Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 23, 2026, 10:01 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
218361 5.4 警告 blueeleph project - Android 用 blueeleph アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-6777 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
218362 5.4 警告 uanw - Android 用 United Advantage NW Federal Cr アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-6776 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
218363 5.4 警告 animalcenter - Android 用 Light for Pets アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-6775 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
218364 5.4 警告 neorcha - Android 用 USEK アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-6774 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
218365 5.4 警告 bowenehs - Android 用 CIH Quiz game アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-6773 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
218366 5.4 警告 unitedecu - Android 用 United Educational CU アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-6772 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
218367 5.4 警告 uhcu - Android 用 United Heritage Mobile アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-6771 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
218368 5.4 警告 apppasta - Android 用 Aerospace Jobs アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-6770 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
218369 5.4 警告 mobilesoft - Android 用 Meteo Belgique アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-6769 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
218370 5.4 警告 anywhere anytime yoga workout project - Android 用 Anywhere Anytime Yoga Workout アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-6768 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 23, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
3451 8.8 HIGH
Network 		oracle e-business_suite Vulnerability in the Oracle Flow Manufacturing product of Oracle E-Business Suite (component: Security). Supported versions that are affected are 12.2.9-12.2.15. Easily exploitable vulnerability all… CWE-269
 Improper Privilege Management 		CVE-2026-46837 2026-06-4 22:46 2026-05-29 Show GitHub Exploit DB Packet Storm
3452 7.4 HIGH
Network 		oracle e-business_suite Vulnerability in the Oracle Payments product of Oracle E-Business Suite (component: File Transmission). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability al… CWE-284
Improper Access Control 		CVE-2026-46818 2026-06-4 22:46 2026-05-29 Show GitHub Exploit DB Packet Storm
3453 9.8 CRITICAL
Network 		oracle e-business_suite Vulnerability in the Oracle Payments product of Oracle E-Business Suite (component: File Transmission). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allo… CWE-269
CWE-287
CWE-306
 Improper Privilege Management
Improper Authentication
Missing Authentication for Critical Function 		CVE-2026-46817 2026-06-4 22:45 2026-05-29 Show GitHub Exploit DB Packet Storm
3454 4.9 MEDIUM
Network 		progress sitefinity CWE‑522: Insufficiently Protected Credentials in web services in Progress Sitefinity version from 8.0.5700 to 13.3.7652 allows a remote authenticated attacker to obtain plain-text credentials used co… CWE-522
 Insufficiently Protected Credentials 		CVE-2026-7313 2026-06-4 22:12 2026-06-2 Show GitHub Exploit DB Packet Storm
3455 7.5 HIGH
Network 		progress sitefinity CWE‑522: Insufficiently Protected Credentials in web services in Progress Sitefinity version from 14.0.7700 to 14.4.8152, and 15.0.8200 to 15.0.8234, and 15.1.8300 to 15.1.8335, 15.2.8400 to 15.2.844… CWE-522
 Insufficiently Protected Credentials 		CVE-2026-7312 2026-06-4 22:09 2026-06-2 Show GitHub Exploit DB Packet Storm
3456 8.1 HIGH
Network 		progress sitefinity CWE-20: Improper Input Validation in web services in Progress Sitefinity 14.1.x through 14.3.x, 14.4.x before 14.4.8152, 15.0.x before 15.0.8234, 15.1.x before 15.1.8335, 15.2.x before 15.2.8441, 15.… CWE-20
 Improper Input Validation  		CVE-2026-7195 2026-06-4 21:51 2026-06-2 Show GitHub Exploit DB Packet Storm
3457 9.8 CRITICAL
Network 		progress sitefinity CWE-284: Improper Access Control in web services in Progress Sitefinity 15.4.8623 before 15.4.8630 allows a remote unauthenticated attacker to access content that should be restricted, resulting in f… CWE-284
Improper Access Control 		CVE-2026-7198 2026-06-4 21:43 2026-06-2 Show GitHub Exploit DB Packet Storm
3458 8.8 HIGH
Network 		progress sitefinity CWE-639: Authorization Bypass Through User-Controlled Key in web services in Progress Sitefinity 15.2.x before 15.2.8441, 15.3.x before 15.3.8531, and 15.4.x before 15.4.8630 allows a remote authenti… CWE-639
 Authorization Bypass Through User-Controlled Key 		CVE-2026-7201 2026-06-4 21:42 2026-06-2 Show GitHub Exploit DB Packet Storm
3459 5.4 MEDIUM
Network 		- - Wikidforum 2.20 contains a cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts by submitting crafted HTML in the reply_text parameter. Attackers can pos… CWE-79
Cross-site Scripting 		CVE-2018-25384 2026-06-4 12:16 2026-05-30 Show GitHub Exploit DB Packet Storm
3460 9.0 CRITICAL
Network 		- - A flaw was found in Samba. A remote attacker can exploit a misconfiguration in Samba file servers and classic domain controllers that use the "check password script" feature. If this script is config… CWE-78
OS Command  		CVE-2026-4408 2026-06-4 09:16 2026-05-28 Show GitHub Exploit DB Packet Storm