. This issue…	CWE-200 NVD-CWE-noinfo Information Exposure	CVE-2026-34092	2026-05-15 01:41	2026-05-12	Show	GitHub Exploit DB Packet Storm

2310	6.5	MEDIUM Network	-	-	ERPNext is a free and open source Enterprise Resource Planning tool. Prior to 15.101.1 and 16.10.0, an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability on …	CWE-22 Path Traversal	CVE-2026-44440	2026-05-15 01:29	2026-05-14	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed