Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
581 4.8 警告
Network
オラクル JDK
Oracle GraalVM for JDK
JRE
Oracle GraalVM
オラクルのOracle GraalVM等の複数製品における不特定の脆弱性 CWE-noinfo
情報不足
CVE-2026-21925 2026-02-2 19:36 2026-01-20 Show GitHub Exploit DB Packet Storm
582 5.8 警告
Local
オラクル Oracle Solaris オラクルのOracle Solarisにおける不特定の脆弱性 CWE-noinfo
情報不足
CVE-2026-21927 2026-02-2 19:36 2026-01-20 Show GitHub Exploit DB Packet Storm
583 5.3 警告
Network
オラクル Oracle Solaris オラクルのOracle Solarisにおける不特定の脆弱性 CWE-noinfo
情報不足
CVE-2026-21928 2026-02-2 19:36 2026-01-20 Show GitHub Exploit DB Packet Storm
584 2.3
Local
オラクル Sun ZFS Storage Appliance Kit オラクルのSun ZFS Storage Appliance Kitにおける不特定の脆弱性 CWE-noinfo
情報不足
CVE-2026-21930 2026-02-2 19:36 2026-01-20 Show GitHub Exploit DB Packet Storm
585 5.4 警告
Network
オラクル apex オラクルのapexにおける不特定の脆弱性 CWE-noinfo
情報不足
CVE-2026-21931 2026-02-2 19:36 2026-01-20 Show GitHub Exploit DB Packet Storm
586 7.4 重要
Network
オラクル JDK
Oracle GraalVM for JDK
JRE
Oracle GraalVM
オラクルのOracle GraalVM等の複数製品における不特定の脆弱性 CWE-noinfo
情報不足
CVE-2026-21932 2026-02-2 19:36 2026-01-20 Show GitHub Exploit DB Packet Storm
587 6.1 警告
Network
オラクル JDK
Oracle GraalVM for JDK
JRE
Oracle GraalVM
オラクルのOracle GraalVM等の複数製品における不特定の脆弱性 CWE-noinfo
情報不足
CVE-2026-21933 2026-02-2 19:36 2026-01-20 Show GitHub Exploit DB Packet Storm
588 5.4 警告
Network
オラクル PeopleSoft Enterprise PeopleTools オラクルのPeopleSoft Enterprise PeopleToolsにおける不特定の脆弱性 CWE-noinfo
情報不足
CVE-2026-21934 2026-02-2 19:36 2026-01-20 Show GitHub Exploit DB Packet Storm
589 5.8 警告
Local
オラクル Oracle Solaris オラクルのOracle Solarisにおける不特定の脆弱性 CWE-noinfo
情報不足
CVE-2026-21935 2026-02-2 19:35 2026-01-20 Show GitHub Exploit DB Packet Storm
590 5.4 警告
Network
オラクル PeopleSoft Enterprise PeopleTools オラクルのPeopleSoft Enterprise PeopleToolsにおける不特定の脆弱性 CWE-noinfo
情報不足
CVE-2026-21938 2026-02-2 19:35 2026-01-20 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 25, 2026, 4:08 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
306521 - oracle application_object_library
e-business_suite
Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 12.0.4 has unknown impact and remote authenticated attack vectors, a different vulnerability th… NVD-CWE-noinfo
CVE-2008-2606 2016-11-22 11:59 2008-07-16 Show GitHub Exploit DB Packet Storm
306522 - oracle fusion_middleware Unspecified vulnerability in the Portal component in Oracle Fusion Middleware 10.1.2.3 allows remote attackers to affect integrity via unknown vectors, a different vulnerability than CVE-2010-0855. NVD-CWE-noinfo
CVE-2010-0086 2016-11-19 12:02 2010-04-14 Show GitHub Exploit DB Packet Storm
306523 - oracle fusion_middleware Unspecified vulnerability in the Portal component in Oracle Fusion Middleware 10.1.2.3 allows remote attackers to affect integrity via unknown vectors, a different vulnerability than CVE-2010-0086. NVD-CWE-noinfo
CVE-2010-0855 2016-11-19 12:02 2010-04-14 Show GitHub Exploit DB Packet Storm
306524 - viewcvs viewcvs Cross-site scripting vulnerability in viewcvs.cgi for ViewCVS 0.9.2 allows remote attackers to inject script and steal cookies via the (1) cvsroot or (2) sortby parameters. NVD-CWE-Other
CVE-2002-0771 2016-11-19 11:59 2002-08-12 Show GitHub Exploit DB Packet Storm
306525 - phpmyadmin phpmyadmin PhpMyAdmin before 2.9.1.1 allows remote attackers to obtain the full server path via direct requests to (a) scripts/check_lang.php and (b) themes/darkblue_orange/layout.inc.php; and via the (1) lang[… CWE-20
 Improper Input Validation 
CVE-2006-6943 2016-11-19 04:34 2007-01-19 Show GitHub Exploit DB Packet Storm
306526 - mystats mystats SQL injection vulnerability in mystats.php in MyStats 1.0.8 and earlier allows remote attackers to execute arbitrary SQL commands via the details parameter. CWE-89
SQL Injection
CVE-2006-6402 2016-11-19 02:24 2006-12-10 Show GitHub Exploit DB Packet Storm
306527 - mystats mystats Multiple cross-site scripting (XSS) vulnerabilities in mystats.php in MyStats 1.0.8 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) connexion, (2) by, and (3) de… CWE-79
Cross-site Scripting
CVE-2006-6401 2016-11-19 02:23 2006-12-10 Show GitHub Exploit DB Packet Storm
306528 - dotnetindex active_news_manager Cross-site scripting (XSS) vulnerability in activenews_search.asp in ActiveNews Manager allows remote attackers to inject arbitrary web script or HTML via the query parameter. CWE-79
Cross-site Scripting
CVE-2006-6096 2016-11-19 02:21 2006-11-25 Show GitHub Exploit DB Packet Storm
306529 - grisoft avg_antivirus Unspecified vulnerability in Grisoft AVG Anti-Virus before 7.1.407 has unknown impact and remote attack vectors related to "Integer Issues" and parsing of .EXE files. CWE-189
Numeric Errors
CVE-2006-5940 2016-11-19 02:15 2006-11-16 Show GitHub Exploit DB Packet Storm
306530 - grisoft avg_antivirus Multiple integer overflows in Grisoft AVG Anti-Virus before 7.1.407 allow remote attackers to execute arbitrary code via crafted (1) CAB or (2) RAR archives that trigger a heap-based buffer overflow.… CWE-190
 Integer Overflow or Wraparound
CVE-2006-5937 2016-11-19 02:13 2006-11-16 Show GitHub Exploit DB Packet Storm