Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
194181	8.2	重要 Network	オラクル	-	Oracle E-Business Suite の Oracle One-to-One Fulfillment における Request Confirmatoin に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2017-3278	2017-02-3 14:43	2017-01-17	Show	GitHub Exploit DB Packet Storm

194182	4.9	警告 Network	オラクル	-	Oracle E-Business Suite の Oracle Applications Manager における OAM Client に関する脆弱性	CWE-200 情報漏えい	CVE-2017-3277	2017-02-3 14:43	2017-01-17	Show	GitHub Exploit DB Packet Storm

194183	8.2	重要 Network	オラクル	-	Oracle E-Business Suite の Oracle Email Center における User Interface に関する脆弱性	CWE-254 セキュリティ機能	CVE-2017-3275	2017-02-3 14:43	2017-01-17	Show	GitHub Exploit DB Packet Storm

194184	8.2	重要 Network	オラクル	-	Oracle E-Business Suite の Oracle Email Center における User Interface に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2017-3274	2017-02-3 14:43	2017-01-17	Show	GitHub Exploit DB Packet Storm

194185	6	警告 Local	オラクル	-	Oracle E-Business Suite の Oracle Application Object Library における Patching に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2017-3246	2017-02-3 14:43	2017-01-17	Show	GitHub Exploit DB Packet Storm

194186	9.1	緊急 Network	オラクル	-	Oracle E-Business Suite の Oracle One-to-One Fulfillment における Internal Operations に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2016-8325	2017-02-3 14:43	2017-01-17	Show	GitHub Exploit DB Packet Storm

194187	8.2	重要 Network	オラクル	-	Oracle E-Business Suite の Oracle Advanced Outbound Telephony における User Interface に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2017-3402	2017-02-3 10:34	2017-01-17	Show	GitHub Exploit DB Packet Storm

194188	8.2	重要 Network	オラクル	-	Oracle E-Business Suite の Oracle Advanced Outbound Telephony における User Interface に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2017-3401	2017-02-3 10:34	2017-01-17	Show	GitHub Exploit DB Packet Storm

194189	8.2	重要 Network	オラクル	-	Oracle E-Business Suite の Oracle Advanced Outbound Telephony における User Interface に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2017-3400	2017-02-3 10:34	2017-01-17	Show	GitHub Exploit DB Packet Storm

194190	8.2	重要 Network	オラクル	-	Oracle E-Business Suite の Oracle Advanced Outbound Telephony における User Interface に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2017-3399	2017-02-3 10:34	2017-01-17	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:April 20, 2026, 4:09 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
293561	-	nmnnewsletter	nmnnewsletter	PHP remote file inclusion vulnerability in confirmUnsubscription.php in NmnNewsletter 1.0.7 allows remote attackers to execute arbitrary PHP code via a URL in the output parameter.	CWE-94 Code Injection	CVE-2007-6585	2017-09-29 10:30	2007-12-29	Show	GitHub Exploit DB Packet Storm

293562	-	niclor	niclor	SQL injection vulnerability in sezione_news.php in nicLOR-CMS allows remote attackers to execute arbitrary SQL commands via the id parameter in a sezione page action to index.php.	CWE-89 SQL Injection	CVE-2007-6586	2017-09-29 10:30	2007-12-29	Show	GitHub Exploit DB Packet Storm

293563	-	mozilla	firefox seamonkey	The jar protocol handler in Mozilla Firefox before 2.0.0.10 and SeaMonkey before 1.1.7 does not update the origin domain when retrieving the inner URL parameter yields an HTTP redirect, which allows …	CWE-79 Cross-site Scripting	CVE-2007-6589	2017-09-29 10:30	2007-12-29	Show	GitHub Exploit DB Packet Storm

293564	-	noserub	noserub	SQL injection vulnerability in app/models/identity.php in NoseRub 0.5.2 and earlier allows remote attackers to execute arbitrary SQL commands via the username field to the login script.	CWE-89 SQL Injection	CVE-2007-6602	2017-09-29 10:30	2008-01-1	Show	GitHub Exploit DB Packet Storm

293565	-	hotscripts	hot_or_not_clone	Hot or Not Clone has insufficient access control for producing and reading database backups, which allows remote attackers to obtain the administrator username and password via a direct request to co…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2007-6603	2017-09-29 10:30	2008-01-1	Show	GitHub Exploit DB Packet Storm

293566	-	xcms	xcms	Multiple directory traversal vulnerabilities in index.php in XCMS 1.82 and earlier allow remote attackers to read arbitrary files via a .. (dot dot) in (1) the s parameter to the admin page or (2) th…	CWE-22 Path Traversal	CVE-2007-6604	2017-09-29 10:30	2008-01-1	Show	GitHub Exploit DB Packet Storm

293567	-	skyfex	skyfex_client	Buffer overflow in a certain ActiveX control in SkyFexClient.ocx 1.0.2.77 in SkyFex Client 1.0 allows remote attackers to execute arbitrary code via long strings in the first four arguments to the St…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2007-6605	2017-09-29 10:30	2008-01-1	Show	GitHub Exploit DB Packet Storm

293568	-	joovili	joovili	Directory traversal vulnerability in include/images.inc.php in Joovili 2.x allows remote attackers to read arbitrary files via a .. (dot dot) in the picture parameter.	CWE-22 Path Traversal	CVE-2007-6620	2017-09-29 10:30	2008-01-4	Show	GitHub Exploit DB Packet Storm

293569	-	joovili	joovili	Directory traversal vulnerability in joovili.images.php in Joovili 3.0.0 through 3.0.6 allows remote attackers to read arbitrary files via a .. (dot dot) in the picture parameter.	CWE-22 Path Traversal	CVE-2007-6621	2017-09-29 10:30	2008-01-4	Show	GitHub Exploit DB Packet Storm

293570	-	zeuscms	zeuscms	SQL injection vulnerability in security.php in ZeusCMS 0.3 and earlier allows remote attackers to execute arbitrary SQL commands via the Referer HTTP header.	CWE-89 SQL Injection	CVE-2007-6622	2017-09-29 10:30	2008-01-4	Show	GitHub Exploit DB Packet Storm