Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 17, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
3631 6.5 警告
Network
Frappe ERPNext FrappeのERPNextにおけるXML 外部エンティティの脆弱性 CWE-611
XML 外部エンティティ参照の不適切な制限
CVE-2026-44445 2026-05-18 12:11 2026-05-13 Show GitHub Exploit DB Packet Storm
3632 7.5 重要
Network
Frappe ERPNext FrappeのERPNextにおけるSQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2026-44446 2026-05-18 12:11 2026-05-13 Show GitHub Exploit DB Packet Storm
3633 7.5 重要
Network
Frappe ERPNext FrappeのERPNextにおけるSQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2026-44447 2026-05-18 12:11 2026-05-13 Show GitHub Exploit DB Packet Storm
3634 5.4 警告
Network
Vercel, Inc. (旧 Zeit, Inc.) Next.js Vercel, Inc. (旧 Zeit, Inc.)のNext.jsにおける解釈の競合に関する脆弱性 CWE-436
解釈の競合
CVE-2026-44576 2026-05-18 12:11 2026-05-13 Show GitHub Exploit DB Packet Storm
3635 8.6 重要
Network
Vercel, Inc. (旧 Zeit, Inc.) Next.js Vercel, Inc. (旧 Zeit, Inc.)のNext.jsにおけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ
CVE-2026-44578 2026-05-18 12:11 2026-05-13 Show GitHub Exploit DB Packet Storm
3636 7.5 重要
Network
Vercel, Inc. (旧 Zeit, Inc.) Next.js Vercel, Inc. (旧 Zeit, Inc.)のNext.jsにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性 CWE-770
制限またはスロットリング無しのリソースの割り当て
CVE-2026-44579 2026-05-18 12:11 2026-05-13 Show GitHub Exploit DB Packet Storm
3637 6.1 警告
Network
Vercel, Inc. (旧 Zeit, Inc.) Next.js Vercel, Inc. (旧 Zeit, Inc.)のNext.jsにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2026-44580 2026-05-18 12:11 2026-05-13 Show GitHub Exploit DB Packet Storm
3638 4.7 警告
Network
Vercel, Inc. (旧 Zeit, Inc.) Next.js Vercel, Inc. (旧 Zeit, Inc.)のNext.jsにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2026-44581 2026-05-18 12:11 2026-05-13 Show GitHub Exploit DB Packet Storm
3639 3.7
Network
Vercel, Inc. (旧 Zeit, Inc.) Next.js Vercel, Inc. (旧 Zeit, Inc.)のNext.jsにおける弱いハッシュの使用に関する脆弱性 CWE-328
脆弱なハッシュの使用
CVE-2026-44582 2026-05-18 12:11 2026-05-13 Show GitHub Exploit DB Packet Storm
3640 5.3 警告
Local
Vim Vim VimにおけるOS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション
CVE-2026-44656 2026-05-18 12:11 2026-05-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 18, 2026, 4 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
312301 - oracle peoplesoft_and_jdedwards_suite_scm Unspecified vulnerability in the PeopleSoft Enterprise FSCM component in Oracle PeopleSoft and JDEdwards Suite SCM 8.9 Bundle #37, SCM 9.0 Bundle #30, and SCM 9.1 Bundle #4 allows local users to affe… NVD-CWE-noinfo
CVE-2010-2380 2024-11-21 10:16 2010-07-14 Show GitHub Exploit DB Packet Storm
312302 - oracle peoplesoft_and_jdedwards_suite_hcm Unspecified vulnerability in the PeopleSoft Enterprise HCM - Time & Labor component in Oracle PeopleSoft and JDEdwards Suite HCM 9.0 Bundle #13 and HCM 9.1 Bundle #2 allows remote authenticated users… NVD-CWE-noinfo
CVE-2010-2379 2024-11-21 10:16 2010-07-14 Show GitHub Exploit DB Packet Storm
312303 - oracle peoplesoft_and_jdedwards_suite_crm Unspecified vulnerability in the PeopleSoft Enterprise CRM component in Oracle PeopleSoft and JDEdwards Suite CRM 9.0 Bundle #28 and CRM 9.1 Bundle #4 allows local users to affect confidentiality and… NVD-CWE-noinfo
CVE-2010-2378 2024-11-21 10:16 2010-07-14 Show GitHub Exploit DB Packet Storm
312304 - oracle peoplesoft_and_jdedwards_product_suite Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft and JDEdwards Suite 8.49.27 and 8.50.10 allows remote authenticated users to affect integrity via unk… NVD-CWE-noinfo
CVE-2010-2377 2024-11-21 10:16 2010-07-14 Show GitHub Exploit DB Packet Storm
312305 - oracle solaris Unspecified vulnerability in Oracle Solaris 8, 9, and 10 allows local users to affect confidentiality and integrity via unknown vectors related to Solaris Management Console. NVD-CWE-noinfo
CVE-2010-2376 2024-11-21 10:16 2010-07-14 Show GitHub Exploit DB Packet Storm
312306 - bea
bea_systems
oracle
weblogic_server Package/Privilege: Plugins for Apache, Sun and IIS web servers Unspecified vulnerability in the WebLogic Server component in Oracle Fusion Middleware 7.0 SP7, 8.1 SP6, 9.0, 9.1, 9.2 MP3, 10.0 MP2, 10… NVD-CWE-noinfo
CVE-2010-2375 2024-11-21 10:16 2010-07-14 Show GitHub Exploit DB Packet Storm
312307 - oracle solaris_studio Unspecified vulnerability in Solaris Studio 12 update 1 allows local users to affect confidentiality and integrity via unknown vectors. NVD-CWE-noinfo
CVE-2010-2374 2024-11-21 10:16 2010-07-14 Show GitHub Exploit DB Packet Storm
312308 - oracle enterprise_manager_grid_control Unspecified vulnerability in the Console component in Oracle Enterprise Manager Grid Control 10.1.0.6 and 10.2.0.5 allows remote attackers to affect integrity via unknown vectors. NVD-CWE-noinfo
CVE-2010-2373 2024-11-21 10:16 2010-07-14 Show GitHub Exploit DB Packet Storm
312309 - oracle supply_chain_products_suite Unspecified vulnerability in the Oracle Transportation Management component in Oracle Supply Chain Products Suite 6.1.1 allows remote attackers to affect integrity via unknown vectors, a different vu… NVD-CWE-noinfo
CVE-2010-2372 2024-11-21 10:16 2010-07-14 Show GitHub Exploit DB Packet Storm
312310 - oracle supply_chain_products_suite Unspecified vulnerability in the Oracle Transportation Management component in Oracle Supply Chain Products Suite 6.1.1 allows local users to affect confidentiality via unknown vectors, a different v… NVD-CWE-noinfo
CVE-2010-2371 2024-11-21 10:16 2010-07-14 Show GitHub Exploit DB Packet Storm