Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 4, 2026, 4 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
218891 3 注意 オラクル - Oracle Virtualization の Oracle VM VirtualBox における Core に関する脆弱性 CWE-noinfo
情報不足
CVE-2014-2486 2014-07-18 16:11 2014-07-15 Show GitHub Exploit DB Packet Storm
218892 3.6 注意 オラクル - Oracle Virtualization の Oracle VM VirtualBox における Core に関する脆弱性 CWE-noinfo
情報不足
CVE-2014-2477 2014-07-18 16:11 2014-07-15 Show GitHub Exploit DB Packet Storm
218893 5 警告 オラクル - Oracle Hyperion の Hyperion Essbase における Agent に関する脆弱性 CWE-noinfo
情報不足
CVE-2014-4271 2014-07-18 15:45 2014-07-15 Show GitHub Exploit DB Packet Storm
218894 4 警告 オラクル - Oracle Hyperion の Hyperion Common Admin における User Interface に関する脆弱性 CWE-noinfo
情報不足
CVE-2014-4270 2014-07-18 15:43 2014-07-15 Show GitHub Exploit DB Packet Storm
218895 4 警告 オラクル - Oracle Hyperion の Hyperion Common Admin における User Interface に関する脆弱性 CWE-noinfo
情報不足
CVE-2014-4269 2014-07-18 15:40 2014-07-15 Show GitHub Exploit DB Packet Storm
218896 3.5 注意 オラクル - Oracle Hyperion の Hyperion Analytic Provider Services における SVP に関する脆弱性 CWE-noinfo
情報不足
CVE-2014-4246 2014-07-18 15:28 2014-07-15 Show GitHub Exploit DB Packet Storm
218897 3.3 注意 オラクル - Oracle Hyperion の Hyperion Enterprise Performance Management Architect における Data Synchronizer に関する脆弱性 CWE-noinfo
情報不足
CVE-2014-4206 2014-07-18 15:25 2014-07-15 Show GitHub Exploit DB Packet Storm
218898 4.1 警告 オラクル - Oracle Hyperion の Hyperion Enterprise Performance Management Architect における Property Editing に関する脆弱性 CWE-noinfo
情報不足
CVE-2014-4203 2014-07-18 15:23 2014-07-15 Show GitHub Exploit DB Packet Storm
218899 4.3 警告 オラクル - Oracle Hyperion の Hyperion BI+ における Web Analysis に関する脆弱性 CWE-noinfo
情報不足
CVE-2014-0436 2014-07-18 15:20 2014-07-15 Show GitHub Exploit DB Packet Storm
218900 7.6 危険 オラクル - Oracle Database Server の Network Layer における脆弱性 CWE-noinfo
情報不足
CVE-2013-3774 2014-07-18 15:13 2013-07-16 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 4, 2026, 4:17 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2101 6.1 MEDIUM
Adjacent
- - Ella Core is a 5G core designed for private networks. Prior to 1.10.0, Ella Core does not verify the UE Security Capabilities received in NGAP PathSwitchRequest messages against its locally stored va… CWE-358
 Improperly Implemented Security Check for Standard
CVE-2026-44475 2026-05-28 02:16 2026-05-28 Show GitHub Exploit DB Packet Storm
2102 3.7 LOW
Adjacent
- - Ella Core is a 5G core designed for private networks. Prior to 1.10.0, Ella Core didn't enforce security rules on concurrent running of security procedures defined in TS 33.501 §6.9.5.1 — it could se… CWE-358
 Improperly Implemented Security Check for Standard
CVE-2026-44474 2026-05-28 02:16 2026-05-28 Show GitHub Exploit DB Packet Storm
2103 7.1 HIGH
Adjacent
- - Ella Core is a 5G core designed for private networks. Prior to 1.10.0, a radio with a valid NG Setup can send a forged PDUSessionResourceSetupResponse carrying any UE's AMF-UE-NGAP-ID. Ella Core does… CWE-358
CWE-863
 Improperly Implemented Security Check for Standard
 Incorrect Authorization
CVE-2026-44473 2026-05-28 02:16 2026-05-28 Show GitHub Exploit DB Packet Storm
2104 - - - A stored cross-site scripting (XSS) vulnerability in the /admin/config-module.php component of creatorsofcode simplephp GitHub commit 5184cff (Latest as of 2026-02-27) via injecting a crafted payload. - CVE-2026-38931 2026-05-28 02:16 2026-05-28 Show GitHub Exploit DB Packet Storm
2105 4.3 MEDIUM
Network
- - Missing Authorization vulnerability in Bizswoop Account Manager for WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Account Manager for WooCom… CWE-862
 Missing Authorization
CVE-2022-41656 2026-05-28 02:16 2026-05-28 Show GitHub Exploit DB Packet Storm
2106 7.5 HIGH
Network
ibm http_server IBM HTTP Server 8.5, and 9.0 CWE-94
Code Injection
CVE-2026-9170 2026-05-28 02:07 2026-05-27 Show GitHub Exploit DB Packet Storm
2107 9.8 CRITICAL
Network
microsoft power_pages Improper neutralization of special elements used in a command ('command injection') in Microsoft Power Pages allows an unauthorized attacker to execute code over a network. CWE-77
Command Injection
CVE-2026-23652 2026-05-28 02:01 2026-05-23 Show GitHub Exploit DB Packet Storm
2108 9.8 CRITICAL
Network
microsoft entra_id Authentication bypass using an alternate path or channel in Microsoft Azure Active Directory B2C allows an unauthorized attacker to elevate privileges over a network. CWE-288
Authentication Bypass Using an Alternate Path or Channel
CVE-2026-33843 2026-05-28 01:50 2026-05-23 Show GitHub Exploit DB Packet Storm
2109 8.8 HIGH
Network
microsoft azure_privileged_identity_management Authorization bypass through user-controlled key in Azure Privileged Identity Management (PIM) allows an authorized attacker to elevate privileges over a network. CWE-639
 Authorization Bypass Through User-Controlled Key
CVE-2026-35430 2026-05-28 01:48 2026-05-23 Show GitHub Exploit DB Packet Storm
2110 8.8 HIGH
Network
microsoft azure_virtual_network_gateway Improper input validation in Azure Virtual Network Gateway allows an authorized attacker to execute code over a network. CWE-20
NVD-CWE-noinfo
 Improper Input Validation 
CVE-2026-40411 2026-05-28 01:47 2026-05-23 Show GitHub Exploit DB Packet Storm