Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 27, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
4781	6.1	警告 Network	オラクル	Oracle Configurator	オラクルのOracle Configuratorにおけるアクセス制御に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2026-34274	2026-04-24 11:29	2026-04-21	Show	GitHub Exploit DB Packet Storm

4782	6.5	警告 Network	オラクル	MySQL Server	オラクルのMySQL Serverにおけるリソースの枯渇に関する脆弱性	CWE-400 リソースの枯渇	CVE-2026-34276	2026-04-24 11:29	2026-04-21	Show	GitHub Exploit DB Packet Storm

4783	6.6	警告 Network	オラクル	PeopleSoft Enterprise PeopleTools	オラクルのPeopleSoft Enterprise PeopleToolsにおける複数の脆弱性	CWE-284 CWE-400	CVE-2026-34277	2026-04-24 11:29	2026-04-21	Show	GitHub Exploit DB Packet Storm

4784	4.9	警告 Network	オラクル	MySQL Server	オラクルのMySQL Serverにおけるリソースの枯渇に関する脆弱性	CWE-400 リソースの枯渇	CVE-2026-34278	2026-04-24 11:29	2026-04-21	Show	GitHub Exploit DB Packet Storm

4785	6.5	警告 Network	オラクル	Peoplesoft Enterprise HCM Human Resources	オラクルのPeoplesoft Enterprise HCM Human Resourcesにおける重要な機能に対する認証の欠如に関する脆弱性	CWE-306 重要な機能に対する認証の欠如解説	CVE-2026-34280	2026-04-24 11:29	2026-04-21	Show	GitHub Exploit DB Packet Storm

4786	6.5	警告 Local	オラクル	Oracle Solaris	オラクルのOracle Solarisにおけるリソースの枯渇に関する脆弱性	CWE-400 リソースの枯渇	CVE-2026-34281	2026-04-24 11:29	2026-04-21	Show	GitHub Exploit DB Packet Storm

4787	9.1	緊急 Network	オラクル	Oracle Identity Manager Connector	オラクルのOracle Identity Manager Connectorにおける重要な機能に対する認証の欠如に関する脆弱性	CWE-306 重要な機能に対する認証の欠如解説	CVE-2026-34285	2026-04-24 11:29	2026-04-21	Show	GitHub Exploit DB Packet Storm

4788	9.1	緊急 Network	オラクル	Oracle Identity Manager Connector	オラクルのOracle Identity Manager Connectorにおける重要な機能に対する認証の欠如に関する脆弱性	CWE-306 重要な機能に対する認証の欠如解説	CVE-2026-34286	2026-04-24 11:29	2026-04-21	Show	GitHub Exploit DB Packet Storm

4789	9.1	緊急 Network	オラクル	Oracle Identity Manager Connector	オラクルのOracle Identity Manager Connectorにおけるアクセス制御に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2026-34287	2026-04-24 11:29	2026-04-21	Show	GitHub Exploit DB Packet Storm

4790	5.9	警告 Network	オラクル	Oracle Identity Manager Connector	オラクルのOracle Identity Manager Connectorにおける重要な機能に対する認証の欠如に関する脆弱性	CWE-306 重要な機能に対する認証の欠如解説	CVE-2026-34288	2026-04-24 11:29	2026-04-21	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 27, 2026, 4:52 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
181	-		-	-	Lack of output escaping leads to a XSS vector in the content history component. New	CWE-79 Cross-site Scripting	CVE-2026-30894	2026-05-27 02:16	2026-05-27	Show	GitHub Exploit DB Packet Storm

182	-		-	-	A vulnerability in the Google Cloud Apigee SetIntegrationRequest policy allowed remote attackers to perform Server-Side Request Forgery (SSRF) and exfiltrate service account access tokens. For succe… New	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2026-2264	2026-05-27 02:16	2026-05-27	Show	GitHub Exploit DB Packet Storm

183	-		-	-	Lack of output escaping leads to a XSS vector in the multilingual associations component. New	CWE-79 Cross-site Scripting	CVE-2026-25901	2026-05-27 02:16	2026-05-27	Show	GitHub Exploit DB Packet Storm

184	-		-	-	Lack of output escaping leads to a XSS vector in the feed modules. New	CWE-79 Cross-site Scripting	CVE-2026-25900	2026-05-27 02:16	2026-05-27	Show	GitHub Exploit DB Packet Storm

185	7.5	HIGH Adjacent	-	-	NVIDIA Isaac Launchable for Linux contains a vulnerability where sensitive information is transmitted in clear text. A successful exploit of this vulnerability might lead to code execution, escalatio… New	CWE-319 Cleartext Transmission of Sensitive Information	CVE-2026-24212	2026-05-27 02:16	2026-05-27	Show	GitHub Exploit DB Packet Storm

186	7.8	HIGH Local	-	-	NVIDIA Transformers4Rec for Linux contains a vulnerability where an attacker could cause improper deserialization of untrusted data. A successful exploit of this vulnerability might lead to code exec… New	CWE-502 Deserialization of Untrusted Data	CVE-2026-24162	2026-05-27 02:16	2026-05-27	Show	GitHub Exploit DB Packet Storm

187	5.3	MEDIUM Network	-	-	IBM Cloud Pak for Data System - Cyclops 11.3.0.2 through Interim Fix 002 IBM Cloud Pak for Data System uses default passwords default passwords from the manufacturing process for use during the inst… New	CWE-1392 Use of Default Credentials	CVE-2025-36221	2026-05-27 02:16	2026-05-27	Show	GitHub Exploit DB Packet Storm

188	4.3	MEDIUM Network	-	-	IBM Cloud Pak for Data System - Cyclops 11.3.0.2 through Interim Fix 002 IBM Cloud Pak for Data System is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, … New	CWE-89 SQL Injection	CVE-2025-36220	2026-05-27 02:16	2026-05-27	Show	GitHub Exploit DB Packet Storm

189	5.4	MEDIUM Network	-	-	IBM Financial Transaction Manager for SWIFT Services for Multiplatforms 3.2.4.0 through 3.2.4.15 IBM Financial Transaction Manager SWIFT is vulnerable to cross-site scripting. This vulnerability allo… New	CWE-79 Cross-site Scripting	CVE-2025-36148	2026-05-27 02:16	2026-05-27	Show	GitHub Exploit DB Packet Storm

190	5.4	MEDIUM Network	-	-	IBM watsonx.data 2.2 through 2.3.1 IBM Lakehouse does not properly restrict inbound and outbound connections which could allow an attacker to transfer or modify files without restrictions. New	CWE-923 Improper Restriction of Communication Channel to Intended Endpoints	CVE-2025-36145	2026-05-27 02:16	2026-05-27	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed