Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 4, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
133121 8 重要
Network 		PickPlugins Post Grid
Team Showcase 		WordPress 用 Post Grid プラグインにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2020-35936 2021-09-15 18:00 2020-10-5 Show GitHub Exploit DB Packet Storm
133122 6.5 警告
Network 		Tribulant Software Newsletters WordPress 用 Newsletter プラグインにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2020-35933 2021-09-15 18:00 2020-08-3 Show GitHub Exploit DB Packet Storm
133123 8.8 重要
Network 		Tribulant Software Newsletters WordPress 用 Newsletter プラグインにおける信頼できないデータのデシリアライゼーションに関する脆弱性 CWE-502
信頼性のないデータのデシリアライゼーション 		CVE-2020-35932 2021-09-15 18:00 2020-08-3 Show GitHub Exploit DB Packet Storm
133124 6.1 警告
Network 		HGiga MSR45 iSherlock-user
MSR45 iSherlock-antispam 		HGiga MailSherlock におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2020-35741 2021-09-15 18:00 2020-12-30 Show GitHub Exploit DB Packet Storm
133125 6.1 警告
Network 		HGiga MSR45 iSherlock-user
MSR45 iSherlock-antispam 		HGiga MailSherlock におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2020-35740 2021-09-15 18:00 2020-12-30 Show GitHub Exploit DB Packet Storm
133126 7.5 重要
Network 		HGiga MSR45 iSherlock-user HGiga MailSherlock における脆弱性 CWE-noinfo
情報不足 		CVE-2020-25850 2021-09-15 18:00 2020-12-30 Show GitHub Exploit DB Packet Storm
133127 8.8 重要
Network 		Sunhater KCFinder Durupal 用 KCFinder integration プロジェクトにおける入力確認に関する脆弱性 CWE-20
不適切な入力確認 		CVE-2018-25002 2021-09-15 18:00 2018-05-9 Show GitHub Exploit DB Packet Storm
133128 7.7 重要
Network 		Combodo iTop Combodo iTop における情報漏えいに関する脆弱性 CWE-200
情報漏えい 		CVE-2020-4079 2021-09-15 17:58 2021-01-12 Show GitHub Exploit DB Packet Storm
133129 6.1 警告
Network 		RailsAdmin project RailsAdmin RailsAdmin におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2020-36190 2021-09-15 17:58 2020-03-14 Show GitHub Exploit DB Packet Storm
133130 5.4 警告
Network 		Carbonite, Inc. Server Backup Portal Server Backup Portal におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2020-13116 2021-09-15 17:58 2020-05-16 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 4, 2026, 4:17 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
91 8.8 HIGH
Network 		oracle e-business_suite Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability all… Update CWE-306
Missing Authentication for Critical Function 		CVE-2026-46826 2026-06-4 02:43 2026-05-29 Show GitHub Exploit DB Packet Storm
92 8.8 HIGH
Network 		oracle e-business_suite Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Self Service Manager). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability al… Update CWE-269
CWE-284
CWE-287
CWE-306
 Improper Privilege Management
Improper Access Control
Improper Authentication
Missing Authentication for Critical Function 		CVE-2026-46827 2026-06-4 02:43 2026-05-29 Show GitHub Exploit DB Packet Storm
93 8.1 HIGH
Network 		oracle e-business_suite Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability all… Update CWE-284
Improper Access Control 		CVE-2026-46828 2026-06-4 02:42 2026-05-29 Show GitHub Exploit DB Packet Storm
94 7.5 HIGH
Network 		oracle rest_data_services Vulnerability in Oracle REST Data Services (component: Mongoapi). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows unauthenticated attacker with networ… Update CWE-400
 Uncontrolled Resource Consumption 		CVE-2026-46829 2026-06-4 02:41 2026-05-29 Show GitHub Exploit DB Packet Storm
95 6.5 MEDIUM
Network 		nextcloud approval Nextcloud is an open source content collaboration platform. Prior to version 2.7.2, a privilege escalation vulnerability exists in the Approval app that allows a user without sharing permissions to f… New CWE-285
Improper Authorization 		CVE-2026-45275 2026-06-4 02:39 2026-06-2 Show GitHub Exploit DB Packet Storm
96 9.1 CRITICAL
Network 		oracle e-business_suite Vulnerability in the Oracle Internet Procurement Connector product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploi… Update CWE-284
Improper Access Control 		CVE-2026-46819 2026-06-4 02:37 2026-05-29 Show GitHub Exploit DB Packet Storm
97 3.3 LOW
Local 		nextcloud approval Nextcloud is an open source content collaboration platform. Prior to version 2.7.2, authenticated users can check if arbitrary files are associated with specific approval workflows where they can req… New CWE-200
NVD-CWE-noinfo
Information Exposure 		CVE-2026-45277 2026-06-4 02:36 2026-06-2 Show GitHub Exploit DB Packet Storm
98 6.1 MEDIUM
Network 		nextcloud user_oidc Nextcloud is an open source content collaboration platform. From version 6.1.0 to before version 8.2.2, an attacker can craft links that would redirect users to another website, when the victim uses … New CWE-601
Open Redirect 		CVE-2026-45278 2026-06-4 02:34 2026-06-2 Show GitHub Exploit DB Packet Storm
99 7.5 HIGH
Network 		mosaic5g flexric FlexRIC v2.0.0 crashes when the iApp receives an E42_RIC_SUBSCRIPTION_REQUEST referencing a non-existent E2 Node. The lookup function returns NULL, which is enforced by assert() in Debug builds (SIGA… New CWE-476
 NULL Pointer Dereference 		CVE-2026-37226 2026-06-4 02:16 2026-06-2 Show GitHub Exploit DB Packet Storm
100 7.5 HIGH
Network 		mosaic5g flexric FlexRIC v2.0.0 contains a reachable assertion in e2ap_recv_sctp_msg() (src/lib/ep/e2ap_ep.c). The function allocates a fixed 32KB receive buffer and enforces assert(rc < len) on the sctp_recvmsg() re… New CWE-617
 Reachable Assertion 		CVE-2026-37228 2026-06-4 02:16 2026-06-2 Show GitHub Exploit DB Packet Storm