Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 1, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
252581 5 警告 オラクル - Oracle Fusion Middleware の OID コンポーネントにおける脆弱性 CWE-noinfo
情報不足
CVE-2010-3501 2010-11-1 15:39 2010-10-12 Show GitHub Exploit DB Packet Storm
252582 1 注意 オラクル - 複数の Oracle 製品の Perl コンポーネントにおける脆弱性 CWE-noinfo
情報不足
CVE-2010-2389 2010-11-1 15:38 2010-10-12 Show GitHub Exploit DB Packet Storm
252583 3.6 注意 オラクル - Oracle Database Server の Core RDBMS コンポーネントにおける脆弱性 CWE-noinfo
情報不足
CVE-2010-2391 2010-11-1 15:37 2010-10-12 Show GitHub Exploit DB Packet Storm
252584 4.3 警告 オラクル - Oracle Database Server の XDK コンポーネントにおける脆弱性 CWE-noinfo
情報不足
CVE-2010-2407 2010-11-1 15:37 2010-10-12 Show GitHub Exploit DB Packet Storm
252585 6.8 警告 Vim - GVim における DLL 読み込みに関する脆弱性 CWE-Other
その他
CVE-2010-3914 2010-11-1 12:00 2010-11-1 Show GitHub Exploit DB Packet Storm
252586 9.3 危険 オラクル - Oracle Siebel Option Pack for IE の ActiveX コントロールのメモリ初期化処理に脆弱性 CWE-94
コード・インジェクション
CVE-2009-3737 2010-10-29 16:43 2010-08-9 Show GitHub Exploit DB Packet Storm
252587 4.6 警告 オラクル - Oracle Database Server の Job Queue コンポーネントにおける脆弱性 CWE-noinfo
情報不足
CVE-2010-2411 2010-10-29 16:35 2010-10-12 Show GitHub Exploit DB Packet Storm
252588 4.9 警告 オラクル - Oracle Database Server の Change Data Capture コンポーネントにおける脆弱性 CWE-noinfo
情報不足
CVE-2010-2415 2010-10-29 16:34 2010-10-12 Show GitHub Exploit DB Packet Storm
252589 5.5 警告 オラクル - Oracle Database Server の OLAP コンポーネントにおける脆弱性 CWE-noinfo
情報不足
CVE-2010-2412 2010-10-29 16:34 2010-10-12 Show GitHub Exploit DB Packet Storm
252590 6.5 警告 オラクル - Oracle Database Server の Java Virtual Machine コンポーネントにおける脆弱性 CWE-noinfo
情報不足
CVE-2010-2419 2010-10-29 16:34 2010-10-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 2, 2026, 4:08 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2521 5.3 MEDIUM
Network
- - The Page Builder: Pagelayer – Drag and Drop website builder plugin for WordPress is vulnerable to Improper Neutralization of CRLF Sequences ('CRLF Injection') in all versions up to, and including, 2.… CWE-93
CRLF Injection
CVE-2026-2442 2026-04-25 01:36 2026-03-28 Show GitHub Exploit DB Packet Storm
2522 5.3 MEDIUM
Network
- - El Page Builder: Pagelayer – plugin constructor de sitios web de arrastrar y soltar para WordPress es vulnerable a la Neutralización Incorrecta de Secuencias CRLF ('Inyección CRLF') en todas las vers… CWE-93
CRLF Injection
CVE-2026-2442 2026-04-25 01:36 2026-03-28 Show GitHub Exploit DB Packet Storm
2523 3.5 LOW
Adjacent
- - Se encontró una vulnerabilidad en wandb OpenUI hasta 1.0/3.5-turb. Afecta a la función generic_exception_handler del archivo backend/openui/server.py del componente Gestor de APIStatusError. La manip… CWE-200
CWE-209
Information Exposure
Information Exposure Through an Error Message
CVE-2026-4994 2026-04-25 01:36 2026-03-28 Show GitHub Exploit DB Packet Storm
2524 3.5 LOW
Network
- - A vulnerability was determined in wandb OpenUI up to 1.0. Affected by this vulnerability is an unknown functionality of the file frontend/public/annotator/index.html of the component Window Message E… CWE-79
CWE-94
Cross-site Scripting
Code Injection
CVE-2026-4995 2026-04-25 01:36 2026-03-28 Show GitHub Exploit DB Packet Storm
2525 3.5 LOW
Network
- - Se determinó una vulnerabilidad en wandb OpenUI hasta la versión 1.0. Afectada por esta vulnerabilidad es una funcionalidad desconocida del archivo frontend/public/annotator/index.html del componente… CWE-79
CWE-94
Cross-site Scripting
Code Injection
CVE-2026-4995 2026-04-25 01:36 2026-03-28 Show GitHub Exploit DB Packet Storm
2526 5.4 MEDIUM
Network
- - The Quads Ads Manager for Google AdSense plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 2.0.98.1 due to insufficient input sanitization and output… CWE-79
Cross-site Scripting
CVE-2026-2595 2026-04-25 01:36 2026-03-28 Show GitHub Exploit DB Packet Storm
2527 5.4 MEDIUM
Network
- - El plugin Quads Ads Manager para Google AdSense para WordPress es vulnerable a cross-site scripting almacenado en versiones hasta la 2.0.98.1, inclusive, debido a una sanitización de entrada y un esc… CWE-79
Cross-site Scripting
CVE-2026-2595 2026-04-25 01:36 2026-03-28 Show GitHub Exploit DB Packet Storm
2528 7.3 HIGH
Network
- - A vulnerability was identified in Sinaptik AI PandasAI up to 0.1.4. Affected by this issue is the function delete_question_and_answers/delete_docs/update_question_answer/update_docs/get_relevant_ques… CWE-74
CWE-89
Injection
SQL Injection
CVE-2026-4996 2026-04-25 01:36 2026-03-28 Show GitHub Exploit DB Packet Storm
2529 7.3 HIGH
Network
- - Una vulnerabilidad fue identificada en Sinaptik AI PandasAI hasta 0.1.4. Afectada por este problema es la función delete_question_and_answers/delete_docs/update_question_answer/update_docs/get_releva… CWE-74
CWE-89
Injection
SQL Injection
CVE-2026-4996 2026-04-25 01:36 2026-03-28 Show GitHub Exploit DB Packet Storm
2530 5.3 MEDIUM
Network
- - A security flaw has been discovered in Sinaptik AI PandasAI up to 3.0.0. This affects the function is_sql_query_safe of the file pandasai/helpers/sql_sanitizer.py. Performing a manipulation results i… CWE-22
Path Traversal
CVE-2026-4997 2026-04-25 01:36 2026-03-28 Show GitHub Exploit DB Packet Storm