Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 27, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
731 7.1 重要
Local 		オラクル Oracle Solaris オラクルのOracle Solarisにおける複数の脆弱性 CWE-269
CWE-400
CVE-2026-46914 2026-06-22 11:50 2026-06-17 Show GitHub Exploit DB Packet Storm
732 8.8 重要
Network 		オラクル Oracle Process Manufacturing Product Development オラクルのOracle Process Manufacturing Product Developmentにおける複数の脆弱性 CWE-269
CWE-284
CWE-287
CWE-306
CVE-2026-46916 2026-06-22 11:50 2026-06-17 Show GitHub Exploit DB Packet Storm
733 9.9 緊急
Network 		オラクル Oracle Process Manufacturing Product Development オラクルのOracle Process Manufacturing Product Developmentにおけるアクセス制御に関する脆弱性 CWE-284
不適切なアクセス制御 		CVE-2026-46918 2026-06-22 11:50 2026-06-17 Show GitHub Exploit DB Packet Storm
734 8.1 重要
Network 		オラクル Oracle Receivables オラクルのOracle Receivablesにおける複数の脆弱性 CWE-284
CWE-306
CVE-2026-46927 2026-06-22 11:50 2026-06-17 Show GitHub Exploit DB Packet Storm
735 8.8 重要
Network 		オラクル Oracle Enterprise Asset Management オラクルのOracle Enterprise Asset Managementにおけるアクセス制御に関する脆弱性 CWE-284
不適切なアクセス制御 		CVE-2026-46931 2026-06-22 11:50 2026-06-17 Show GitHub Exploit DB Packet Storm
736 7.1 重要
Network 		オラクル Oracle Enterprise Asset Management オラクルのOracle Enterprise Asset Managementにおけるアクセス制御に関する脆弱性 CWE-284
不適切なアクセス制御 		CVE-2026-46932 2026-06-22 11:50 2026-06-17 Show GitHub Exploit DB Packet Storm
737 9.9 緊急
Network 		オラクル Oracle Applications Manager オラクルのOracle Applications Managerにおける複数の脆弱性 CWE-269
CWE-284
CWE-306
CVE-2026-46933 2026-06-22 11:50 2026-06-17 Show GitHub Exploit DB Packet Storm
738 8.8 重要
Network 		オラクル Oracle iSetup オラクルのOracle iSetupにおける複数の脆弱性 CWE-269
CWE-287
CWE-306
CVE-2026-46937 2026-06-22 11:50 2026-06-17 Show GitHub Exploit DB Packet Storm
739 9.1 緊急
Network 		オラクル Oracle iSupport オラクルのOracle iSupportにおけるアクセス制御に関する脆弱性 CWE-284
CWE-noinfo
CVE-2026-46944 2026-06-22 11:50 2026-06-17 Show GitHub Exploit DB Packet Storm
740 9.1 緊急
Network 		オラクル Oracle iSupport オラクルのOracle iSupportにおけるアクセス制御に関する脆弱性 CWE-284
CWE-noinfo
CVE-2026-46945 2026-06-22 11:50 2026-06-17 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 28, 2026, 4:01 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
191291 7.5 HIGH
Network 		jsoup
quarkus
oracle
netapp 		jsoup
quarkus
webcenter_portal
business_process_management_suite
flexcube_universal_banking
peoplesoft_enterprise_peopletools
primavera_unifier
communications_messaging_server 		jsoup is a Java library for working with HTML. Those using jsoup versions prior to 1.14.2 to parse untrusted HTML or XML may be vulnerable to DOS attacks. If the parser is run on user supplied input,… - CVE-2021-37714 2024-11-21 15:15 2021-08-19 Show GitHub Exploit DB Packet Storm
191292 8.8 HIGH
Network 		pimcore pimcore Pimcore is an open source data & experience management platform. Prior to version 10.1.1, Data Object CSV import allows formular injection. The problem is patched in 10.1.1. Aside from upgrading, one… - CVE-2021-37702 2024-11-21 15:15 2021-08-19 Show GitHub Exploit DB Packet Storm
191293 9.8 CRITICAL
Network 		seacms seacms SQL Injection in SEACMS v210530 (2021-05-30) allows remote attackers to execute arbitrary code via the component "admin_ajax.php?action=checkrepeat&v_name=". CWE-89
SQL Injection 		CVE-2021-37358 2024-11-21 15:15 2021-08-19 Show GitHub Exploit DB Packet Storm
191294 9.8 CRITICAL
Network 		apache ofbiz Unrestricted Upload of File with Dangerous Type vulnerability in Apache OFBiz allows an attacker to execute remote commands. This issue affects Apache OFBiz version 17.12.07 and prior versions. Upgra… CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2021-37608 2024-11-21 15:15 2021-08-18 Show GitHub Exploit DB Packet Storm
191295 8.8 HIGH
Network 		shopware shopware Versions prior to 6.4.3.1 contain an authenticated server-side request forgery vulnerability in file upload via URL. Version 6.4.3.1 contains a patch. As workarounds for older versions of 6.1, 6.2, a… CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2021-37711 2024-11-21 15:15 2021-08-17 Show GitHub Exploit DB Packet Storm
191296 5.4 MEDIUM
Network 		shopware shopware Shopware is an open source eCommerce platform. Versions prior to 6.4.3.1 contain a Cross-Site Scripting vulnerability via SVG media files. Version 6.4.3.1 contains a patch. As workarounds for older v… - CVE-2021-37710 2024-11-21 15:15 2021-08-17 Show GitHub Exploit DB Packet Storm
191297 6.5 MEDIUM
Network 		shopware shopware Shopware is an open source eCommerce platform. Versions prior to 6.4.3.1 contain a vulnerability involving an insecure direct object reference of log files of the Import/Export feature. Version 6.4.3… CWE-639
 Authorization Bypass Through User-Controlled Key 		CVE-2021-37709 2024-11-21 15:15 2021-08-17 Show GitHub Exploit DB Packet Storm
191298 9.8 CRITICAL
Network 		shopware shopware Shopware is an open source eCommerce platform. Versions prior to 6.4.3.1 contain a command injection vulnerability in mail agent settings. Version 6.4.3.1 contains a patch. As workarounds for older v… CWE-78
OS Command  		CVE-2021-37708 2024-11-21 15:15 2021-08-17 Show GitHub Exploit DB Packet Storm
191299 7.5 HIGH
Network 		shopware shopware Shopware is an open source eCommerce platform. Versions prior to 6.4.3.1 contain a vulnerability that allows manipulation of product reviews via API. Version 6.4.3.1 contains a patch. As workarounds … NVD-CWE-noinfo
CVE-2021-37707 2024-11-21 15:15 2021-08-17 Show GitHub Exploit DB Packet Storm
191300 10.0 CRITICAL
Network 		microsoft onefuzz OneFuzz is an open source self-hosted Fuzzing-As-A-Service platform. Starting with OneFuzz 2.12.0 or greater, an incomplete authorization check allows an authenticated user from any Azure Active Dire… CWE-863
 Incorrect Authorization 		CVE-2021-37705 2024-11-21 15:15 2021-08-14 Show GitHub Exploit DB Packet Storm