Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 29, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
253401 5 警告 マイクロソフト - Microsoft Forefront Unified Access Gateway における重要な情報を取得される脆弱性 CWE-16
環境設定
CVE-2012-0147 2012-04-16 13:37 2012-04-10 Show GitHub Exploit DB Packet Storm
253402 5.8 警告 マイクロソフト - Microsoft Forefront Unified Access Gateway におけるオープンリダイレクトの脆弱性 CWE-20
不適切な入力確認
CVE-2012-0146 2012-04-16 13:35 2012-04-10 Show GitHub Exploit DB Packet Storm
253403 3.7 注意 ヒューレット・パッカード - HP ProCurve 5400 zl スイッチシリーズにおける任意のコードを実行される脆弱性 CWE-DesignError
CVE-2012-0133 2012-04-13 16:24 2012-04-10 Show GitHub Exploit DB Packet Storm
253404 6.8 警告 ヒューレット・パッカード - HP System Management Homepage におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2011-3846 2012-04-13 16:19 2012-04-12 Show GitHub Exploit DB Packet Storm
253405 6.5 警告 Cloudera, Inc. - Cloudera Manager および Cloudera Service and Configuration Manager における任意のユーザアカウントになりすまされる脆弱性 CWE-310
暗号の問題
CVE-2012-2230 2012-04-13 15:35 2011-04-12 Show GitHub Exploit DB Packet Storm
253406 6.5 警告 Cloudera, Inc.
Apache Software Foundation
- Cloudera 製品で使用される Apache Hadoop における任意のクラスタユーザアカウントになりすまされる脆弱性 CWE-310
暗号の問題
CVE-2012-1574 2012-04-13 15:33 2012-04-12 Show GitHub Exploit DB Packet Storm
253407 5.8 警告 株式会社リクルート - どこでもリクナビ2013 におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-1240 2012-04-13 12:02 2012-04-13 Show GitHub Exploit DB Packet Storm
253408 5.8 警告 COM Meets Ruby - ActiveScriptRuby に HTML 上で任意の Ruby スクリプトを実行可能な脆弱性 CWE-Other
その他
CVE-2012-1241 2012-04-13 12:01 2012-04-13 Show GitHub Exploit DB Packet Storm
253409 7.5 危険 360安全中心 - 360圧縮 (360zip) における任意のコードを実行される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-2225 2012-04-13 11:45 2012-04-11 Show GitHub Exploit DB Packet Storm
253410 7.5 危険 迅雷 - 迅雷 (Xunlei Thunder) における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2012-2224 2012-04-13 11:44 2012-03-6 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 30, 2026, 4:22 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
5881 8.8 HIGH
Network
oracle e-business_suite Vulnerability in the Oracle Flow Manufacturing product of Oracle E-Business Suite (component: Security). Supported versions that are affected are 12.2.9-12.2.15. Easily exploitable vulnerability all… CWE-269
 Improper Privilege Management
CVE-2026-46837 2026-06-4 22:46 2026-05-29 Show GitHub Exploit DB Packet Storm
5882 7.4 HIGH
Network
oracle e-business_suite Vulnerability in the Oracle Payments product of Oracle E-Business Suite (component: File Transmission). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability al… CWE-284
Improper Access Control
CVE-2026-46818 2026-06-4 22:46 2026-05-29 Show GitHub Exploit DB Packet Storm
5883 9.8 CRITICAL
Network
oracle e-business_suite Vulnerability in the Oracle Payments product of Oracle E-Business Suite (component: File Transmission). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allo… CWE-269
CWE-287
CWE-306
 Improper Privilege Management
Improper Authentication
Missing Authentication for Critical Function
CVE-2026-46817 2026-06-4 22:45 2026-05-29 Show GitHub Exploit DB Packet Storm
5884 4.9 MEDIUM
Network
progress sitefinity CWE‑522: Insufficiently Protected Credentials in web services in Progress Sitefinity version from 8.0.5700 to 13.3.7652 allows a remote authenticated attacker to obtain plain-text credentials used co… CWE-522
 Insufficiently Protected Credentials
CVE-2026-7313 2026-06-4 22:12 2026-06-2 Show GitHub Exploit DB Packet Storm
5885 7.5 HIGH
Network
progress sitefinity CWE‑522: Insufficiently Protected Credentials in web services in Progress Sitefinity version from 14.0.7700 to 14.4.8152, and 15.0.8200 to 15.0.8234, and 15.1.8300 to 15.1.8335, 15.2.8400 to 15.2.844… CWE-522
 Insufficiently Protected Credentials
CVE-2026-7312 2026-06-4 22:09 2026-06-2 Show GitHub Exploit DB Packet Storm
5886 8.1 HIGH
Network
progress sitefinity CWE-20: Improper Input Validation in web services in Progress Sitefinity 14.1.x through 14.3.x, 14.4.x before 14.4.8152, 15.0.x before 15.0.8234, 15.1.x before 15.1.8335, 15.2.x before 15.2.8441, 15.… CWE-20
 Improper Input Validation 
CVE-2026-7195 2026-06-4 21:51 2026-06-2 Show GitHub Exploit DB Packet Storm
5887 9.8 CRITICAL
Network
progress sitefinity CWE-284: Improper Access Control in web services in Progress Sitefinity 15.4.8623 before 15.4.8630 allows a remote unauthenticated attacker to access content that should be restricted, resulting in f… CWE-284
Improper Access Control
CVE-2026-7198 2026-06-4 21:43 2026-06-2 Show GitHub Exploit DB Packet Storm
5888 8.8 HIGH
Network
progress sitefinity CWE-639: Authorization Bypass Through User-Controlled Key in web services in Progress Sitefinity 15.2.x before 15.2.8441, 15.3.x before 15.3.8531, and 15.4.x before 15.4.8630 allows a remote authenti… CWE-639
 Authorization Bypass Through User-Controlled Key
CVE-2026-7201 2026-06-4 21:42 2026-06-2 Show GitHub Exploit DB Packet Storm
5889 5.4 MEDIUM
Network
- - Wikidforum 2.20 contains a cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts by submitting crafted HTML in the reply_text parameter. Attackers can pos… CWE-79
Cross-site Scripting
CVE-2018-25384 2026-06-4 12:16 2026-05-30 Show GitHub Exploit DB Packet Storm
5890 9.0 CRITICAL
Network
- - A flaw was found in Samba. A remote attacker can exploit a misconfiguration in Samba file servers and classic domain controllers that use the "check password script" feature. If this script is config… CWE-78
OS Command 
CVE-2026-4408 2026-06-4 09:16 2026-05-28 Show GitHub Exploit DB Packet Storm