Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 6, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
200151	4.7	警告 Network	オラクル	-	Oracle E-Business Suite の Oracle Partner Management における User Interface に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2017-3282	2017-02-3 14:43	2017-01-17	Show	GitHub Exploit DB Packet Storm

200152	4.7	警告 Network	オラクル	-	Oracle E-Business Suite の Oracle Partner Management における User Interface に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2017-3281	2017-02-3 14:43	2017-01-17	Show	GitHub Exploit DB Packet Storm

200153	4.7	警告 Network	オラクル	-	Oracle E-Business Suite の Oracle Partner Management における User Interface に関する脆弱性	CWE-20 不適切な入力確認	CVE-2017-3280	2017-02-3 14:43	2017-01-17	Show	GitHub Exploit DB Packet Storm

200154	8.2	重要 Network	オラクル	-	Oracle E-Business Suite の Oracle Leads Management における User Interface に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2017-3279	2017-02-3 14:43	2017-01-17	Show	GitHub Exploit DB Packet Storm

200155	8.2	重要 Network	オラクル	-	Oracle E-Business Suite の Oracle One-to-One Fulfillment における Request Confirmatoin に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2017-3278	2017-02-3 14:43	2017-01-17	Show	GitHub Exploit DB Packet Storm

200156	4.9	警告 Network	オラクル	-	Oracle E-Business Suite の Oracle Applications Manager における OAM Client に関する脆弱性	CWE-200 情報漏えい	CVE-2017-3277	2017-02-3 14:43	2017-01-17	Show	GitHub Exploit DB Packet Storm

200157	8.2	重要 Network	オラクル	-	Oracle E-Business Suite の Oracle Email Center における User Interface に関する脆弱性	CWE-254 セキュリティ機能	CVE-2017-3275	2017-02-3 14:43	2017-01-17	Show	GitHub Exploit DB Packet Storm

200158	8.2	重要 Network	オラクル	-	Oracle E-Business Suite の Oracle Email Center における User Interface に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2017-3274	2017-02-3 14:43	2017-01-17	Show	GitHub Exploit DB Packet Storm

200159	6	警告 Local	オラクル	-	Oracle E-Business Suite の Oracle Application Object Library における Patching に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2017-3246	2017-02-3 14:43	2017-01-17	Show	GitHub Exploit DB Packet Storm

200160	9.1	緊急 Network	オラクル	-	Oracle E-Business Suite の Oracle One-to-One Fulfillment における Internal Operations に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2016-8325	2017-02-3 14:43	2017-01-17	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 7, 2026, 4:13 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
345721	-	jbmc-software	directadmin	CMD_DB in JBMC Software DirectAdmin before 1.334 allows remote authenticated users to gain privileges via shell metacharacters in the name parameter during a restore action.	CWE-20 Improper Input Validation	CVE-2009-1525	2017-08-17 10:30	2009-05-6	Show	GitHub Exploit DB Packet Storm

345722	-	jbmc-software	directadmin	Cross-site scripting (XSS) vulnerability in CMD_REDIRECT in DirectAdmin 1.33.6 and earlier allows remote attackers to inject arbitrary web script or HTML via the URI in a view=advanced request.	CWE-79 Cross-site Scripting	CVE-2009-2216	2017-08-17 10:30	2009-06-26	Show	GitHub Exploit DB Packet Storm

345723	-	ibm	websphere_service_registry_and_repository	IBM WebSphere Service Registry and Repository (WSRR) 6.3.0 before FP2 does not have the intended configuration properties, which allows remote authenticated users to obtain unspecified data access vi…	CWE-16 Configuration	CVE-2009-2750	2017-08-17 10:30	2010-02-5	Show	GitHub Exploit DB Packet Storm

345724	-	ibm	websphere_commerce	IBM WebSphere Commerce 7.0 uses the same cryptographic key for session attributes and merchant data encryption, which has unspecified impact and remote attack vectors.	CWE-310 Cryptographic Issues	CVE-2009-2751	2017-08-17 10:30	2010-02-6	Show	GitHub Exploit DB Packet Storm

345725	-	ibm	websphere_commerce	IBM WebSphere Commerce 7.0 does not properly encrypt data in a database, which makes it easier for local users to obtain sensitive information by defeating cryptographic protection mechanisms.	CWE-310 Cryptographic Issues	CVE-2009-2752	2017-08-17 10:30	2010-02-6	Show	GitHub Exploit DB Packet Storm

345726	-	softbiz	dating_script	SQL injection vulnerability in cat_products.php in SoftBiz Dating Script allows remote attackers to execute arbitrary SQL commands via the cid parameter. NOTE: this might overlap CVE-2006-3271.4.	CWE-89 SQL Injection	CVE-2009-2790	2017-08-17 10:30	2009-08-18	Show	GitHub Exploit DB Packet Storm

345727	-	apple	airport_utility	AirPort Utility before 5.5.1 for Apple AirPort Base Station does not properly distribute MAC address ACLs to network extenders, which allows remote attackers to bypass intended access restrictions vi…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2009-2822	2017-08-17 10:30	2010-04-6	Show	GitHub Exploit DB Packet Storm

345728	-	rpm	rpm	lib/fsm.c in RPM before 4.4.3 does not properly reset the metadata of an executable file during deletion of the file in an RPM package removal, which might allow local users to gain privileges by cre…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2005-4889	2017-08-17 10:29	2010-06-9	Show	GitHub Exploit DB Packet Storm

345729	-	debian	dpkg	dpkg 1.9.21 does not properly reset the metadata of a file during replacement of the file in a package upgrade, which might allow local users to gain privileges by creating a hard link to a vulnerabl…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2004-2768	2017-08-17 10:29	2010-06-9	Show	GitHub Exploit DB Packet Storm

345730	-	realnetworks	realone_enterprise_desktop realone_player	Real Networks RealOne Enterprise Desktop 6.0.11.774, RealOne Player 2.0, and RealOne Player 6.0.11.818 through RealOne Player 6.0.11.853 allows remote attackers to execute arbitrary script in the loc…	NVD-CWE-Other	CVE-2003-1509	2017-08-17 10:29	2003-12-31	Show	GitHub Exploit DB Packet Storm