Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 31, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
5021 2.7 低
Network 		オラクル MySQL Server オラクルのMySQL Serverにおける情報漏えいに関する脆弱性 CWE-200
情報漏えい 		CVE-2026-22001 2026-04-24 11:34 2026-04-21 Show GitHub Exploit DB Packet Storm
5022 4.9 警告
Network 		オラクル MySQL Server オラクルのMySQL Serverにおけるリソースの枯渇に関する脆弱性 CWE-400
リソースの枯渇 		CVE-2026-22002 2026-04-24 11:34 2026-04-21 Show GitHub Exploit DB Packet Storm
5023 4.9 警告
Network 		オラクル MySQL Server オラクルのMySQL Serverにおけるリソースの枯渇に関する脆弱性 CWE-400
リソースの枯渇 		CVE-2026-22004 2026-04-24 11:34 2026-04-21 Show GitHub Exploit DB Packet Storm
5024 4.9 警告
Network 		オラクル MySQL Server オラクルのMySQL Serverにおけるリソースの枯渇に関する脆弱性 CWE-400
リソースの枯渇 		CVE-2026-22005 2026-04-24 11:34 2026-04-21 Show GitHub Exploit DB Packet Storm
5025 5.4 警告
Network 		オラクル Peoplesoft Enterprise HCM Human Resources オラクルのPeoplesoft Enterprise HCM Human Resourcesにおける情報漏えいに関する脆弱性 CWE-200
情報漏えい 		CVE-2026-22006 2026-04-24 11:34 2026-04-21 Show GitHub Exploit DB Packet Storm
5026 3.7 低
Network 		オラクル JDK
JRE 		オラクルのJDK等の複数製品における不要な特権による実行に関する脆弱性 CWE-250
不要な特権による実行 		CVE-2026-22008 2026-04-24 11:34 2026-04-21 Show GitHub Exploit DB Packet Storm
5027 6.5 警告
Network 		オラクル MySQL Server オラクルのMySQL Serverにおけるリソースの枯渇に関する脆弱性 CWE-400
リソースの枯渇 		CVE-2026-22009 2026-04-24 11:34 2026-04-21 Show GitHub Exploit DB Packet Storm
5028 7.5 重要
Network 		オラクル Oracle Financial Services Analytical Applications Infrastructure オラクルのOracle Financial Services Analytical Applications Infrastructureにおけるアクセス制御に関する脆弱性 CWE-284
不適切なアクセス制御 		CVE-2026-22010 2026-04-24 11:33 2026-04-21 Show GitHub Exploit DB Packet Storm
5029 7.6 重要
Network 		オラクル Oracle Applications DBA オラクルのOracle Applications DBAにおけるアクセス制御に関する脆弱性 CWE-284
不適切なアクセス制御 		CVE-2026-22011 2026-04-24 11:33 2026-04-21 Show GitHub Exploit DB Packet Storm
5030 3.8 低
Network 		オラクル Oracle User Management オラクルのOracle User Managementにおけるアクセス制御に関する脆弱性 CWE-284
不適切なアクセス制御 		CVE-2026-22014 2026-04-24 11:33 2026-04-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 31, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
351421 - the_collective acuity_cms Cross-site scripting (XSS) vulnerability in Acuity CMS 2.6.2 allows remote attackers to inject arbitrary web script or HTML via unspecified search parameters, possibly strSearchKeywords to browse.asp. NVD-CWE-Other
CVE-2005-4369 2011-03-8 11:28 2005-12-20 Show GitHub Exploit DB Packet Storm
351422 - liquid_bytes_technologies adaptive_website_framework Cross-site scripting (XSS) vulnerability in account.html in Adaptive Website Framework (AWF) 2.10 and earlier allows remote attackers to inject arbitrary web script or HTML via the page parameter. NVD-CWE-Other
CVE-2005-4372 2011-03-8 11:28 2005-12-20 Show GitHub Exploit DB Packet Storm
351423 - allinta allinta Multiple cross-site scripting (XSS) vulnerabilities in Allinta 2.3.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) s parameter to faq.asp and (2) searchQuery p… NVD-CWE-Other
CVE-2005-4374 2011-03-8 11:28 2005-12-20 Show GitHub Exploit DB Packet Storm
351424 - box_uk amaxus Cross-site scripting (XSS) vulnerability in Amaxus 3 and earlier allows remote attackers to inject arbitrary web script or HTML via the change parameter. NOTE: it is possible that this is resultant … NVD-CWE-Other
CVE-2005-4375 2011-03-8 11:28 2005-12-20 Show GitHub Exploit DB Packet Storm
351425 - nma baseline_cms Cross-site scripting (XSS) vulnerability in Page.asp in Baseline CMS 1.95 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) PageID and (2) SiteNodeID parameters. NVD-CWE-Other
CVE-2005-4377 2011-03-8 11:28 2005-12-20 Show GitHub Exploit DB Packet Storm
351426 - nma baseline_cms SQL injection vulnerability in Page.asp in Baseline CMS 1.95 and earlier allows remote attackers to execute arbitrary SQL commands via the SiteNodeID parameter. NVD-CWE-Other
CVE-2005-4378 2011-03-8 11:28 2005-12-20 Show GitHub Exploit DB Packet Storm
351427 - caravel_cms caravel_cms Multiple cross-site scripting (XSS) vulnerabilities in Caravel CMS 3.0 Beta 1 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) fileDN and (2) folderviewer_attrs p… NVD-CWE-Other
CVE-2005-4381 2011-03-8 11:28 2005-12-20 Show GitHub Exploit DB Packet Storm
351428 - cofax cofax Cross-site scripting (XSS) vulnerability in search.htm in Cofax 2.0 RC3 and earlier allows remote attackers to inject arbitrary web script or HTML via the searchstring parameter. NVD-CWE-Other
CVE-2005-4385 2011-03-8 11:28 2005-12-20 Show GitHub Exploit DB Packet Storm
351429 - contenite contenite Cross-site scripting (XSS) vulnerability in home.php in contenite 0.11 and earlier allows remote attackers to inject arbitrary web script or HTML via the id parameter. NVD-CWE-Other
CVE-2005-4387 2011-03-8 11:28 2005-12-20 Show GitHub Exploit DB Packet Storm
351430 - formicary_ltd. epix Cross-site scripting (XSS) vulnerability in EPiX 3.1.2 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified search query parameters. NVD-CWE-Other
CVE-2005-4394 2011-03-8 11:28 2005-12-20 Show GitHub Exploit DB Packet Storm