Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 7, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
214551 5 警告 オラクル - Oracle Enterprise Manager Grid Control の Enterprise Manager Base Platform における UI Framework に関する脆弱性 CWE-noinfo
情報不足
CVE-2015-0426 2015-01-21 18:10 2015-01-20 Show GitHub Exploit DB Packet Storm
214552 4.3 警告 オラクル - Oracle Enterprise Manager Grid Control の Enterprise Manager Ops Center における User Interface Framework に関する脆弱性 CWE-noinfo
情報不足
CVE-2014-6573 2015-01-21 18:10 2015-01-20 Show GitHub Exploit DB Packet Storm
214553 6.5 警告 オラクル - Oracle Database Server の OJVM における脆弱性 CWE-noinfo
情報不足
CVE-2015-0373 2015-01-21 16:26 2015-01-20 Show GitHub Exploit DB Packet Storm
214554 4.9 警告 オラクル - Oracle Database Server の Core RDBMS における脆弱性 CWE-noinfo
情報不足
CVE-2015-0371 2015-01-21 16:26 2015-01-20 Show GitHub Exploit DB Packet Storm
214555 3.5 注意 オラクル - Oracle Database Server の Core RDBMS における脆弱性 CWE-noinfo
情報不足
CVE-2015-0370 2015-01-21 16:25 2015-01-20 Show GitHub Exploit DB Packet Storm
214556 6.5 警告 オラクル - Oracle Database Server の Workspace Manager における脆弱性 CWE-noinfo
情報不足
CVE-2014-6578 2015-01-21 16:25 2015-01-20 Show GitHub Exploit DB Packet Storm
214557 6.8 警告 オラクル - Oracle Database Server の XML Developer's Kit for C における脆弱性 CWE-noinfo
情報不足
CVE-2014-6577 2015-01-21 16:25 2015-01-20 Show GitHub Exploit DB Packet Storm
214558 9 危険 オラクル - Oracle Database Server の Core RDBMS における脆弱性 CWE-noinfo
情報不足
CVE-2014-6567 2015-01-21 16:25 2015-01-20 Show GitHub Exploit DB Packet Storm
214559 6.3 警告 オラクル - Oracle Database Server の Recovery における脆弱性 CWE-noinfo
情報不足
CVE-2014-6541 2015-01-21 16:24 2015-01-20 Show GitHub Exploit DB Packet Storm
214560 4 警告 オラクル - Oracle Database Server の PL/SQL における脆弱性 CWE-noinfo
情報不足
CVE-2014-6514 2015-01-21 16:24 2015-01-20 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 7, 2026, 4:13 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2901 6.1 MEDIUM
Network
mistune_project mistune Mistune is a Python Markdown parser with renderers and plugins. Prior to 3.2.1, HTMLRenderer.heading() builds the opening <hN> tag by string-concatenating the id attribute value directly into the HTM… CWE-79
Cross-site Scripting
CVE-2026-44897 2026-05-28 22:42 2026-05-27 Show GitHub Exploit DB Packet Storm
2902 6.1 MEDIUM
Network
mistune_project mistune Mistune is a Python Markdown parser with renderers and plugins. Prior to 3.2.1, render_toc_ul() builds a <ul> table-of-contents tree from a list of (level, id, text) tuples. Both the id value (used a… CWE-79
Cross-site Scripting
CVE-2026-44898 2026-05-28 22:42 2026-05-27 Show GitHub Exploit DB Packet Storm
2903 5.4 MEDIUM
Network
apache shiro Apache Shiro’s Jakarta EE module used the HTTP Referer header in certain cases to issue redirect after a user login. In affected versions, insufficient validation of this client-controlled value coul… CWE-601
Open Redirect
CVE-2026-48589 2026-05-28 22:38 2026-05-26 Show GitHub Exploit DB Packet Storm
2904 6.1 MEDIUM
Network
mistune_project mistune Mistune is a Python Markdown parser with renderers and plugins. Prior to 3.2.1, the Image directive plugin validates the :width: and :height: options with a regex compiled as _num_re = re.compile(r"^… CWE-79
Cross-site Scripting
CVE-2026-44899 2026-05-28 22:38 2026-05-27 Show GitHub Exploit DB Packet Storm
2905 8.8 HIGH
Network
tanium connect Tanium addressed an unauthorized code execution vulnerability in Connect. CWE-78
OS Command 
CVE-2026-9207 2026-05-28 22:31 2026-05-27 Show GitHub Exploit DB Packet Storm
2906 10.0 CRITICAL
Network
free5gc free5gc free5GC is an open-source implementation of the 5G core network. Prior to 4.2.2, free5GC's NEF mounts the nnef-pfdmanagement route group without inbound OAuth2/bearer-token authorization. A network a… CWE-863
 Incorrect Authorization
CVE-2026-44330 2026-05-28 22:06 2026-05-28 Show GitHub Exploit DB Packet Storm
2907 9.9 CRITICAL
Network
- - A flaw was found in KubeVirt's virt-handler component. This vulnerability allows an authenticated OpenShift user with edit permissions in a single namespace to exploit improper symlink validation whe… CWE-59
Link Following
CVE-2026-7374 2026-05-28 12:16 2026-05-26 Show GitHub Exploit DB Packet Storm
2908 7.2 HIGH
Network
apache syncope Improper Isolation or Compartmentalization vulnerability in Apache Syncope. An administrator with adequate entitlements for Implementations can create a malicious Groovy class containing untrusted c… CWE-653
 Improper Isolation or Compartmentalization
CVE-2026-42782 2026-05-28 06:16 2026-05-26 Show GitHub Exploit DB Packet Storm
2909 2.4 LOW
Physics
- - AppLockZ App Lock and Fingerprint Lock (applock.passwordfingerprint.applockz) 4.2.11 for Android allows a local attacker with physical access to bypass the PIN lock. The lock is implemented as an ove… CWE-288
Authentication Bypass Using an Alternate Path or Channel
CVE-2025-68711 2026-05-28 06:16 2026-05-27 Show GitHub Exploit DB Packet Storm
2910 2.4 LOW
Physics
- - Easyelife App lock (aka Fingerprint,Applock or locker.app.safe.applocker) 1.9.2 for Android allows a local attacker with physical access to bypass the PIN lock. The lock is implemented as an overlay … CWE-288
Authentication Bypass Using an Alternate Path or Channel
CVE-2025-68710 2026-05-28 06:16 2026-05-27 Show GitHub Exploit DB Packet Storm