Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
239201 7.5 危険 cadenix - CadeNix の inindex.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-5777 2012-06-26 16:03 2008-12-30 Show GitHub Exploit DB Packet Storm
239202 7.5 危険 apertoblog - Aperto Blog におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2008-5776 2012-06-26 16:03 2008-12-30 Show GitHub Exploit DB Packet Storm
239203 7.5 危険 apertoblog - Aperto Blog の categories.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-5775 2012-06-26 16:03 2008-12-30 Show GitHub Exploit DB Packet Storm
239204 7.5 危険 aspsiteware - ASPSiteWare HomeBuilder における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-5774 2012-06-26 16:03 2008-12-30 Show GitHub Exploit DB Packet Storm
239205 7.5 危険 aspsiteware - ASPSiteWare RealtyListings における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-5772 2012-06-26 16:03 2008-12-30 Show GitHub Exploit DB Packet Storm
239206 7.5 危険 gazatem - gNews Publisher の authors.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-5767 2012-06-26 16:03 2008-12-30 Show GitHub Exploit DB Packet Storm
239207 7.5 危険 fascript - Farsi Script Faupload の download.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-5766 2012-06-26 16:03 2008-12-30 Show GitHub Exploit DB Packet Storm
239208 5 警告 2500mhz - WorkSimple におけるデータベースファイルをダウンロードされる脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2008-5765 2012-06-26 16:03 2008-12-30 Show GitHub Exploit DB Packet Storm
239209 9.3 危険 2500mhz - WorkSimple の calendar.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション
CVE-2008-5764 2012-06-26 16:03 2008-12-30 Show GitHub Exploit DB Packet Storm
239210 4.3 警告 Flatnux - FlatnuX CMS におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2008-5761 2012-06-26 16:03 2008-12-30 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 26, 2026, 4:08 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
921 2.9 LOW
Local
- - Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security). Supported versions that are affected are Oracle Java S… CWE-200
Information Exposure
CVE-2026-34268 2026-04-23 06:24 2026-04-22 Show GitHub Exploit DB Packet Storm
922 6.5 MEDIUM
Network
- - Vulnerability in the PeopleSoft Enterprise FIN Contracts product of Oracle PeopleSoft (component: Contracts). The supported version that is affected is 9.2. Easily exploitable vulnerability allows … CWE-200
Information Exposure
CVE-2026-34300 2026-04-23 06:24 2026-04-22 Show GitHub Exploit DB Packet Storm
923 7.5 HIGH
Network
- - Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking). Supported versions that are affected are Oracle Java… CWE-400
 Uncontrolled Resource Consumption
CVE-2026-34282 2026-04-23 06:24 2026-04-22 Show GitHub Exploit DB Packet Storm
924 2.4 LOW
Network
- - Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that are affected are 19.3-19.30. Easily exploitable vulnerability allows high privileged attacker having Row Acces… CWE-284
Improper Access Control
CVE-2026-34312 2026-04-23 06:24 2026-04-22 Show GitHub Exploit DB Packet Storm
925 7.5 HIGH
Network
- - Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 19.3-19.30 and 21.3-21.21. Easily exploitable vulnerability allows unauthenticated attacke… CWE-284
Improper Access Control
CVE-2026-35229 2026-04-23 06:24 2026-04-22 Show GitHub Exploit DB Packet Storm
926 5.0 MEDIUM
Local
- - Vulnerability in the MySQL Shell product of Oracle MySQL (component: Shell: Core Client). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vuln… CWE-404
 Improper Resource Shutdown or Release
CVE-2026-34317 2026-04-23 06:24 2026-04-22 Show GitHub Exploit DB Packet Storm
927 9.9 CRITICAL
Network
- - Electric is a Postgres sync engine. From 1.1.12 to before 1.5.0, the order_by parameter in the ElectricSQL /v1/shape API is vulnerable to error-based SQL injection, allowing any authenticated user to… CWE-89
SQL Injection
CVE-2026-40906 2026-04-23 06:24 2026-04-22 Show GitHub Exploit DB Packet Storm
928 5.4 MEDIUM
Network
- - Tekton Pipelines project provides k8s-style resources for declaring CI/CD-style pipelines. Prior to 1.11.1, a validation bypass in the VolumeMount path restriction allows mounting volumes under restr… CWE-22
Path Traversal
CVE-2026-40923 2026-04-23 06:24 2026-04-22 Show GitHub Exploit DB Packet Storm
929 5.8 MEDIUM
Network
- - Vulnerability in the MySQL Shell product of Oracle MySQL (component: Shell: Core Client). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Difficult to exploit vu… CWE-200
Information Exposure
CVE-2026-34318 2026-04-23 06:24 2026-04-22 Show GitHub Exploit DB Packet Storm
930 5.0 MEDIUM
Local
- - Vulnerability in the MySQL Shell product of Oracle MySQL (component: Shell: Core Client). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vuln… CWE-204
 Response Discrepancy Information Exposure
CVE-2026-34319 2026-04-23 06:24 2026-04-22 Show GitHub Exploit DB Packet Storm