Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 11, 2026, 6:01 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
254231 4.3 警告 オラクル - Oracle OpenSSO Enterprise の OpenSSO コンポーネントにおける脆弱性 CWE-noinfo
情報不足
CVE-2009-3764 2010-08-9 16:48 2010-07-13 Show GitHub Exploit DB Packet Storm
254232 4.3 警告 オラクル - Oracle OpenSSO Enterprise の Access Manager / OpenSSO コンポーネントにおける脆弱性 CWE-noinfo
情報不足
CVE-2009-3763 2010-08-9 16:48 2010-07-13 Show GitHub Exploit DB Packet Storm
254233 5 警告 オラクル - Oracle Sun Convergence における脆弱性 CWE-noinfo
情報不足
CVE-2010-0914 2010-08-9 16:48 2010-07-13 Show GitHub Exploit DB Packet Storm
254234 5.8 警告 オラクル - Oracle Sun Java System Web Proxy Server の管理サーバにおける脆弱性 CWE-noinfo
情報不足
CVE-2010-2385 2010-08-9 16:48 2010-07-13 Show GitHub Exploit DB Packet Storm
254235 2.1 注意 オラクル - Oracle PeopleSoft and JDEdwards Suite の PeopleSoft Enterprise Campus Solutions コンポーネントにおける脆弱性 CWE-noinfo
情報不足
CVE-2010-2403 2010-08-6 18:29 2010-07-13 Show GitHub Exploit DB Packet Storm
254236 3 注意 オラクル - Oracle PeopleSoft and JDEdwards Suite の PeopleSoft Enterprise CRM コンポーネントにおける脆弱性 CWE-noinfo
情報不足
CVE-2010-2378 2010-08-6 18:29 2010-07-13 Show GitHub Exploit DB Packet Storm
254237 4 警告 オラクル - Oracle PeopleSoft and JDEdwards Suite の PeopleSoft Enterprise PeopleTools コンポーネントにおける脆弱性 CWE-noinfo
情報不足
CVE-2010-2377 2010-08-6 18:29 2010-07-13 Show GitHub Exploit DB Packet Storm
254238 4 警告 オラクル - Oracle PeopleSoft and JDEdwards Suite の PeopleSoft Enterprise HCM - Time & Labor コンポーネントにおける脆弱性 CWE-noinfo
情報不足
CVE-2010-2379 2010-08-6 18:29 2010-07-13 Show GitHub Exploit DB Packet Storm
254239 4 警告 オラクル - Oracle PeopleSoft and JDEdwards Suite の PeopleSoft Enterprise HCM コンポーネントにおける脆弱性 CWE-noinfo
情報不足
CVE-2010-2398 2010-08-6 18:28 2010-07-13 Show GitHub Exploit DB Packet Storm
254240 4.3 警告 オラクル - Oracle PeopleSoft and JDEdwards Suite の PeopleSoft Enterprise FSCM コンポーネントにおける脆弱性 CWE-noinfo
情報不足
CVE-2010-2380 2010-08-6 18:28 2010-07-13 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 12, 2026, 5:06 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
4581 8.1 HIGH
Network
- - Control inadecuado del nombre de fichero para la declaración include/require en un programa PHP, vulnerabilidad de 'inclusión remota de ficheros PHP', en jwsthemes StreamVid streamvid permite la incl… CWE-98
 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')
CVE-2026-25379 2026-04-25 01:35 2026-03-26 Show GitHub Exploit DB Packet Storm
4582 8.1 HIGH
Network
- - Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in jwsthemes Feedy feedy allows PHP Local File Inclusion.This issue affects Feedy… CWE-98
 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')
CVE-2026-25380 2026-04-25 01:35 2026-03-26 Show GitHub Exploit DB Packet Storm
4583 8.1 HIGH
Network
- - Control inadecuado del nombre de fichero para la declaración Include/Require en el programa PHP ('PHP inclusión remota de ficheros') vulnerabilidad en jwsthemes Feedy feedy permite PHP inclusión loca… CWE-98
 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')
CVE-2026-25380 2026-04-25 01:35 2026-03-26 Show GitHub Exploit DB Packet Storm
4584 8.1 HIGH
Network
- - Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in jwsthemes LoveDate lovedate allows PHP Local File Inclusion.This issue affects… CWE-98
 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')
CVE-2026-25381 2026-04-25 01:35 2026-03-26 Show GitHub Exploit DB Packet Storm
4585 8.1 HIGH
Network
- - Control inadecuado del nombre de fichero para la declaración include/require en un programa PHP (vulnerabilidad de 'inclusión remota de ficheros PHP') en jwsthemes LoveDate lovedate permite la inclus… CWE-98
 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')
CVE-2026-25381 2026-04-25 01:35 2026-03-26 Show GitHub Exploit DB Packet Storm
4586 8.1 HIGH
Network
- - Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in jwsthemes IdealAuto idealauto allows PHP Local File Inclusion.This issue affec… CWE-98
 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')
CVE-2026-25382 2026-04-25 01:35 2026-03-26 Show GitHub Exploit DB Packet Storm
4587 8.1 HIGH
Network
- - Control inadecuado del nombre de fichero para la declaración Include/Require en el programa PHP ('Inclusión remota de ficheros PHP') vulnerabilidad en jwsthemes IdealAuto idealauto permite la inclusi… CWE-98
 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')
CVE-2026-25382 2026-04-25 01:35 2026-03-26 Show GitHub Exploit DB Packet Storm
4588 7.1 HIGH
Network
- - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Iqonic Design KiviCare kivicare-clinic-management-system allows Reflected XSS.This issue affects … CWE-79
Cross-site Scripting
CVE-2026-25383 2026-04-25 01:35 2026-03-26 Show GitHub Exploit DB Packet Storm
4589 7.1 HIGH
Network
- - Neutralización Incorrecta de la Entrada Durante la Generación de Páginas Web ('cross-site scripting') vulnerabilidad en Iqonic Design KiviCare kivicare-clinic-management-system permite XSS Reflejado.… CWE-79
Cross-site Scripting
CVE-2026-25383 2026-04-25 01:35 2026-03-26 Show GitHub Exploit DB Packet Storm
4590 6.5 MEDIUM
Network
- - Missing Authorization vulnerability in Saad Iqbal New User Approve new-user-approve allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects New User Approve: from n… CWE-862
 Missing Authorization
CVE-2026-25390 2026-04-25 01:35 2026-03-26 Show GitHub Exploit DB Packet Storm