Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
194251	8.2	重要 Network	オラクル	-	Oracle E-Business Suite の Oracle One-to-One Fulfillment における User Interface に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2017-3425	2017-02-2 11:55	2017-01-17	Show	GitHub Exploit DB Packet Storm

194252	8.2	重要 Network	オラクル	-	Oracle E-Business Suite の Oracle One-to-One Fulfillment における User Interface に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2017-3424	2017-02-2 11:55	2017-01-17	Show	GitHub Exploit DB Packet Storm

194253	8.2	重要 Network	オラクル	-	Oracle E-Business Suite の Oracle One-to-One Fulfillment における User Interface に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2017-3423	2017-02-2 11:55	2017-01-17	Show	GitHub Exploit DB Packet Storm

194254	8.2	重要 Network	オラクル	-	Oracle E-Business Suite の Oracle One-to-One Fulfillment における User Interface に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2017-3422	2017-02-2 11:55	2017-01-17	Show	GitHub Exploit DB Packet Storm

194255	8.2	重要 Network	オラクル	-	Oracle E-Business Suite の Oracle One-to-One Fulfillment における User Interface に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2017-3421	2017-02-2 11:55	2017-01-17	Show	GitHub Exploit DB Packet Storm

194256	8.2	重要 Network	オラクル	-	Oracle E-Business Suite の Oracle CRM Technical Foundation における User Interface に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2017-3420	2017-02-2 11:55	2017-01-17	Show	GitHub Exploit DB Packet Storm

194257	8.2	重要 Network	オラクル	-	Oracle E-Business Suite の Oracle CRM Technical Foundation における User Interface に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2017-3419	2017-02-2 11:55	2017-01-17	Show	GitHub Exploit DB Packet Storm

194258	8.2	重要 Network	オラクル	-	Oracle E-Business Suite の Oracle CRM Technical Foundation における User Interface に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2017-3418	2017-02-2 11:54	2017-01-17	Show	GitHub Exploit DB Packet Storm

194259	8.2	重要 Network	オラクル	-	Oracle E-Business Suite の Oracle Universal Work Queue における User Interface に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2017-3417	2017-02-2 11:54	2017-01-17	Show	GitHub Exploit DB Packet Storm

194260	8.2	重要 Network	オラクル	-	Oracle E-Business Suite の Oracle Universal Work Queue における User Interface に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2017-3416	2017-02-2 11:54	2017-01-17	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:April 21, 2026, 4:10 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
293601	-	videolan	vlc	Multiple integer overflows in VLC before 0.8.6f allow remote attackers to cause a denial of service (crash) via the (1) MP4 demuxer, (2) Real demuxer, and (3) Cinepak codec, which triggers a buffer o…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2008-1768	2017-09-29 10:30	2008-04-25	Show	GitHub Exploit DB Packet Storm

293602	-	iscripts	socialware	iScripts SocialWare stores passwords in cleartext in a database, which allows context-dependent attackers to obtain sensitive information.	CWE-310 Cryptographic Issues	CVE-2008-1772	2017-09-29 10:30	2008-04-15	Show	GitHub Exploit DB Packet Storm

293603	-	dragoon	dragoon	PHP remote file inclusion vulnerability in includes/header.inc.php in Dragoon 0.1 allows remote attackers to execute arbitrary PHP code via a URL in the root parameter.	CWE-94 Code Injection	CVE-2008-1773	2017-09-29 10:30	2008-04-15	Show	GitHub Exploit DB Packet Storm

293604	-	pligg	pligg_cms	SQL injection vulnerability in editlink.php in Pligg 9.9.0 allows remote attackers to execute arbitrary SQL commands via the id parameter.	CWE-89 SQL Injection	CVE-2008-1774	2017-09-29 10:30	2008-04-15	Show	GitHub Exploit DB Packet Storm

293605	-	phpblock	phpblock	PHP remote file inclusion vulnerability in modules/basicfog/basicfogfactory.class.php in PhpBlock A8.4 allows remote attackers to execute arbitrary PHP code via a URL in the PATH_TO_CODE parameter.	CWE-94 Code Injection	CVE-2008-1776	2017-09-29 10:30	2008-04-15	Show	GitHub Exploit DB Packet Storm

293606	-	sun	solaris	Sun Solaris 8, 9, and 10 allows "remote privileged" users to cause a denial of service (panic) via unknown vectors related to self encapsulated IP packets.	CWE-399 Resource Management Errors	CVE-2008-1779	2017-09-29 10:30	2008-04-15	Show	GitHub Exploit DB Packet Storm

293607	-	advanced_software_engineering	chartdirector	phpdemo/viewsource.php in Advanced Software Engineering ChartDirector 4.1 allows remote attackers to read sensitive files via the file parameter.	CWE-200 Information Exposure	CVE-2008-1782	2017-09-29 10:30	2008-04-15	Show	GitHub Exploit DB Packet Storm

293608	-	prozilla	reviews	Prozilla Reviews 1.0 allows remote attackers to delete arbitrary users via a modified UserID parameter in a direct request to siteadmin/DeleteUser.php.	CWE-264 Permissions, Privileges, and Access Controls	CVE-2008-1783	2017-09-29 10:30	2008-04-15	Show	GitHub Exploit DB Packet Storm

293609	-	prozilla	topsites	Prozilla Topsites 1.0 allows remote attackers to perform administrative actions via a direct request to (1) addu.php, (2) editu.php, and (3) uidx.php in siteadmin/.	CWE-264 Permissions, Privileges, and Access Controls	CVE-2008-1784	2017-09-29 10:30	2008-04-15	Show	GitHub Exploit DB Packet Storm

293610	-	prozilla	top_100	delete.php in Prozilla Top 100 1.2 allows remote authenticated users to delete statistics and accounts of arbitrary users via a modified s parameter.	CWE-20 Improper Input Validation	CVE-2008-1785	2017-09-29 10:30	2008-04-15	Show	GitHub Exploit DB Packet Storm