Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228111 6.8 警告 サン・マイクロシステムズ
サイバートラスト株式会社
VMware
ヒューレット・パッカード
レッドハット		 - 複数の Oracle 製品の Swing コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-3557 2012-12-19 16:49 2010-10-12 Show GitHub Exploit DB Packet Storm
228112 5.1 警告 レッドハット - OpenShift の 管理コンソールにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2012-5622 2012-12-19 16:42 2012-12-10 Show GitHub Exploit DB Packet Storm
228113 6.5 警告 ownCloud - ownCloud の lib/filesystem.php における任意の PHP コードを実行される脆弱性 CWE-20
CWE-Other
CVE-2012-5610 2012-12-19 16:32 2012-11-13 Show GitHub Exploit DB Packet Storm
228114 6.5 警告 ownCloud - ownCloud の lib/migrate.php における任意の PHP コードを実行される脆弱性 CWE-Other
その他 		CVE-2012-5609 2012-12-19 16:21 2012-11-13 Show GitHub Exploit DB Packet Storm
228115 4.3 警告 ownCloud - ownCloud の apps/user_webdavauth/settings.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-5608 2012-12-19 16:11 2012-11-13 Show GitHub Exploit DB Packet Storm
228116 5 警告 ownCloud - ownCloud の "ロスト・パスワード" リセット機能におけるアカウントのパスワードを変更される脆弱性 CWE-255
証明書・パスワード管理 		CVE-2012-5607 2012-12-19 16:04 2012-10-24 Show GitHub Exploit DB Packet Storm
228117 4.3 警告 ownCloud - ownCloud におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-5606 2012-12-19 15:58 2012-10-24 Show GitHub Exploit DB Packet Storm
228118 10 危険 サン・マイクロシステムズ
サイバートラスト株式会社
VMware
ヒューレット・パッカード
レッドハット		 - 複数の Oracle 製品の 2D コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-3556 2012-12-19 15:48 2010-10-12 Show GitHub Exploit DB Packet Storm
228119 7.5 危険 The GIMP Team - GIMP の X Window Dump プラグインにおけるサービス運用妨害 (クラッシュ) の脆弱性 CWE-119
バッファエラー 		CVE-2012-5576 2012-12-19 15:45 2012-11-7 Show GitHub Exploit DB Packet Storm
228120 6.4 警告 VMware
Apache Software Foundation		 - Apache Struts における任意のファイルを作成または上書きされる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-0393 2012-12-19 15:43 2012-01-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 23, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
731 6.8 MEDIUM
Network 		- - Rate Limiting for attempting a user login is not being properly enforced, making HCL DevOps Velocity susceptible to brute-force attacks past the unsuccessful login attempt limit.  This vulnerability … CWE-307
mproper Restriction of Excessive Authentication Attempts 		CVE-2025-31991 2026-04-18 00:18 2026-04-14 Show GitHub Exploit DB Packet Storm
732 4.3 MEDIUM
Network 		- - The bson_validate function may return early on specific inputs and incorrectly report success. This behavior could result in skipping validation for BSON data, allowing malformed or invalid UTF-8 seq… CWE-20
 Improper Input Validation  		CVE-2026-6231 2026-04-18 00:18 2026-04-14 Show GitHub Exploit DB Packet Storm
733 6.5 MEDIUM
Adjacent 		- - A vulnerability exists in the command handling of the IEC 61850 communication stack included in the product revisions listed as affected in this CVE. An attacker with access to IEC 61850 networks cou… CWE-1284
 Improper Validation of Specified Quantity in Input 		CVE-2025-3756 2026-04-18 00:18 2026-04-14 Show GitHub Exploit DB Packet Storm
734 - - - Use-after-free (UAF) was possible in the `lzma.LZMADecompressor`, `bz2.BZ2Decompressor`, and `gzip.GzipFile` when a memory allocation fails with a `MemoryError` and the decompression instance is re-u… CWE-416
CWE-787
 Use After Free
 Out-of-bounds Write 		CVE-2026-6100 2026-04-18 00:18 2026-04-14 Show GitHub Exploit DB Packet Storm
735 - - - Mitgation of CVE-2026-4519 was incomplete. If the URL contained "%action" the mitigation could be bypassed for certain browser types the "webbrowser.open()" API could have commands injected into the … CWE-77
Command Injection 		CVE-2026-4786 2026-04-18 00:18 2026-04-14 Show GitHub Exploit DB Packet Storm
736 7.5 HIGH
Network 		- - Crypt::SecretBuffer versions before 0.019 for Perl is suseceptible to timing attacks. For example, if Crypt::SecretBuffer was used to store and compare plaintext passwords, then discrepencies in tim… CWE-208
 Information Exposure Through Timing Discrepancy 		CVE-2026-5086 2026-04-18 00:18 2026-04-14 Show GitHub Exploit DB Packet Storm
737 6.1 MEDIUM
Network 		- - Due to a Cross-Site Scripting (XSS) vulnerability in the SAP Supplier Relationship Management (SICF Handler in SRM Catalog), an unauthenticated attacker could craft a malicious URL, that if accessed … CWE-79
Cross-site Scripting 		CVE-2026-0512 2026-04-18 00:18 2026-04-14 Show GitHub Exploit DB Packet Storm
738 4.2 MEDIUM
Network 		- - Due to an Insecure session management vulnerability in SAP Business Objects Business Intelligence Platform, an unauthenticated attacker could obtain valid session tokens and reuse them to gain unauth… CWE-539
 Use of Persistent Cookies Containing Sensitive Information 		CVE-2026-24318 2026-04-18 00:18 2026-04-14 Show GitHub Exploit DB Packet Storm
739 4.3 MEDIUM
Network 		- - The Material Master application does not enforce authorization checks for authenticated users when executing reports, resulting in the disclosure of sensitive information. This vulnerability has a lo… CWE-862
 Missing Authorization 		CVE-2026-27672 2026-04-18 00:18 2026-04-14 Show GitHub Exploit DB Packet Storm
740 4.9 MEDIUM
Network 		- - Due to a missing authorization check, SAP S/4HANA (Private Cloud and On-Premise) allows an authenticated user to delete files on the operating system and gain unauthorized control over file operation… CWE-862
 Missing Authorization 		CVE-2026-27673 2026-04-18 00:18 2026-04-14 Show GitHub Exploit DB Packet Storm