Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 29, 2026, 2:01 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
1481 8.8 重要
Network
オラクル Oracle Spares Management オラクルのOracle Spares Managementにおける複数の脆弱性 CWE-269
CWE-287
CWE-306
CVE-2026-46928 2026-06-22 11:34 2026-06-17 Show GitHub Exploit DB Packet Storm
1482 8.8 重要
Network
オラクル Cost Management オラクルのCost Managementにおける複数の脆弱性 CWE-269
CWE-284
CWE-287
CWE-306
CVE-2026-46929 2026-06-22 11:34 2026-06-17 Show GitHub Exploit DB Packet Storm
1483 9.1 緊急
Network
オラクル Oracle In-Memory Cost Management for Discrete Industries オラクルのOracle In-Memory Cost Management for Discrete Industriesにおけるアクセス制御に関する脆弱性 CWE-284
不適切なアクセス制御
CVE-2026-46930 2026-06-22 11:33 2026-06-17 Show GitHub Exploit DB Packet Storm
1484 7.5 重要
Network
オラクル Oracle Complex Maintenance Repair And Overhaul オラクルのOracle Complex Maintenance Repair And Overhaulにおける複数の脆弱性 CWE-269
CWE-284
CWE-306
CVE-2026-46934 2026-06-22 11:33 2026-06-17 Show GitHub Exploit DB Packet Storm
1485 7.5 重要
Network
オラクル Oracle Complex Maintenance Repair And Overhaul オラクルのOracle Complex Maintenance Repair And Overhaulにおける複数の脆弱性 CWE-269
CWE-284
CWE-306
CVE-2026-46935 2026-06-22 11:33 2026-06-17 Show GitHub Exploit DB Packet Storm
1486 7.2 重要
Network
オラクル Cost Management オラクルのCost Managementにおけるアクセス制御に関する脆弱性 CWE-284
不適切なアクセス制御
CVE-2026-46938 2026-06-22 11:33 2026-06-17 Show GitHub Exploit DB Packet Storm
1487 8.1 重要
Network
オラクル Configure-to-Order オラクルのConfigure-to-Orderにおけるアクセス制御に関する脆弱性 CWE-284
不適切なアクセス制御
CVE-2026-46939 2026-06-22 11:33 2026-06-17 Show GitHub Exploit DB Packet Storm
1488 8.8 重要
Network
オラクル Cost Management オラクルのCost Managementにおける複数の脆弱性 CWE-269
CWE-284
CWE-287
CWE-306
CVE-2026-46940 2026-06-22 11:33 2026-06-17 Show GitHub Exploit DB Packet Storm
1489 8.8 重要
Network
オラクル Oracle Process Manufacturing Process Planning オラクルのOracle Process Manufacturing Process Planningにおける複数の脆弱性 CWE-269
CWE-284
CWE-287
CWE-306
CVE-2026-46942 2026-06-22 11:33 2026-06-17 Show GitHub Exploit DB Packet Storm
1490 8.8 重要
Network
オラクル Oracle Quality オラクルのOracle Qualityにおける複数の脆弱性 CWE-269
CWE-287
CWE-306
CVE-2026-46951 2026-06-22 11:33 2026-06-17 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 29, 2026, 4:19 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
320801 6.7 MEDIUM
Local
synology drive_client Out-of-bounds write vulnerability in backup task management functionality in Synology Drive Client before 3.4.0-15721 allows local users with administrator privileges to execute arbitrary commands vi… CWE-787
 Out-of-bounds Write
CVE-2022-49039 2024-10-9 01:08 2024-09-26 Show GitHub Exploit DB Packet Storm
320802 7.8 HIGH
Local
synology drive_client Inclusion of functionality from untrusted control sphere vulnerability in OpenSSL DLL component in Synology Drive Client before 3.3.0-15082 allows local users to execute arbitrary code via unspecifie… CWE-829
 Inclusion of Functionality from Untrusted Control Sphere
CVE-2022-49038 2024-10-9 01:08 2024-09-26 Show GitHub Exploit DB Packet Storm
320803 6.5 MEDIUM
Network
synology drive_client Insertion of sensitive information into log file vulnerability in proxy settings component in Synology Drive Client before 3.3.0-15082 allows remote authenticated users to obtain sensitive informatio… CWE-532
 Inclusion of Sensitive Information in Log Files
CVE-2022-49037 2024-10-9 01:08 2024-09-26 Show GitHub Exploit DB Packet Storm
320804 6.7 MEDIUM
Local
cisco telepresence_video_communication_server A vulnerability in the restricted shell of Cisco Expressway Series could allow an authenticated, local attacker to perform command injection attacks on the underlying operating system and elevate pri… CWE-77
Command Injection
CVE-2024-20492 2024-10-9 01:07 2024-10-3 Show GitHub Exploit DB Packet Storm
320805 4.4 MEDIUM
Local
synology drive_client Buffer copy without checking size of input ('Classic Buffer Overflow') vulnerability in connection management functionality in Synology Drive Client before 3.4.0-15721 allows local users with adminis… CWE-120
Classic Buffer Overflow
CVE-2022-49040 2024-10-9 01:07 2024-09-26 Show GitHub Exploit DB Packet Storm
320806 4.4 MEDIUM
Local
synology drive_client Buffer copy without checking size of input ('Classic Buffer Overflow') vulnerability in backup task management functionality in Synology Drive Client before 3.4.0-15721 allows local users with admini… CWE-120
Classic Buffer Overflow
CVE-2022-49041 2024-10-9 01:06 2024-09-26 Show GitHub Exploit DB Packet Storm
320807 5.4 MEDIUM
Network
cisco nexus_dashboard
nexus_dashboard_fabric_controller
A vulnerability in a specific REST API endpoint of Cisco NDFC could allow an authenticated, low-privileged, remote attacker to upload or delete files on an affected device. This vulnerability exis… CWE-862
 Missing Authorization
CVE-2024-20477 2024-10-9 01:00 2024-10-3 Show GitHub Exploit DB Packet Storm
320808 8.2 HIGH
Network
synology drive_client Buffer copy without checking size of input ('Classic Buffer Overflow') vulnerability in vss service component in Synology Drive Client before 3.5.0-16084 allows remote attackers to overwrite trivial … CWE-120
Classic Buffer Overflow
CVE-2023-52946 2024-10-9 00:55 2024-09-26 Show GitHub Exploit DB Packet Storm
320809 8.6 HIGH
Network
cisco nexus_dashboard_orchestrator
nexus_dashboard_insights
nexus_dashboard_fabric_controller
A vulnerability in a logging function of Cisco Nexus Dashboard Insights could allow an attacker with access to a tech support file to view sensitive information. This vulnerability exists because … CWE-532
 Inclusion of Sensitive Information in Log Files
CVE-2024-20491 2024-10-9 00:55 2024-10-3 Show GitHub Exploit DB Packet Storm
320810 9.8 CRITICAL
Network
deltaww diaenergie Delta Electronics DIAEnergie is vulnerable to an SQL injection in the script AM_RegReport.aspx. An unauthenticated attacker may be able to exploit this issue to obtain records contained in the target… CWE-89
SQL Injection
CVE-2024-43699 2024-10-9 00:44 2024-10-4 Show GitHub Exploit DB Packet Storm