Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 12, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
197541 8.2 重要
Network
オラクル - Oracle E-Business Suite の Oracle Marketing における User Interface に関する脆弱性 CWE-284
不適切なアクセス制御
CVE-2017-3358 2017-02-3 10:34 2017-01-17 Show GitHub Exploit DB Packet Storm
197542 8.2 重要
Network
オラクル - Oracle E-Business Suite の Oracle Marketing における User Interface に関する脆弱性 CWE-284
不適切なアクセス制御
CVE-2017-3357 2017-02-3 10:34 2017-01-17 Show GitHub Exploit DB Packet Storm
197543 8.2 重要
Network
オラクル - Oracle E-Business Suite の Oracle Marketing における User Interface に関する脆弱性 CWE-284
不適切なアクセス制御
CVE-2017-3354 2017-02-3 10:34 2017-01-17 Show GitHub Exploit DB Packet Storm
197544 8.2 重要
Network
オラクル - Oracle E-Business Suite の Oracle Marketing における User Interface に関する脆弱性 CWE-284
不適切なアクセス制御
CVE-2017-3353 2017-02-3 10:34 2017-01-17 Show GitHub Exploit DB Packet Storm
197545 8.2 重要
Network
オラクル - Oracle E-Business Suite の Oracle Advanced Outbound Telephony における User Interface に関する脆弱性 CWE-284
不適切なアクセス制御
CVE-2017-3403 2017-02-2 14:10 2017-01-17 Show GitHub Exploit DB Packet Storm
197546 8.2 重要
Network
オラクル - Oracle E-Business Suite の Oracle Common Applications における User Interface に関する脆弱性 CWE-284
不適切なアクセス制御
CVE-2017-3443 2017-02-2 11:56 2017-01-17 Show GitHub Exploit DB Packet Storm
197547 8.2 重要
Network
オラクル - Oracle E-Business Suite の Oracle Customer Interaction History における User Interface に関する脆弱性 CWE-284
不適切なアクセス制御
CVE-2017-3442 2017-02-2 11:56 2017-01-17 Show GitHub Exploit DB Packet Storm
197548 8.2 重要
Network
オラクル - Oracle E-Business Suite の Oracle Customer Interaction History における User Interface に関する脆弱性 CWE-284
不適切なアクセス制御
CVE-2017-3441 2017-02-2 11:56 2017-01-17 Show GitHub Exploit DB Packet Storm
197549 8.2 重要
Network
オラクル - Oracle E-Business Suite の Oracle Customer Interaction History における User Interface に関する脆弱性 CWE-284
不適切なアクセス制御
CVE-2017-3440 2017-02-2 11:56 2017-01-17 Show GitHub Exploit DB Packet Storm
197550 8.2 重要
Network
オラクル - Oracle E-Business Suite の Oracle One-to-One Fulfillment における User Interface に関する脆弱性 CWE-284
不適切なアクセス制御
CVE-2017-3439 2017-02-2 11:56 2017-01-17 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 12, 2026, 5:06 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
349521 - gurgens gurgens_guest_book Gurgens (GASoft) Guest Book 2.1 stores the db/Genid.dat database file under the web document root with insufficient access control, which allows remote attackers to obtain and decrypt usernames and p… NVD-CWE-Other
CVE-2005-1647 2008-09-6 05:49 2005-05-18 Show GitHub Exploit DB Packet Storm
349522 - gurgens gurgens_ultimate_forum Gurgens (GASoft) Ultimate Forum 1.0 stores the db/Genid.dat database file under the web document root with insufficient access control, which allows remote attackers to obtain and decrypt usernames a… NVD-CWE-Other
CVE-2005-1648 2008-09-6 05:49 2005-05-18 Show GitHub Exploit DB Packet Storm
349523 - woppoware postmaster Directory traversal vulnerability in message.htm for Woppoware PostMaster 4.2.2 (build 3.2.5) allows remote attackers to determine the existence of arbitrary files via a .. (dot dot) in the wmm param… NVD-CWE-Other
CVE-2005-1651 2008-09-6 05:49 2005-05-18 Show GitHub Exploit DB Packet Storm
349524 - woppoware postmaster message.htm for Woppoware PostMaster 4.2.2 (build 3.2.5) allows remote attackers to bypass authentication by modifying the email parameter. NVD-CWE-Other
CVE-2005-1652 2008-09-6 05:49 2005-05-18 Show GitHub Exploit DB Packet Storm
349525 - woppoware postmaster Cross-site scripting (XSS) vulnerability in message.htm for Woppoware PostMaster 4.2.2 (build 3.2.5) allows remote attackers to inject arbitrary web script or HTML via the email parameter. NVD-CWE-Other
CVE-2005-1653 2008-09-6 05:49 2005-05-18 Show GitHub Exploit DB Packet Storm
349526 - aol instant_messenger AOL Instant Messenger 5.5.x and earlier allows remote attackers to cause a denial of service (client crash) via an invalid smiley icon location in the sml parameter of a font tag. NVD-CWE-Other
CVE-2005-1655 2008-09-6 05:49 2005-05-18 Show GitHub Exploit DB Packet Storm
349527 - mercur mercur_messaging Mercur Messaging 2005 SP2 allows remote attackers to read the source code of .ctml files via a URL with a trailing hex-encoded space ("%20"). NVD-CWE-Other
CVE-2005-1656 2008-09-6 05:49 2005-05-18 Show GitHub Exploit DB Packet Storm
349528 - mercur mercur_messaging Multiple directory traversal vulnerabilities in Mercur Messaging 2005 SP2 allow remote attackers to perform unauthorized file operations via the Folder.Id parameter to (1) deletefolder.ctml, (2) dele… NVD-CWE-Other
CVE-2005-1657 2008-09-6 05:49 2005-05-18 Show GitHub Exploit DB Packet Storm
349529 - myserver myserver Directory traversal vulnerability in filemanager.cpp in MyServer 0.8 allows remote attackers to list the parent directory of the web root via a URL with a "..." (triple dot). NVD-CWE-Other
CVE-2005-1658 2008-09-6 05:49 2005-05-18 Show GitHub Exploit DB Packet Storm
349530 - - - Cross-site scripting (XSS) vulnerability in filemanager.cpp in MyServer 0.8 allows remote attackers to inject arbitrary Javascript via a URL with a "..." (triple dot) followed by an onmouseover even… NVD-CWE-Other
CVE-2005-1659 2008-09-6 05:49 2005-05-18 Show GitHub Exploit DB Packet Storm