Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 31, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
224041 3.6 注意 オラクル - Oracle Industry Applications の Oracle Health Sciences InForm における Web に関する脆弱性 CWE-noinfo
情報不足 		CVE-2013-5856 2013-10-18 16:47 2013-10-15 Show GitHub Exploit DB Packet Storm
224042 2.1 注意 オラクル - Oracle Industry Applications の Oracle Health Sciences InForm における Cognos に関する脆弱性 CWE-noinfo
情報不足 		CVE-2013-5837 2013-10-18 16:47 2013-10-15 Show GitHub Exploit DB Packet Storm
224043 3.5 注意 オラクル - Oracle Industry Applications の Oracle Health Sciences InForm における Web に関する脆弱性 CWE-noinfo
情報不足 		CVE-2013-5811 2013-10-18 16:46 2013-10-15 Show GitHub Exploit DB Packet Storm
224044 3.5 注意 シスコシステムズ - Cisco Identity Services Engine の file-upload インターフェースにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-5541 2013-10-18 15:55 2013-10-16 Show GitHub Exploit DB Packet Storm
224045 6.8 警告 シスコシステムズ - Cisco Identity Services Engine の file-upload 機能におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2013-5540 2013-10-18 15:54 2013-10-16 Show GitHub Exploit DB Packet Storm
224046 6 警告 シスコシステムズ - Cisco Identity Services Engine の upload-dialog の実装における任意のファイルタイプのファイルをアップロードされる脆弱性 CWE-20
不適切な入力確認 		CVE-2013-5539 2013-10-18 15:52 2013-10-16 Show GitHub Exploit DB Packet Storm
224047 5 警告 シスコシステムズ - Cisco Identity Services Engine の Sponsor Portal における任意のファイルを読まれる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-5538 2013-10-18 15:52 2013-10-16 Show GitHub Exploit DB Packet Storm
224048 6.4 警告 シスコシステムズ - Cisco Video Surveillance 4000 IP カメラの分析ページにおけるビデオフィードを見られる脆弱性 CWE-255
証明書・パスワード管理 		CVE-2013-5535 2013-10-18 15:51 2013-10-15 Show GitHub Exploit DB Packet Storm
224049 6.8 警告 シスコシステムズ - Cisco WebEx Meeting Center のサーバの deployment モジュールにおけるデプロイメントを起動される脆弱性 CWE-20
不適切な入力確認 		CVE-2013-5529 2013-10-18 15:51 2013-10-15 Show GitHub Exploit DB Packet Storm
224050 4.9 警告 IBM - IBM WebSphere eXtreme Scale の監視コンソールにおけるフィッシング攻撃を実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2013-5394 2013-10-18 15:49 2013-10-11 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 31, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1291 7.5 HIGH
Network 		- - An Exposed Dangerous Method or Function vulnerability in Synology C2 Identity Edge Server package in DSM before 1.76.0-0307 allows remote attackers to obtain user credentials from the edge server. CWE-749
 Exposed Dangerous Method or Function 		CVE-2025-14713 2026-05-27 23:54 2026-05-27 Show GitHub Exploit DB Packet Storm
1292 8.6 HIGH
Network 		- - A vulnerability in Active Backup for Business allows unauthorized remote attackers to read arbitrary files. CWE-89
SQL Injection 		CVE-2025-30028 2026-05-27 23:54 2026-05-27 Show GitHub Exploit DB Packet Storm
1293 6.1 MEDIUM
Local 		- - An origin validation error vulnerability in Synology Active Backup for Business Agent before 3.1.0-4967 allows local users to write arbitrary files with restricted content during installation. CWE-346
 Origin Validation Error 		CVE-2025-66592 2026-05-27 23:54 2026-05-27 Show GitHub Exploit DB Packet Storm
1294 6.1 MEDIUM
Local 		- - An origin validation error vulnerability in Synology Assistant before 7.0.6-50085 allows local users to write arbitrary files with restricted content during installation. CWE-346
 Origin Validation Error 		CVE-2025-66593 2026-05-27 23:54 2026-05-27 Show GitHub Exploit DB Packet Storm
1295 6.2 MEDIUM
Local 		- - A use of get request method with sensitive query strings vulnerability in volume encryption of Synology Storage Manager package before 1.0.1-1100 allows local attackers to obtain sensitive informatio… CWE-598
Information Exposure Through Query Strings in GET Request  		CVE-2026-2237 2026-05-27 23:54 2026-05-27 Show GitHub Exploit DB Packet Storm
1296 8.0 HIGH
Adjacent 		- - A flaw was found in Samba’s certificate auto-enrollment Group Policy handling. When certificate auto-enrollment is enabled, Samba may retrieve a CA certificate over an unencrypted HTTP connection and… CWE-345
 Insufficient Verification of Data Authenticity 		CVE-2026-3012 2026-05-27 23:54 2026-05-27 Show GitHub Exploit DB Packet Storm
1297 4.2 MEDIUM
Network 		- - A flaw was found in Keycloak, an open-source identity and access management solution. When a client application is configured to accept broad redirect Uniform Resource Identifiers (URIs), a remote at… CWE-1288
 Improper Validation of Consistency within Input 		CVE-2026-9689 2026-05-27 23:54 2026-05-27 Show GitHub Exploit DB Packet Storm
1298 7.1 HIGH
Network 		- - A flaw was found in Samba’s handling of NTFS-style reparse points on shares configured with read only = yes. Due to missing SMB-layer access checks, authenticated users with underlying filesystem wri… CWE-284
Improper Access Control 		CVE-2026-1933 2026-05-27 23:54 2026-05-27 Show GitHub Exploit DB Packet Storm
1299 6.8 MEDIUM
Network 		- - A flaw was found in Keycloak. An authenticated user with low privileges can exploit this vulnerability by sending an oversized subject_token JSON Web Token (JWT) to the TokenEndpoint. When the token … CWE-1284
 Improper Validation of Specified Quantity in Input 		CVE-2026-9704 2026-05-27 23:54 2026-05-27 Show GitHub Exploit DB Packet Storm
1300 6.8 MEDIUM
Network 		- - PostgreSQL Anonymizer contains a vulnerability that allows a user to gain superuser privileges by creating a table and placing malicious code inside a column identifier. If a superuser calls the k-an… CWE-89
SQL Injection 		CVE-2026-9617 2026-05-27 23:54 2026-05-27 Show GitHub Exploit DB Packet Storm