Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":April 30, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
252841 4.3 警告 オラクル - Oracle Enterprise Manager Grid Control の Console コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-2373 2010-08-5 16:33 2010-07-13 Show GitHub Exploit DB Packet Storm
252842 4.3 警告 オラクル - Oracle Fusion Middleware の Oracle Business Process Management コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-2370 2010-08-5 16:33 2010-07-13 Show GitHub Exploit DB Packet Storm
252843 5 警告 オラクル - Oracle Secure Backup における脆弱性 CWE-noinfo
情報不足 		CVE-2010-0904 2010-08-5 16:33 2010-07-13 Show GitHub Exploit DB Packet Storm
252844 9 危険 オラクル - Oracle Secure Backup における脆弱性 CWE-noinfo
情報不足 		CVE-2010-0906 2010-08-5 16:32 2010-07-13 Show GitHub Exploit DB Packet Storm
252845 9 危険 オラクル - Oracle Secure Backup における脆弱性 CWE-noinfo
情報不足 		CVE-2010-0899 2010-08-5 16:32 2010-07-13 Show GitHub Exploit DB Packet Storm
252846 10 危険 オラクル - Oracle Secure Backup における脆弱性 CWE-noinfo
情報不足 		CVE-2010-0907 2010-08-5 16:32 2010-07-13 Show GitHub Exploit DB Packet Storm
252847 10 危険 オラクル - Oracle Secure Backup における脆弱性 CWE-noinfo
情報不足 		CVE-2010-0898 2010-08-5 16:31 2010-07-13 Show GitHub Exploit DB Packet Storm
252848 5 警告 オラクル - Oracle TimesTen In-Memory Database の Data Server コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-0910 2010-08-5 16:31 2010-07-13 Show GitHub Exploit DB Packet Storm
252849 10 危険 オラクル - Oracle TimesTen In-Memory Database の Data Server コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-0873 2010-08-5 16:30 2010-07-13 Show GitHub Exploit DB Packet Storm
252850 3.2 注意 オラクル - Oracle Solaris における Solaris Management コンソールの処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2010-2384 2010-08-4 16:26 2010-07-13 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 30, 2026, 4:58 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
3071 8.6 HIGH
Network 		- - Server-side request forgery (ssrf) in Microsoft Purview allows an unauthorized attacker to elevate privileges over a network. CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2026-26150 2026-04-24 23:41 2026-04-24 Show GitHub Exploit DB Packet Storm
3072 3.7 LOW
Network 		- - A request smuggling vulnerability exists in libsoup's HTTP/1 header parsing logic. The soup_message_headers_append_common() function in libsoup/soup-message-headers.c unconditionally appends each hea… CWE-444
HTTP Request Smuggling 		CVE-2026-2708 2026-04-24 23:41 2026-04-24 Show GitHub Exploit DB Packet Storm
3073 8.0 HIGH
Network 		- - Uncontrolled search path element in Microsoft Power Apps allows an unauthorized attacker to execute code over a network. CWE-427
 Uncontrolled Search Path Element 		CVE-2026-32172 2026-04-24 23:41 2026-04-24 Show GitHub Exploit DB Packet Storm
3074 9.3 CRITICAL
Network 		- - Server-side request forgery (ssrf) in Microsoft Dynamics 365 (Online) allows an unauthorized attacker to perform spoofing over a network. CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2026-32210 2026-04-24 23:41 2026-04-24 Show GitHub Exploit DB Packet Storm
3075 9.3 CRITICAL
Network 		- - Url redirection to untrusted site ('open redirect') in M365 Copilot allows an unauthorized attacker to elevate privileges over a network. CWE-601
Open Redirect 		CVE-2026-33102 2026-04-24 23:41 2026-04-24 Show GitHub Exploit DB Packet Storm
3076 10.0 CRITICAL
Network 		- - Deserialization of untrusted data in Microsoft Bing allows an unauthorized attacker to execute code over a network. CWE-502
 Deserialization of Untrusted Data 		CVE-2026-33819 2026-04-24 23:41 2026-04-24 Show GitHub Exploit DB Packet Storm
3077 8.1 HIGH
Network 		- - OpenClaw before 2026.3.22 contains an access control bypass vulnerability in the allowProfiles feature that allows attackers to circumvent profile restrictions through persistent profile mutation and… CWE-472
 External Control of Assumed-Immutable Web Parameter 		CVE-2026-41353 2026-04-24 23:40 2026-04-24 Show GitHub Exploit DB Packet Storm
3078 3.7 LOW
Network 		- - OpenClaw before 2026.4.2 contains an insufficient scope vulnerability in Zalo webhook replay dedupe keys that allows legitimate events from different conversations or senders to collide. Attackers ca… CWE-706
 Use of Incorrectly-Resolved Name or Reference 		CVE-2026-41354 2026-04-24 23:40 2026-04-24 Show GitHub Exploit DB Packet Storm
3079 7.3 HIGH
Local 		- - OpenShell before 2026.3.28 contains an arbitrary code execution vulnerability in mirror mode that converts untrusted sandbox files into workspace hooks. Attackers with mirror mode access can execute … CWE-829
 Inclusion of Functionality from Untrusted Control Sphere 		CVE-2026-41355 2026-04-24 23:40 2026-04-24 Show GitHub Exploit DB Packet Storm
3080 5.4 MEDIUM
Network 		- - OpenClaw before 2026.4.2 fails to filter Slack thread context by sender allowlist, allowing non-allowlisted messages to enter agent context. Attackers can inject unauthorized thread messages through … CWE-346
 Origin Validation Error 		CVE-2026-41358 2026-04-24 23:40 2026-04-24 Show GitHub Exploit DB Packet Storm