Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 28, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
731 7.1 重要
Local
オラクル Oracle Solaris オラクルのOracle Solarisにおける複数の脆弱性 CWE-269
CWE-400
CVE-2026-46914 2026-06-22 11:50 2026-06-17 Show GitHub Exploit DB Packet Storm
732 8.8 重要
Network
オラクル Oracle Process Manufacturing Product Development オラクルのOracle Process Manufacturing Product Developmentにおける複数の脆弱性 CWE-269
CWE-284
CWE-287
CWE-306
CVE-2026-46916 2026-06-22 11:50 2026-06-17 Show GitHub Exploit DB Packet Storm
733 9.9 緊急
Network
オラクル Oracle Process Manufacturing Product Development オラクルのOracle Process Manufacturing Product Developmentにおけるアクセス制御に関する脆弱性 CWE-284
不適切なアクセス制御
CVE-2026-46918 2026-06-22 11:50 2026-06-17 Show GitHub Exploit DB Packet Storm
734 8.1 重要
Network
オラクル Oracle Receivables オラクルのOracle Receivablesにおける複数の脆弱性 CWE-284
CWE-306
CVE-2026-46927 2026-06-22 11:50 2026-06-17 Show GitHub Exploit DB Packet Storm
735 8.8 重要
Network
オラクル Oracle Enterprise Asset Management オラクルのOracle Enterprise Asset Managementにおけるアクセス制御に関する脆弱性 CWE-284
不適切なアクセス制御
CVE-2026-46931 2026-06-22 11:50 2026-06-17 Show GitHub Exploit DB Packet Storm
736 7.1 重要
Network
オラクル Oracle Enterprise Asset Management オラクルのOracle Enterprise Asset Managementにおけるアクセス制御に関する脆弱性 CWE-284
不適切なアクセス制御
CVE-2026-46932 2026-06-22 11:50 2026-06-17 Show GitHub Exploit DB Packet Storm
737 9.9 緊急
Network
オラクル Oracle Applications Manager オラクルのOracle Applications Managerにおける複数の脆弱性 CWE-269
CWE-284
CWE-306
CVE-2026-46933 2026-06-22 11:50 2026-06-17 Show GitHub Exploit DB Packet Storm
738 8.8 重要
Network
オラクル Oracle iSetup オラクルのOracle iSetupにおける複数の脆弱性 CWE-269
CWE-287
CWE-306
CVE-2026-46937 2026-06-22 11:50 2026-06-17 Show GitHub Exploit DB Packet Storm
739 9.1 緊急
Network
オラクル Oracle iSupport オラクルのOracle iSupportにおけるアクセス制御に関する脆弱性 CWE-284
CWE-noinfo
CVE-2026-46944 2026-06-22 11:50 2026-06-17 Show GitHub Exploit DB Packet Storm
740 9.1 緊急
Network
オラクル Oracle iSupport オラクルのOracle iSupportにおけるアクセス制御に関する脆弱性 CWE-284
CWE-noinfo
CVE-2026-46945 2026-06-22 11:50 2026-06-17 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 29, 2026, 4:19 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
320801 6.7 MEDIUM
Local
synology drive_client Out-of-bounds write vulnerability in backup task management functionality in Synology Drive Client before 3.4.0-15721 allows local users with administrator privileges to execute arbitrary commands vi… CWE-787
 Out-of-bounds Write
CVE-2022-49039 2024-10-9 01:08 2024-09-26 Show GitHub Exploit DB Packet Storm
320802 7.8 HIGH
Local
synology drive_client Inclusion of functionality from untrusted control sphere vulnerability in OpenSSL DLL component in Synology Drive Client before 3.3.0-15082 allows local users to execute arbitrary code via unspecifie… CWE-829
 Inclusion of Functionality from Untrusted Control Sphere
CVE-2022-49038 2024-10-9 01:08 2024-09-26 Show GitHub Exploit DB Packet Storm
320803 6.5 MEDIUM
Network
synology drive_client Insertion of sensitive information into log file vulnerability in proxy settings component in Synology Drive Client before 3.3.0-15082 allows remote authenticated users to obtain sensitive informatio… CWE-532
 Inclusion of Sensitive Information in Log Files
CVE-2022-49037 2024-10-9 01:08 2024-09-26 Show GitHub Exploit DB Packet Storm
320804 6.7 MEDIUM
Local
cisco telepresence_video_communication_server A vulnerability in the restricted shell of Cisco Expressway Series could allow an authenticated, local attacker to perform command injection attacks on the underlying operating system and elevate pri… CWE-77
Command Injection
CVE-2024-20492 2024-10-9 01:07 2024-10-3 Show GitHub Exploit DB Packet Storm
320805 4.4 MEDIUM
Local
synology drive_client Buffer copy without checking size of input ('Classic Buffer Overflow') vulnerability in connection management functionality in Synology Drive Client before 3.4.0-15721 allows local users with adminis… CWE-120
Classic Buffer Overflow
CVE-2022-49040 2024-10-9 01:07 2024-09-26 Show GitHub Exploit DB Packet Storm
320806 4.4 MEDIUM
Local
synology drive_client Buffer copy without checking size of input ('Classic Buffer Overflow') vulnerability in backup task management functionality in Synology Drive Client before 3.4.0-15721 allows local users with admini… CWE-120
Classic Buffer Overflow
CVE-2022-49041 2024-10-9 01:06 2024-09-26 Show GitHub Exploit DB Packet Storm
320807 5.4 MEDIUM
Network
cisco nexus_dashboard
nexus_dashboard_fabric_controller
A vulnerability in a specific REST API endpoint of Cisco NDFC could allow an authenticated, low-privileged, remote attacker to upload or delete files on an affected device. This vulnerability exis… CWE-862
 Missing Authorization
CVE-2024-20477 2024-10-9 01:00 2024-10-3 Show GitHub Exploit DB Packet Storm
320808 8.2 HIGH
Network
synology drive_client Buffer copy without checking size of input ('Classic Buffer Overflow') vulnerability in vss service component in Synology Drive Client before 3.5.0-16084 allows remote attackers to overwrite trivial … CWE-120
Classic Buffer Overflow
CVE-2023-52946 2024-10-9 00:55 2024-09-26 Show GitHub Exploit DB Packet Storm
320809 8.6 HIGH
Network
cisco nexus_dashboard_orchestrator
nexus_dashboard_insights
nexus_dashboard_fabric_controller
A vulnerability in a logging function of Cisco Nexus Dashboard Insights could allow an attacker with access to a tech support file to view sensitive information. This vulnerability exists because … CWE-532
 Inclusion of Sensitive Information in Log Files
CVE-2024-20491 2024-10-9 00:55 2024-10-3 Show GitHub Exploit DB Packet Storm
320810 9.8 CRITICAL
Network
deltaww diaenergie Delta Electronics DIAEnergie is vulnerable to an SQL injection in the script AM_RegReport.aspx. An unauthenticated attacker may be able to exploit this issue to obtain records contained in the target… CWE-89
SQL Injection
CVE-2024-43699 2024-10-9 00:44 2024-10-4 Show GitHub Exploit DB Packet Storm