Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 16, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
2711 6.3 警告
Network 		neutrinolabs xrdp neutrinolabsのxrdpにおけるOS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2026-33145 2026-04-28 10:13 2026-04-17 Show GitHub Exploit DB Packet Storm
2712 9.1 緊急
Network 		neutrinolabs xrdp neutrinolabsのxrdpにおける境界外読み取りに関する脆弱性 CWE-125
境界外読み取り 		CVE-2026-33516 2026-04-28 10:13 2026-04-17 Show GitHub Exploit DB Packet Storm
2713 9.1 緊急
Network 		neutrinolabs xrdp neutrinolabsのxrdpにおける境界外読み取りに関する脆弱性 CWE-125
境界外読み取り 		CVE-2026-33689 2026-04-28 10:13 2026-04-17 Show GitHub Exploit DB Packet Storm
2714 2.9 低
Local 		オラクル Oracle GraalVM for JDK
Oracle GraalVM
JRE
JDK 		オラクルのOracle GraalVM等の複数製品における情報漏えいに関する脆弱性 CWE-200
情報漏えい 		CVE-2026-34268 2026-04-28 10:13 2026-04-21 Show GitHub Exploit DB Packet Storm
2715 9.8 緊急
Network 		オラクル Oracle Advanced Inbound Telephony オラクルのOracle Advanced Inbound Telephonyにおける重要な機能に対する認証の欠如に関する脆弱性 CWE-306
重要な機能に対する認証の欠如 解説 		CVE-2026-34275 2026-04-28 10:13 2026-04-21 Show GitHub Exploit DB Packet Storm
2716 7.5 重要
Network 		オラクル Oracle GraalVM for JDK
Oracle GraalVM
JRE
JDK 		オラクルのOracle GraalVM等の複数製品におけるリソースの枯渇に関する脆弱性 CWE-400
リソースの枯渇 		CVE-2026-34282 2026-04-28 10:13 2026-04-21 Show GitHub Exploit DB Packet Storm
2717 2.4 低
Network 		オラクル Oracle Database オラクルのOracle Databaseにおけるアクセス制御に関する脆弱性 CWE-284
不適切なアクセス制御 		CVE-2026-34312 2026-04-28 10:13 2026-04-21 Show GitHub Exploit DB Packet Storm
2718 5.3 警告
Network 		Electron electron Electronのelectronにおける境界外読み取りに関する脆弱性 CWE-125
境界外読み取り 		CVE-2026-34776 2026-04-28 10:13 2026-04-4 Show GitHub Exploit DB Packet Storm
2719 5.4 警告
Network 		オラクル Oracle Fusion Middleware オラクルのOracle Fusion Middlewareにおけるアクセス制御に関する脆弱性 CWE-284
不適切なアクセス制御 		CVE-2026-35232 2026-04-28 10:13 2026-04-21 Show GitHub Exploit DB Packet Storm
2720 6.4 警告
Network 		オラクル Oracle Fusion Middleware オラクルのOracle Fusion Middlewareにおけるアクセス制御に関する脆弱性 CWE-284
不適切なアクセス制御 		CVE-2026-35252 2026-04-28 10:13 2026-04-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 16, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
314371 6.5 MEDIUM
Network 		upkeeper upkeeper_manager Authorization Bypass Through User-Controlled Key vulnerability in upKeeper Solutions product upKeeper Manager allows Utilizing REST's Trust in the System Resource to Obtain Sensitive Data.This issue … CWE-639
 Authorization Bypass Through User-Controlled Key 		CVE-2024-42464 2024-08-29 05:35 2024-08-16 Show GitHub Exploit DB Packet Storm
314372 9.8 CRITICAL
Network 		upkeeper upkeeper_manager Improper Restriction of Excessive Authentication Attempts vulnerability in upKeeper Solutions product upKeeper Manager allows Authentication Abuse.This issue affects upKeeper Manager: through 5.1.9. CWE-307
mproper Restriction of Excessive Authentication Attempts 		CVE-2024-42465 2024-08-29 05:32 2024-08-16 Show GitHub Exploit DB Packet Storm
314373 7.2 HIGH
Network 		versa-networks versa_director The Versa Director GUI provides an option to customize the look and feel of the user interface. This option is only available for a user logged with Provider-Data-Center-Admin or Provider-Data-Center… CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2024-39717 2024-08-29 04:47 2024-08-23 Show GitHub Exploit DB Packet Storm
314374 - - - A vulnerability in Pantera CRM versions 401.152 and 402.072 allows unauthorized attackers to bypass IP-based access controls by manipulating the X-Forwarded-For header. - CVE-2024-40530 2024-08-29 04:15 2024-08-6 Show GitHub Exploit DB Packet Storm
314375 8.3 HIGH
Network 		microsoft edge_chromium Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability NVD-CWE-noinfo
CVE-2024-43472 2024-08-29 04:13 2024-08-17 Show GitHub Exploit DB Packet Storm
314376 5.3 MEDIUM
Network 		softlabbd radio_player The Radio Player plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the delete_player function in versions up to, and including, 2.0.73. This… CWE-862
 Missing Authorization 		CVE-2023-4024 2024-08-29 03:32 2024-08-17 Show GitHub Exploit DB Packet Storm
314377 5.3 MEDIUM
Network 		softlabbd radio_player The Radio Player plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the update_player function in versions up to, and including, 2.0.73. This… CWE-862
 Missing Authorization 		CVE-2023-4025 2024-08-29 03:30 2024-08-17 Show GitHub Exploit DB Packet Storm
314378 9.8 CRITICAL
Network 		alientechnology alr-f800_firmware A vulnerability was found in Alien Technology ALR-F800 up to 19.10.24.00. It has been classified as critical. Affected is an unknown function of the file /var/www/cmd.php. The manipulation of the arg… CWE-285
Improper Authorization 		CVE-2024-7578 2024-08-29 03:27 2024-08-7 Show GitHub Exploit DB Packet Storm
314379 8.8 HIGH
Network 		alientechnology alr-f800_firmware A vulnerability was found in Alien Technology ALR-F800 up to 19.10.24.00. It has been declared as critical. Affected by this vulnerability is the function popen of the file /var/www/cgi-bin/upgrade.c… CWE-78
OS Command  		CVE-2024-7579 2024-08-29 03:26 2024-08-7 Show GitHub Exploit DB Packet Storm
314380 7.8 HIGH
Local 		okta verify Okta Verify for Windows is vulnerable to privilege escalation through DLL hijacking. The vulnerability is fixed in Okta Verify for Windows version 5.0.2. To remediate this vulnerability, upgrade to 5… CWE-427
 Uncontrolled Search Path Element 		CVE-2024-7061 2024-08-29 03:25 2024-08-8 Show GitHub Exploit DB Packet Storm