Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 23, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
451 8.8 重要
Network 		オラクル Oracle Advanced Outbound Telephony オラクルのOracle Advanced Outbound Telephonyにおけるアクセス制御に関する脆弱性 New CWE-284
CWE-noinfo
CVE-2026-46947 2026-06-22 11:50 2026-06-17 Show GitHub Exploit DB Packet Storm
452 9.1 緊急
Network 		オラクル Oracle Advanced Outbound Telephony オラクルのOracle Advanced Outbound Telephonyにおけるアクセス制御に関する脆弱性 New CWE-284
CWE-noinfo
CVE-2026-46949 2026-06-22 11:50 2026-06-17 Show GitHub Exploit DB Packet Storm
453 8.8 重要
Network 		オラクル Oracle Advanced Outbound Telephony オラクルのOracle Advanced Outbound Telephonyにおけるアクセス制御に関する脆弱性 New CWE-284
CWE-noinfo
CVE-2026-46950 2026-06-22 11:50 2026-06-17 Show GitHub Exploit DB Packet Storm
454 7.5 重要
Network 		オラクル Oracle Human Resources オラクルのOracle Human Resourcesにおける複数の脆弱性 New CWE-352
CWE-601
CWE-79
CVE-2026-46955 2026-06-22 11:50 2026-06-17 Show GitHub Exploit DB Packet Storm
455 7.5 重要
Network 		オラクル Oracle iSupplier Portal オラクルのOracle iSupplier Portalにおけるアクセス制御に関する脆弱性 New CWE-284
不適切なアクセス制御 		CVE-2026-46957 2026-06-22 11:50 2026-06-17 Show GitHub Exploit DB Packet Storm
456 7.5 重要
Network 		オラクル Oracle Subledger Accounting オラクルのOracle Subledger Accountingにおける複数の脆弱性 New CWE-269
CWE-284
CWE-306
CVE-2026-46958 2026-06-22 11:50 2026-06-17 Show GitHub Exploit DB Packet Storm
457 7.5 重要
Network 		オラクル Oracle Subledger Accounting オラクルのOracle Subledger Accountingにおける複数の脆弱性 New CWE-269
CWE-284
CWE-306
CVE-2026-46959 2026-06-22 11:50 2026-06-17 Show GitHub Exploit DB Packet Storm
458 9.9 緊急
Network 		オラクル Oracle Universal Work Queue オラクルのOracle Universal Work Queueにおけるアクセス制御に関する脆弱性 New CWE-284
不適切なアクセス制御 		CVE-2026-46963 2026-06-22 11:50 2026-06-17 Show GitHub Exploit DB Packet Storm
459 9.9 緊急
Network 		オラクル Oracle Universal Work Queue オラクルのOracle Universal Work Queueにおける複数の脆弱性 New CWE-269
CWE-284
CWE-306
CVE-2026-46964 2026-06-22 11:50 2026-06-17 Show GitHub Exploit DB Packet Storm
460 8.8 重要
Network 		オラクル Oracle Universal Work Queue オラクルのOracle Universal Work Queueにおける複数の脆弱性 New CWE-284
CWE-306
CVE-2026-46965 2026-06-22 11:49 2026-06-17 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 23, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
256261 7.2 HIGH
Network 		mail-masta_project mail-masta A SQL injection issue is exploitable, with WordPress admin access, in the Mail Masta (aka mail-masta) plugin 1.0 for WordPress. This affects ./inc/lists/edit-list.php with the GET Parameter: id. CWE-89
SQL Injection 		CVE-2017-6573 2024-11-21 12:30 2017-03-9 Show GitHub Exploit DB Packet Storm
256262 7.2 HIGH
Network 		mail-masta_project mail-masta A SQL injection issue is exploitable, with WordPress admin access, in the Mail Masta (aka mail-masta) plugin 1.0 for WordPress. This affects ./inc/lists/add_member.php with the GET Parameter: filter_… CWE-89
SQL Injection 		CVE-2017-6572 2024-11-21 12:30 2017-03-9 Show GitHub Exploit DB Packet Storm
256263 7.2 HIGH
Network 		mail-masta_project mail-masta A SQL injection issue is exploitable, with WordPress admin access, in the Mail Masta (aka mail-masta) plugin 1.0 for WordPress. This affects ./inc/campaign/view-campaign.php with the GET Parameter: i… CWE-89
SQL Injection 		CVE-2017-6571 2024-11-21 12:30 2017-03-9 Show GitHub Exploit DB Packet Storm
256264 7.2 HIGH
Network 		mail-masta_project mail-masta A SQL injection issue is exploitable, with WordPress admin access, in the Mail Masta (aka mail-masta) plugin 1.0 for WordPress. This affects ./inc/campaign/view-campaign-list.php with the GET Paramet… CWE-89
SQL Injection 		CVE-2017-6570 2024-11-21 12:30 2017-03-9 Show GitHub Exploit DB Packet Storm
256265 6.1 MEDIUM
Network 		agora-project agora-project XSS in Agora-Project 3.2.2 exists with an index.php?ctrl=file&targetObjId=fileFolder-2&targetObjIdChild=[XSS] attack. CWE-79
Cross-site Scripting 		CVE-2017-6562 2024-11-21 12:30 2017-03-9 Show GitHub Exploit DB Packet Storm
256266 6.1 MEDIUM
Network 		agora-project agora-project XSS in Agora-Project 3.2.2 exists with an index.php?ctrl=object&action=[XSS] attack. CWE-79
Cross-site Scripting 		CVE-2017-6561 2024-11-21 12:30 2017-03-9 Show GitHub Exploit DB Packet Storm
256267 6.1 MEDIUM
Network 		agora-project agora-project XSS in Agora-Project 3.2.2 exists with an index.php?ctrl=misc&action=[XSS]&editObjId=[XSS] attack. CWE-79
Cross-site Scripting 		CVE-2017-6560 2024-11-21 12:30 2017-03-9 Show GitHub Exploit DB Packet Storm
256268 6.1 MEDIUM
Network 		agora-project agora-project XSS in Agora-Project 3.2.2 exists with an index.php?disconnect=1&msgNotif[]=[XSS] attack. CWE-79
Cross-site Scripting 		CVE-2017-6559 2024-11-21 12:30 2017-03-9 Show GitHub Exploit DB Packet Storm
256269 9.8 CRITICAL
Network 		iball ib-wra150n_firmware iball Baton 150M iB-WRA150N v1 00000001 1.2.6 build 110401 Rel.47776n devices are prone to an authentication bypass vulnerability that allows remote attackers to view and modify administrative router… CWE-798
 Use of Hard-coded Credentials 		CVE-2017-6558 2024-11-21 12:30 2017-03-9 Show GitHub Exploit DB Packet Storm
256270 5.4 MEDIUM
Network 		cmsmadesimple cms_made_simple Cross-site scripting (XSS) vulnerability in CMS Made Simple (CMSMS) 2.1.6 allows remote authenticated users to inject arbitrary web script or HTML via the "adminpage > sitesetting > General Settings … CWE-79
Cross-site Scripting 		CVE-2017-6556 2024-11-21 12:30 2017-03-9 Show GitHub Exploit DB Packet Storm