Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 18, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
251601 4 警告 オラクル - Oracle DB UM Connector for Oracle Identity Manager (Oracle Identity Manager Connector) における脆弱性 CWE-noinfo
情報不足 		CVE-2012-0515 2012-05-9 18:04 2012-04-17 Show GitHub Exploit DB Packet Storm
251602 4.3 警告 オラクル - Oracle JDeveloper における Java Business Objects の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2012-0522 2012-05-9 17:57 2012-04-17 Show GitHub Exploit DB Packet Storm
251603 4.3 警告 オラクル - Oracle BI Publisher における Administration の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2012-0543 2012-05-9 17:54 2012-04-17 Show GitHub Exploit DB Packet Storm
251604 5.5 警告 オラクル - Oracle Identity Manager における User Config Management の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2012-0532 2012-05-9 17:45 2012-04-17 Show GitHub Exploit DB Packet Storm
251605 7.5 危険 オラクル - Oracle WebCenter Forms Recognition における Designer の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2012-1709 2012-05-9 17:40 2012-04-17 Show GitHub Exploit DB Packet Storm
251606 10 危険 サン・マイクロシステムズ
オラクル		 - Oracle JRockit および JDK/JRE における脆弱性 CWE-noinfo
情報不足 		CVE-2012-1695 2012-05-9 17:19 2012-04-17 Show GitHub Exploit DB Packet Storm
251607 4 警告 オラクル - Oracle の Siebel Clinical における Web UI の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2012-1674 2012-05-9 16:46 2012-04-17 Show GitHub Exploit DB Packet Storm
251608 4 警告 オラクル - Oracle の Siebel Clinical における Web UI の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2012-0582 2012-05-9 16:42 2012-04-17 Show GitHub Exploit DB Packet Storm
251609 4.3 警告 オラクル - Oracle の Primavera P6 Enterprise Project Portfolio Management における脆弱性 CWE-noinfo
情報不足 		CVE-2012-0558 2012-05-9 16:28 2012-04-17 Show GitHub Exploit DB Packet Storm
251610 3.5 注意 オラクル - Oracle FLEXCUBE Universal Banking における Core の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2012-0579 2012-05-9 16:23 2012-04-17 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 19, 2026, 4:01 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
6141 - - - Algernon is a small self-contained pure-Go web server. Prior to 1.17.6, uploadedFileSaveIn() in lua/upload/upload.go uses filepath.Join() with the caller-supplied directory but performs no boundary c… CWE-22
Path Traversal 		CVE-2026-43982 2026-05-27 02:16 2026-05-27 Show GitHub Exploit DB Packet Storm
6142 - - - Algernon is a small self-contained pure-Go web server. Prior to 1.17.6, in engine/luahandler.go, the sync.RWMutex protecting LoadCommonFunctions is released before L.Push() and L.PCall() execute. Sin… CWE-362
Race Condition 		CVE-2026-43981 2026-05-27 02:16 2026-05-27 Show GitHub Exploit DB Packet Storm
6143 4.3 MEDIUM
Network 		- - e107 is a content management system (CMS). Prior to 2.3.4, you can access the local environment by specifying the URL of the local environment from "Image/File URL:" of "From a remote location" in "M… CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2026-43936 2026-05-27 02:16 2026-05-27 Show GitHub Exploit DB Packet Storm
6144 8.1 HIGH
Network 		- - e107 is a content management system (CMS). Prior to 2.3.4, a Host Header Injection vulnerability in the password reset page allows attackers to manipulate the Host header to generate password reset l… CWE-20
CWE-807
 Improper Input Validation 
 Reliance on Untrusted Inputs in a Security Decision 		CVE-2026-43935 2026-05-27 02:16 2026-05-27 Show GitHub Exploit DB Packet Storm
6145 - - - A vulnerability in the Google Cloud Apigee SetIntegrationRequest policy allowed remote attackers to perform Server-Side Request Forgery (SSRF) and exfiltrate service account access tokens. For succe… CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2026-2264 2026-05-27 02:16 2026-05-27 Show GitHub Exploit DB Packet Storm
6146 7.8 HIGH
Local 		- - NVIDIA Transformers4Rec for Linux contains a vulnerability where an attacker could cause improper deserialization of untrusted data. A successful exploit of this vulnerability might lead to code exec… CWE-502
 Deserialization of Untrusted Data 		CVE-2026-24162 2026-05-27 02:16 2026-05-27 Show GitHub Exploit DB Packet Storm
6147 5.3 MEDIUM
Network 		concretecms concrete_cms Concrete CMS 9.5.0 and below is vulnerable to IDOR in surveys. To be vulnerable, a site would have to be configured in such a way that both public and private surveys are present on the site. An unau… CWE-565
CWE-639
 Reliance on Cookies without Validation and Integrity Checking
 Authorization Bypass Through User-Controlled Key 		CVE-2026-8337 2026-05-27 02:13 2026-05-22 Show GitHub Exploit DB Packet Storm
6148 9.8 CRITICAL
Network 		- - A vulnerability has been found in Totolink N300RH 6.1c.1353_B20190305. Affected is the function setPasswordCfg of the file /cgi-bin/cstecgi.cgi of the component Web Management Interface. Such manipul… CWE-77
CWE-78
Command Injection
OS Command  		CVE-2026-9543 2026-05-27 01:16 2026-05-26 Show GitHub Exploit DB Packet Storm
6149 3.3 LOW
Local 		- - A weakness has been identified in GNU LibreDWG up to 0.14. The impacted element is the function read_2004_compressed_section of the file src/decode.c of the component Dwgbmp Utility. Executing a mani… CWE-119
CWE-125
Incorrect Access of Indexable Resource ('Range Error') 
Out-of-bounds Read 		CVE-2026-9530 2026-05-27 01:16 2026-05-26 Show GitHub Exploit DB Packet Storm
6150 3.3 LOW
Local 		- - A weakness has been identified in GNU LibreDWG up to 0.14. Affected is the function bit_convert_TU of the file programs/dwggrep.c of the component Dwggrep Utility. This manipulation causes out-of-bou… CWE-119
CWE-125
Incorrect Access of Indexable Resource ('Range Error') 
Out-of-bounds Read 		CVE-2026-9504 2026-05-27 01:16 2026-05-26 Show GitHub Exploit DB Packet Storm