Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 8, 2026, noon

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
3261	5.3	警告 Network	オラクル	MySQL Server	オラクルのMySQL Serverにおける不特定の脆弱性	CWE-noinfo 情報不足	CVE-2026-21929	2026-02-2 19:29	2026-01-20	Show	GitHub Exploit DB Packet Storm

3262	4.9	警告 Network	オラクル	MySQL Cluster MySQL Server	オラクルのMySQL Cluster等の複数製品における不特定の脆弱性	CWE-noinfo 情報不足	CVE-2026-21936	2026-02-2 19:29	2026-01-20	Show	GitHub Exploit DB Packet Storm

3263	4.9	警告 Network	オラクル	MySQL Server	オラクルのMySQL Serverにおける不特定の脆弱性	CWE-noinfo 情報不足	CVE-2026-21937	2026-02-2 19:29	2026-01-20	Show	GitHub Exploit DB Packet Storm

3264	4.9	警告 Network	オラクル	MySQL Server	オラクルのMySQL Serverにおけるリソースの枯渇に関する脆弱性	CWE-400 リソースの枯渇	CVE-2026-21941	2026-02-2 19:29	2026-01-20	Show	GitHub Exploit DB Packet Storm

3265	4.9	警告 Network	オラクル	MySQL Server	オラクルのMySQL Serverにおけるリソースの枯渇に関する脆弱性	CWE-400 リソースの枯渇	CVE-2026-21948	2026-02-2 19:29	2026-01-20	Show	GitHub Exploit DB Packet Storm

3266	6.5	警告 Network	オラクル	MySQL Server	オラクルのMySQL Serverにおけるリソースの枯渇に関する脆弱性	CWE-400 リソースの枯渇	CVE-2026-21949	2026-02-2 19:29	2026-01-20	Show	GitHub Exploit DB Packet Storm

3267	6.5	警告 Network	オラクル	MySQL Server	オラクルのMySQL Serverにおけるリソースの枯渇に関する脆弱性	CWE-400 リソースの枯渇	CVE-2026-21950	2026-02-2 19:29	2026-01-20	Show	GitHub Exploit DB Packet Storm

3268	4.9	警告 Network	オラクル	MySQL Server	オラクルのMySQL Serverにおけるリソースの枯渇に関する脆弱性	CWE-400 リソースの枯渇	CVE-2026-21952	2026-02-2 19:29	2026-01-20	Show	GitHub Exploit DB Packet Storm

3269	6.1	警告 Network	オラクル	PeopleSoft Enterprise HCM Human Resources	オラクルのPeoplesoft Enterprise HCM Human Resourcesにおけるアクセス制御に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2026-21961	2026-02-2 19:29	2026-01-20	Show	GitHub Exploit DB Packet Storm

3270	2.7	低 Network	オラクル	MySQL Server	オラクルのMySQL Serverにおける不特定の脆弱性	CWE-noinfo 情報不足	CVE-2026-21965	2026-02-2 19:29	2026-01-20	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 8, 2026, 4:54 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
301	-		-	-	An authenticated (non-super) administrator can create a maintenance period with a JavaScript payload that is executed by any user that opens tooltip for that maintenance period in the Host navigator … New	CWE-79 Cross-site Scripting	CVE-2026-23926	2026-05-7 23:56	2026-05-6	Show	GitHub Exploit DB Packet Storm

302	-		-	-	A user able to connect to Agent 2 can inject an Oracle TNS connection string via the 'service' parameter. This can lead to Agent 2 connecting to an attacker-controlled server and leaking Oracle datab… New	CWE-522 Insufficiently Protected Credentials	CVE-2026-23927	2026-05-7 23:56	2026-05-6	Show	GitHub Exploit DB Packet Storm

303	-		-	-	The Item history widget (in Zabbix 7.0+) or the Plain text widget (in Zabbix 6.0) can execute injected JavaScript when HTML display is enabled. This can allow an attacker to perform unauthorized acti… New	CWE-79 Cross-site Scripting	CVE-2026-23928	2026-05-7 23:56	2026-05-6	Show	GitHub Exploit DB Packet Storm

304	5.2	MEDIUM Local	-	-	There is a local privilege escalation vulnerability in the ZTE PROCESS Guard service of the cloud computer client, which may allow local arbitrary code execution, privilege escalation and path traver… New	CWE-269 Improper Privilege Management	CVE-2026-40001	2026-05-7 23:56	2026-05-6	Show	GitHub Exploit DB Packet Storm

305	6.3	MEDIUM Local	-	-	A flaw was found in Keylime. An attacker with root access on an enrolled monitored machine, where the Keylime agent runs, can exploit a vulnerability in the Keylime verifier. The verifier uses a hard… New	CWE-1241 Use of Predictable Algorithm in Random Number Generator	CVE-2026-6420	2026-05-7 23:56	2026-05-6	Show	GitHub Exploit DB Packet Storm

306	6.8	MEDIUM Network	-	-	Velociraptor versions prior to 0.76.4 contain a cross organization authorization bypass in the HTTP API. A user with only the reader role in the root organization (the lowest authenticated role, hold… New	CWE-863 Incorrect Authorization	CVE-2026-6863	2026-05-7 23:56	2026-05-7	Show	GitHub Exploit DB Packet Storm

307	5.1	MEDIUM Physics	-	-	ZTE ZX297520V3 BootROM contains a vulnerability that allows arbitrary memory writes via USB. Attackers can exploit the lack of target address validation in the USB download mode to write data to any … New	CWE-787 Out-of-bounds Write	CVE-2026-40003	2026-05-7 23:56	2026-05-7	Show	GitHub Exploit DB Packet Storm

308	5.5	MEDIUM Physics	-	-	There exists an openssl.cnf privilege escalation vulnerability in ZTE Cloud PC client uSmartview. An attacker can execute arbitrary code locally and escalate privileges. New	CWE-427 Uncontrolled Search Path Element	CVE-2026-40004	2026-05-7 23:56	2026-05-7	Show	GitHub Exploit DB Packet Storm

309	7.5	HIGH Network	-	-	When using Google Secrets Manager as a backend for the Spring Cloud Config server a client can craft a request to the config server potentially exposing secrets from unintended GCP projects. Spring C… New	CWE-639 Authorization Bypass Through User-Controlled Key	CVE-2026-40981	2026-05-7 23:56	2026-05-7	Show	GitHub Exploit DB Packet Storm

310	9.1	CRITICAL Network	-	-	Spring Cloud Config allows applications to serve arbitrary text and binary files through the spring-cloud-config-server module. A malicious user, or attacker, can send a request using a specially cra… New	CWE-22 Path Traversal	CVE-2026-40982	2026-05-7 23:56	2026-05-7	Show	GitHub Exploit DB Packet Storm