Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 13, 2026, 10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
197481	8.2	重要 Network	オラクル	-	Oracle E-Business Suite の Oracle Common Applications における Role Summary に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2017-3326	2017-02-3 14:44	2017-01-17	Show	GitHub Exploit DB Packet Storm

197482	8.2	重要 Network	オラクル	-	Oracle E-Business Suite の Oracle XML Gateway における Oracle Transport Agent に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2017-3303	2017-02-3 14:44	2017-01-17	Show	GitHub Exploit DB Packet Storm

197483	8.2	重要 Network	オラクル	-	Oracle E-Business Suite の Oracle iStore における User Interface に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2017-3287	2017-02-3 14:44	2017-01-17	Show	GitHub Exploit DB Packet Storm

197484	6	警告 Local	オラクル	-	Oracle E-Business Suite の Oracle Applications DBA における Patching に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2017-3286	2017-02-3 14:43	2017-01-17	Show	GitHub Exploit DB Packet Storm

197485	8.2	重要 Network	オラクル	-	Oracle E-Business Suite の Oracle Service Fulfillment Manager における User Interface に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2017-3285	2017-02-3 14:43	2017-01-17	Show	GitHub Exploit DB Packet Storm

197486	8.2	重要 Network	オラクル	-	Oracle E-Business Suite の Oracle Fulfillment Manager における User Interface に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2017-3284	2017-02-3 14:43	2017-01-17	Show	GitHub Exploit DB Packet Storm

197487	4.7	警告 Network	オラクル	-	Oracle E-Business Suite の Oracle Partner Management における User Interface に関する脆弱性	CWE-20 不適切な入力確認	CVE-2017-3283	2017-02-3 14:43	2017-01-17	Show	GitHub Exploit DB Packet Storm

197488	4.7	警告 Network	オラクル	-	Oracle E-Business Suite の Oracle Partner Management における User Interface に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2017-3282	2017-02-3 14:43	2017-01-17	Show	GitHub Exploit DB Packet Storm

197489	4.7	警告 Network	オラクル	-	Oracle E-Business Suite の Oracle Partner Management における User Interface に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2017-3281	2017-02-3 14:43	2017-01-17	Show	GitHub Exploit DB Packet Storm

197490	4.7	警告 Network	オラクル	-	Oracle E-Business Suite の Oracle Partner Management における User Interface に関する脆弱性	CWE-20 不適切な入力確認	CVE-2017-3280	2017-02-3 14:43	2017-01-17	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 13, 2026, 5:05 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
350291	-	lighttpd	lighttpd	The buffer_urldecode function in Lighttpd 1.3.7 and earlier does not properly handle control characters, which allows remote attackers to obtain the source code for CGI and FastCGI scripts via a URL …	NVD-CWE-Other	CVE-2005-0453	2008-09-6 05:46	2005-02-16	Show	GitHub Exploit DB Packet Storm

350292	-	phpmyadmin	phpmyadmin	phpMyAdmin 2.6.2-dev, and possibly earlier versions, allows remote attackers to determine the full path of the web root via a direct request to select_lang.lib.php, which reveals the path in a PHP er…	NVD-CWE-Other	CVE-2005-0459	2008-09-6 05:46	2005-05-2	Show	GitHub Exploit DB Packet Storm

350293	-	mercuryboard	mercuryboard	index.php in MercuryBoard 1.0.x and 1.1.x allows remote attackers to obtain sensitive information by setting the debug parameter.	NVD-CWE-Other	CVE-2005-0460	2008-09-6 05:46	2005-05-2	Show	GitHub Exploit DB Packet Storm

350294	-	-	-	Unknown vulnerability in NewsBruiser 2.x before 2.6.1 allows remote attackers to "take actions on comments."	NVD-CWE-Other	CVE-2005-0461	2008-09-6 05:46	2005-05-2	Show	GitHub Exploit DB Packet Storm

350295	-	mercuryboard	mercuryboard	Cross-site scripting (XSS) vulnerability in MercuryBoard 1.0.x and 1.1.x allows remote attackers to inject arbitrary HTML and web script via the f parameter.	NVD-CWE-Other	CVE-2005-0462	2008-09-6 05:46	2005-02-17	Show	GitHub Exploit DB Packet Storm

350296	-	inl	ulog-php	Unknown "major security flaws" in Ulog-php before 1.0, related to input validation, have unknown impact and attack vectors, probably related to SQL injection vulnerabilities in (1) host.php, (2) port…	NVD-CWE-Other	CVE-2005-0463	2008-09-6 05:46	2005-05-2	Show	GitHub Exploit DB Packet Storm

350297	-	sgi	irix	gr_osview in SGI IRIX 6.5.22, and possibly other 6.5 versions, does not drop privileges when opening description files while in debug mode, which allows local users to read a line from arbitrary file…	NVD-CWE-Other	CVE-2005-0464	2008-09-6 05:46	2005-05-2	Show	GitHub Exploit DB Packet Storm

350298	-	sgi	irix	gr_osview in SGI IRIX does not drop privileges before opening files, which allows local users to overwrite arbitrary files via the -s option.	NVD-CWE-Other	CVE-2005-0465	2008-09-6 05:46	2005-05-2	Show	GitHub Exploit DB Packet Storm

350299	-	gproftpd	gproftpd	Format string vulnerability in gprostats for GProFTPD before 8.1.9 may allow remote attackers to execute arbitrary code via an FTP transfer with a crafted filename that causes format string specifier…	NVD-CWE-Other	CVE-2005-0484	2008-09-6 05:46	2005-03-30	Show	GitHub Exploit DB Packet Storm

350300	-	linux	linux_kernel	The /proc handling (proc/base.c) Linux kernel 2.4 before 2.4.17 allows local users to cause a denial of service via unknown vectors that cause an invalid access of free memory.	NVD-CWE-Other	CVE-2005-0489	2008-09-6 05:46	2005-12-31	Show	GitHub Exploit DB Packet Storm