Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 7, 2026, 2:09 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
252321	3.5	注意	オラクル	-	Oracle Supply Chain Products Suite の Agile Core コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-4429	2011-02-15 13:57	2011-01-18	Show	GitHub Exploit DB Packet Storm

252322	3.5	注意	オラクル	-	Oracle Supply Chain Products Suite の Agile Core コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-3505	2011-02-15 13:55	2011-01-18	Show	GitHub Exploit DB Packet Storm

252323	-	-	オラクル	-	Oracle WebLogic Node Manager に脆弱性	-	-	2011-02-14 15:26	2010-10-13	Show	GitHub Exploit DB Packet Storm

252324	4	警告	オラクル	-	Oracle Applications の Oracle Application Object Library コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-3589	2011-02-14 15:25	2011-01-18	Show	GitHub Exploit DB Packet Storm

252325	4.3	警告	オラクル	-	Oracle Applications の Oracle Common Applications コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-3587	2011-02-14 15:25	2011-01-18	Show	GitHub Exploit DB Packet Storm

252326	6.4	警告	オラクル	-	Oracle Enterprise Manager Grid Control の Real User Experience Insight コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-3594	2011-02-14 15:24	2011-01-18	Show	GitHub Exploit DB Packet Storm

252327	3.5	注意	オラクル	-	Oracle Fusion Middleware の Oracle BI Publisher コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-4427	2011-02-14 15:24	2011-01-18	Show	GitHub Exploit DB Packet Storm

252328	3.5	注意	オラクル	-	Oracle Fusion Middleware の Oracle BI Publisher コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-4425	2011-02-14 15:23	2011-01-18	Show	GitHub Exploit DB Packet Storm

252329	4.3	警告	オラクル	-	Oracle Fusion Middleware の Oracle WebLogic Server コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-4453	2011-02-14 15:15	2011-01-18	Show	GitHub Exploit DB Packet Storm

252330	5	警告	オラクル	-	Oracle Fusion Middleware の Oracle GoldenGate Veridata コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-4416	2011-02-14 15:14	2011-01-18	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 7, 2026, 4:22 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
3461	6.3	MEDIUM Network	-	-	Missing Authorization vulnerability in LiquidThemes Ave Core ave-core allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ave Core: from n/a through <= 2.9.1.	CWE-862 Missing Authorization	CVE-2026-25460	2026-04-25 01:35	2026-03-26	Show	GitHub Exploit DB Packet Storm

3462	6.3	MEDIUM Network	-	-	Vulnerabilidad de autorización faltante en LiquidThemes Ave Core ave-core permite explotar niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a Ave Core: des…	CWE-862 Missing Authorization	CVE-2026-25460	2026-04-25 01:35	2026-03-26	Show	GitHub Exploit DB Packet Storm

3463	7.1	HIGH Network	-	-	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in purethemes Listeo Core listeo-core allows Reflected XSS.This issue affects Listeo Core: from n/a …	CWE-79 Cross-site Scripting	CVE-2026-25461	2026-04-25 01:35	2026-03-26	Show	GitHub Exploit DB Packet Storm

3464	7.1	HIGH Network	-	-	Neutralización Inadecuada de Entrada Durante la Generación de Páginas Web ('cross-site scripting') vulnerabilidad en purethemes Listeo Core listeo-core permite XSS Reflejado. Este problema afecta a L…	CWE-79 Cross-site Scripting	CVE-2026-25461	2026-04-25 01:35	2026-03-26	Show	GitHub Exploit DB Packet Storm

3465	6.5	MEDIUM Network	-	-	Missing Authorization vulnerability in avalex avalex avalex allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects avalex: from n/a through <= 3.1.3.	CWE-862 Missing Authorization	CVE-2026-25462	2026-04-25 01:35	2026-03-26	Show	GitHub Exploit DB Packet Storm

3466	6.5	MEDIUM Network	-	-	Vulnerabilidad de autorización faltante en avalex avalex avalex permite la explotación de niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a avalex: desde …	CWE-862 Missing Authorization	CVE-2026-25462	2026-04-25 01:35	2026-03-26	Show	GitHub Exploit DB Packet Storm

3467	8.1	HIGH Network	-	-	Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in TieLabs Jannah jannah allows PHP Local File Inclusion.This issue affects Janna…	CWE-98 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')	CVE-2026-25464	2026-04-25 01:35	2026-03-26	Show	GitHub Exploit DB Packet Storm

3468	8.1	HIGH Network	-	-	Control inadecuado del nombre de fichero para la declaración Include/Require en el programa PHP, vulnerabilidad ('inclusión remota de ficheros PHP') en TieLabs Jannah jannah permite la inclusión loca…	CWE-98 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')	CVE-2026-25464	2026-04-25 01:35	2026-03-26	Show	GitHub Exploit DB Packet Storm

3469	6.5	MEDIUM Network	-	-	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in codepeople CP Multi View Event Calendar cp-multi-view-calendar allows Stored XSS.This issue affe…	CWE-79 Cross-site Scripting	CVE-2026-25465	2026-04-25 01:35	2026-03-26	Show	GitHub Exploit DB Packet Storm

3470	6.5	MEDIUM Network	-	-	Neutralización Incorrecta de la Entrada Durante la Generación de Páginas Web ('cross-site scripting') vulnerabilidad en codepeople CP Multi View Event Calendar cp-multi-view-calendar permite XSS Alma…	CWE-79 Cross-site Scripting	CVE-2026-25465	2026-04-25 01:35	2026-03-26	Show	GitHub Exploit DB Packet Storm