Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
194111	6.5	警告 Network	オラクル	-	Oracle Financial Services Applications の Oracle FLEXCUBE Universal Banking における Core に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2016-8311	2017-02-6 11:26	2017-01-17	Show	GitHub Exploit DB Packet Storm

194112	7.3	重要 Network	オラクル	-	Oracle Financial Services Applications の Oracle FLEXCUBE Universal Banking における Core に関する脆弱性	CWE-254 セキュリティ機能	CVE-2016-8310	2017-02-6 11:26	2017-01-17	Show	GitHub Exploit DB Packet Storm

194113	4.3	警告 Network	オラクル	-	Oracle Financial Services Applications の Oracle FLEXCUBE Investor Servicing における Core に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2016-8309	2017-02-6 11:26	2017-01-17	Show	GitHub Exploit DB Packet Storm

194114	4.3	警告 Network	オラクル	-	Oracle Financial Services Applications の Oracle FLEXCUBE Private Banking における Product / Instrument Search に関する脆弱性	CWE-noinfo 情報不足	CVE-2016-8308	2017-02-6 11:26	2017-01-17	Show	GitHub Exploit DB Packet Storm

194115	5.3	警告 Network	オラクル	-	Oracle Financial Services Applications の Oracle FLEXCUBE Universal Banking における Core に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2016-8307	2017-02-6 11:26	2017-01-17	Show	GitHub Exploit DB Packet Storm

194116	5.4	警告 Network	オラクル	-	Oracle Financial Services Applications の Oracle FLEXCUBE Investor Servicing における Core に関する脆弱性	CWE-254 セキュリティ機能	CVE-2016-8306	2017-02-6 11:25	2017-01-17	Show	GitHub Exploit DB Packet Storm

194117	2.1	低 Physics	オラクル	-	Oracle Financial Services Applications の Oracle FLEXCUBE Universal Banking における Core に関する脆弱性	CWE-200 情報漏えい	CVE-2016-8305	2017-02-6 11:25	2017-01-17	Show	GitHub Exploit DB Packet Storm

194118	5.4	警告 Network	オラクル	-	Oracle Financial Services Applications の Oracle FLEXCUBE Universal Banking における Core に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2016-8304	2017-02-6 11:25	2017-01-17	Show	GitHub Exploit DB Packet Storm

194119	6.1	警告 Network	オラクル	-	Oracle Financial Services Applications の Oracle FLEXCUBE Universal Banking における Core に関する脆弱性	CWE-254 セキュリティ機能	CVE-2016-8303	2017-02-6 11:25	2017-01-17	Show	GitHub Exploit DB Packet Storm

194120	4.3	警告 Network	オラクル	-	Oracle Financial Services Applications の Oracle FLEXCUBE Universal Banking における Core に関する脆弱性	CWE-200 情報漏えい	CVE-2016-8302	2017-02-6 11:25	2017-01-17	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:April 17, 2026, 4:13 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
307081	-	accomplishtechnology	phpmydirectory	Cross-site scripting (XSS) vulnerability in alpha.php in phpMyDirectory 10.4.6 and earlier allows remote attackers to inject arbitrary web script or HTML via the letter parameter. NOTE: the provenan…	CWE-79 Cross-site Scripting	CVE-2006-4755	2012-10-22 13:00	2006-09-14	Show	GitHub Exploit DB Packet Storm

307082	-	accomplishtechnology	phpmydirectory	SQL injection vulnerability in alpha.php in phpMyDirectory 10.4.6 and earlier allows remote attackers to execute arbitrary SQL commands via the letter parameter. NOTE: the provenance of this informa…	CWE-89 SQL Injection	CVE-2006-4756	2012-10-22 13:00	2006-09-14	Show	GitHub Exploit DB Packet Storm

307083	-	plogger	plogger	SQL injection vulnerability in Plogger Beta 2 and earlier allows remote attackers to execute arbitrary SQL commands via the (1) id parameter to index.php and (2) page parameter.	CWE-89 SQL Injection	CVE-2005-4246	2012-10-22 13:00	2005-12-14	Show	GitHub Exploit DB Packet Storm

307084	-	plogger	plogger	Cross-site scripting (XSS) vulnerability in index.php in Plogger Beta 2 and earlier allows remote attackers to inject arbitrary web script or HTML via the searchterms parameter.	CWE-79 Cross-site Scripting	CVE-2005-4247	2012-10-22 13:00	2005-12-14	Show	GitHub Exploit DB Packet Storm

307085	-	amd ati	catalyst_driver	The AMD ATI atidsmxx.sys 3.0.502.0 driver on Windows Vista allows local users to bypass the driver signing policy, write to arbitrary kernel memory locations, and thereby gain privileges via unspecif…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2007-4315	2012-10-18 13:00	2007-08-14	Show	GitHub Exploit DB Packet Storm

307086	-	k5n	webcalendar	Multiple cross-site scripting (XSS) vulnerabilities in WebCalendar 1.2.0, and other versions before 1.2.5, allow remote attackers to inject arbitrary web script or HTML via the (1) tab parameter to u…	CWE-79 Cross-site Scripting	CVE-2010-0636	2012-10-13 11:58	2010-02-13	Show	GitHub Exploit DB Packet Storm

307087	-	k5n	webcalendar	Multiple cross-site request forgery (CSRF) vulnerabilities in WebCalendar 1.2.0, and other versions before 1.2.5, allow remote attackers to hijack the authentication of administrators for requests th…	CWE-352 Origin Validation Error	CVE-2010-0637	2012-10-13 11:58	2010-02-13	Show	GitHub Exploit DB Packet Storm

307088	-	html2ps_project	html2ps	Unknown vulnerability in html2ps HTML/PostScript converter 1.0, when used within LPRng, allows remote attackers to execute arbitrary code via "unsanitized input."	NVD-CWE-noinfo	CVE-2002-1275	2012-10-11 13:00	2002-11-12	Show	GitHub Exploit DB Packet Storm

307089	-	ultravnc	ultravnc	Stack-based buffer overflow in the ClientConnection::NegotiateProtocolVersion function in vncviewer/ClientConnection.cpp in vncviewer for UltraVNC 1.0.2 and 1.0.4 before 01252008, when in LISTENING m…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2008-0610	2012-08-14 11:37	2008-02-6	Show	GitHub Exploit DB Packet Storm

307090	-	boesch_it-consulting	simpnews	Multiple cross-site scripting (XSS) vulnerabilities in Boesch SimpNews before 2.34.01 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters to (1) admin/index.php, …	CWE-79 Cross-site Scripting	CVE-2006-5530	2012-08-6 13:00	2006-10-27	Show	GitHub Exploit DB Packet Storm