Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
194171	8.2	重要 Network	オラクル	-	Oracle E-Business Suite の Oracle XML Gateway における Oracle Transport Agent に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2017-3303	2017-02-3 14:44	2017-01-17	Show	GitHub Exploit DB Packet Storm

194172	8.2	重要 Network	オラクル	-	Oracle E-Business Suite の Oracle iStore における User Interface に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2017-3287	2017-02-3 14:44	2017-01-17	Show	GitHub Exploit DB Packet Storm

194173	6	警告 Local	オラクル	-	Oracle E-Business Suite の Oracle Applications DBA における Patching に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2017-3286	2017-02-3 14:43	2017-01-17	Show	GitHub Exploit DB Packet Storm

194174	8.2	重要 Network	オラクル	-	Oracle E-Business Suite の Oracle Service Fulfillment Manager における User Interface に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2017-3285	2017-02-3 14:43	2017-01-17	Show	GitHub Exploit DB Packet Storm

194175	8.2	重要 Network	オラクル	-	Oracle E-Business Suite の Oracle Fulfillment Manager における User Interface に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2017-3284	2017-02-3 14:43	2017-01-17	Show	GitHub Exploit DB Packet Storm

194176	4.7	警告 Network	オラクル	-	Oracle E-Business Suite の Oracle Partner Management における User Interface に関する脆弱性	CWE-20 不適切な入力確認	CVE-2017-3283	2017-02-3 14:43	2017-01-17	Show	GitHub Exploit DB Packet Storm

194177	4.7	警告 Network	オラクル	-	Oracle E-Business Suite の Oracle Partner Management における User Interface に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2017-3282	2017-02-3 14:43	2017-01-17	Show	GitHub Exploit DB Packet Storm

194178	4.7	警告 Network	オラクル	-	Oracle E-Business Suite の Oracle Partner Management における User Interface に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2017-3281	2017-02-3 14:43	2017-01-17	Show	GitHub Exploit DB Packet Storm

194179	4.7	警告 Network	オラクル	-	Oracle E-Business Suite の Oracle Partner Management における User Interface に関する脆弱性	CWE-20 不適切な入力確認	CVE-2017-3280	2017-02-3 14:43	2017-01-17	Show	GitHub Exploit DB Packet Storm

194180	8.2	重要 Network	オラクル	-	Oracle E-Business Suite の Oracle Leads Management における User Interface に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2017-3279	2017-02-3 14:43	2017-01-17	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:April 22, 2026, 4 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
294671	-	sun	java_se openjdk	JDK13Services.getProviders in Sun Java SE 5.0 before Update 20 and 6 before Update 15, and OpenJDK, grants full privileges to instances of unspecified object types, which allows context-dependent att…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2009-2689	2017-09-19 10:29	2009-08-11	Show	GitHub Exploit DB Packet Storm

294672	-	sun	java_se openjdk	The encoder in Sun Java SE 6 before Update 15, and OpenJDK, grants read access to private variables with unspecified names, which allows context-dependent attackers to obtain sensitive information vi…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2009-2690	2017-09-19 10:29	2009-08-11	Show	GitHub Exploit DB Packet Storm

294673	-	adium pidgin	adium pidgin	The msn_slplink_process_msg function in libpurple/protocols/msn/slplink.c in libpurple, as used in Pidgin (formerly Gaim) before 2.5.9 and Adium 1.3.5 and earlier, allows remote attackers to execute …	CWE-399 Resource Management Errors	CVE-2009-2694	2017-09-19 10:29	2009-08-21	Show	GitHub Exploit DB Packet Storm

294674	-	gnome	gdm	The Red Hat build script for the GNOME Display Manager (GDM) before 2.16.0-56 on Red Hat Enterprise Linux (RHEL) 5 omits TCP Wrapper support, which might allow remote attackers to bypass intended acc…	CWE-287 Improper Authentication	CVE-2009-2697	2017-09-19 10:29	2009-09-5	Show	GitHub Exploit DB Packet Storm

294675	-	pidgin	libpurple pidgin	libpurple/protocols/irc/msgs.c in the IRC protocol plugin in libpurple in Pidgin before 2.6.2 allows remote IRC servers to cause a denial of service (NULL pointer dereference and application crash) v…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2009-2703	2017-09-19 10:29	2009-09-9	Show	GitHub Exploit DB Packet Storm

294676	-	sun x.org	opensolaris solaris x11	XScreenSaver in Sun Solaris 9 and 10, OpenSolaris before snv_120, and X11 6.4.1 for Solaris 8, when the Xorg or Xnewt server is used, allows physically proximate attackers to obtain sensitive informa…	CWE-200 Information Exposure	CVE-2009-2711	2017-09-19 10:29	2009-08-8	Show	GitHub Exploit DB Packet Storm

294677	-	sun	virtualbox	Unspecified vulnerability in Sun VirtualBox 3.0.0 and 3.0.2 allows guest OS users to cause a denial of service (host OS reboot) via unknown vectors.	NVD-CWE-noinfo	CVE-2009-2714	2017-09-19 10:29	2009-08-8	Show	GitHub Exploit DB Packet Storm

294678	-	sun	virtualbox	Sun VirtualBox 2.2 through 3.0.2 r49928 allows guest OS users to cause a denial of service (Linux host OS reboot) via a sysenter instruction.	CWE-20 Improper Input Validation	CVE-2009-2715	2017-09-19 10:29	2009-08-8	Show	GitHub Exploit DB Packet Storm

294679	-	sun-jester	opennews	SQL injection vulnerability in admin.php in sun-jester OpenNews 1.0, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the username parameter.	CWE-89 SQL Injection	CVE-2009-2735	2017-09-19 10:29	2009-08-11	Show	GitHub Exploit DB Packet Storm

294680	-	sun-jester	opennews	Static code injection vulnerability in admin.php in sun-jester OpenNews 1.0 allows remote authenticated administrators to inject arbitrary PHP code into config.php via the "Overall Width" field in a …	CWE-94 Code Injection	CVE-2009-2736	2017-09-19 10:29	2009-08-11	Show	GitHub Exploit DB Packet Storm