Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
1 9.8 緊急
Network 		scshr hr portal scshrのhr portalにおける信頼できないデータのデシリアライゼーションに関する脆弱性 CWE-502
信頼性のないデータのデシリアライゼーション 		CVE-2025-48780 2026-02-6 10:41 2025-06-6 Show GitHub Exploit DB Packet Storm
2 7.5 重要
Network 		scshr hr portal scshrのhr portalにおけるファイル名やパス名の外部制御に関する脆弱性 CWE-73
ファイル名やパス名の外部制御 		CVE-2025-48781 2026-02-6 10:41 2025-06-6 Show GitHub Exploit DB Packet Storm
3 9.8 緊急
Network 		scshr hr portal scshrのhr portalにおける危険なタイプのファイルの無制限アップロードに関する脆弱性 CWE-434
危険なタイプのファイルの無制限アップロード 		CVE-2025-48782 2026-02-6 10:41 2025-06-6 Show GitHub Exploit DB Packet Storm
4 7.5 重要
Network 		scshr hr portal scshrのhr portalにおけるファイル名やパス名の外部制御に関する脆弱性 CWE-73
ファイル名やパス名の外部制御 		CVE-2025-48783 2026-02-6 10:41 2025-06-6 Show GitHub Exploit DB Packet Storm
5 7.5 重要
Network 		scshr hr portal scshrのhr portalにおける認証の欠如に関する脆弱性 CWE-862
認証の欠如 		CVE-2025-48784 2026-02-6 10:41 2025-06-6 Show GitHub Exploit DB Packet Storm
6 7.5 重要
Network 		scshr hr portal scshrのhr portalにおける重要な機能に対する認証の欠如に関する脆弱性 CWE-306
重要な機能に対する認証の欠如 解説 		CVE-2025-5192 2026-02-6 10:41 2025-06-6 Show GitHub Exploit DB Packet Storm
7 6.8 警告
Physics 		Elspec LTD G5DFR ファームウェア Elspec LTDのG5DFR ファームウェアにおける代替パスまたはチャネルを使用した認証回避に関する脆弱性 CWE-288
代替パスまたはチャネルを使用した認証回避 		CVE-2025-59392 2026-02-6 10:41 2025-11-6 Show GitHub Exploit DB Packet Storm
8 7.2 重要
Network 		Sangoma freepbx SangomaのfreepbxにおけるOS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2025-64328 2026-02-6 10:41 2025-11-7 Show GitHub Exploit DB Packet Storm
9 6.5 警告
Network 		Salesforce.com, inc. MuleSoft Anypoint Extension Pack Salesforce.com, inc.のMuleSoft Anypoint Extension Packにおけるコードインジェクションの脆弱性 CWE-94
コード・インジェクション 		CVE-2025-10875 2026-02-6 10:41 2025-11-4 Show GitHub Exploit DB Packet Storm
10 7.5 重要
Network 		Intelbras ICIP 30 Firmware IntelbrasのICIP 30 Firmwareにおける複数の脆弱性 CWE-255
CWE-256
CWE-522
CVE-2025-13187 2026-02-6 10:41 2025-11-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 26, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
821 2.7 LOW
Network 		oracle mysql_server Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Information Schema). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploit… New CWE-200
Information Exposure 		CVE-2026-22001 2026-04-24 00:04 2026-04-22 Show GitHub Exploit DB Packet Storm
822 4.9 MEDIUM
Network 		oracle mysql_server Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vuln… New CWE-400
 Uncontrolled Resource Consumption 		CVE-2026-22002 2026-04-24 00:04 2026-04-22 Show GitHub Exploit DB Packet Storm
823 4.9 MEDIUM
Network 		oracle mysql_server Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability a… New CWE-400
 Uncontrolled Resource Consumption 		CVE-2026-22004 2026-04-24 00:03 2026-04-22 Show GitHub Exploit DB Packet Storm
824 4.9 MEDIUM
Network 		oracle mysql_server Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vuln… New CWE-400
 Uncontrolled Resource Consumption 		CVE-2026-22005 2026-04-24 00:03 2026-04-22 Show GitHub Exploit DB Packet Storm
825 5.4 MEDIUM
Network 		oracle peoplesoft_enterprise_hcm_human_resources Vulnerability in the PeopleSoft Enterprise HCM Human Resources product of Oracle PeopleSoft (component: Employee Snapshot). The supported version that is affected is 9.2. Easily exploitable vulnera… New CWE-200
Information Exposure 		CVE-2026-22006 2026-04-24 00:03 2026-04-22 Show GitHub Exploit DB Packet Storm
826 3.7 LOW
Network 		oracle jdk
jre 		Vulnerability in Oracle Java SE (component: Libraries). The supported version that is affected is Oracle Java SE: 25.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with net… New CWE-250
 Execution with Unnecessary Privileges 		CVE-2026-22008 2026-04-24 00:03 2026-04-22 Show GitHub Exploit DB Packet Storm
827 6.5 MEDIUM
Network 		oracle mysql_server Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vuln… New CWE-400
 Uncontrolled Resource Consumption 		CVE-2026-22009 2026-04-24 00:02 2026-04-22 Show GitHub Exploit DB Packet Storm
828 7.5 HIGH
Network 		oracle financial_services_analytical_applications_infrastructure Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications (component: Platform). Supported versions that are affected ar… New CWE-284
Improper Access Control 		CVE-2026-22010 2026-04-24 00:02 2026-04-22 Show GitHub Exploit DB Packet Storm
829 7.6 HIGH
Network 		oracle applications_dba Vulnerability in the Oracle Applications DBA product of Oracle E-Business Suite (component: ADPatch). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allo… New CWE-284
Improper Access Control 		CVE-2026-22011 2026-04-24 00:02 2026-04-22 Show GitHub Exploit DB Packet Storm
830 3.8 LOW
Network 		oracle user_management Vulnerability in the Oracle User Management product of Oracle E-Business Suite (component: Workflow and Business Events). Supported versions that are affected are 12.2.7-12.2.15. Easily exploitable … New CWE-284
Improper Access Control 		CVE-2026-22014 2026-04-24 00:01 2026-04-22 Show GitHub Exploit DB Packet Storm