Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 9, 2026, 4:11 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
200921 8.2 重要
Network
オラクル - Oracle E-Business Suite の Oracle Advanced Outbound Telephony における User Interface に関する脆弱性 CWE-284
不適切なアクセス制御
CVE-2017-3405 2017-02-2 11:54 2017-01-17 Show GitHub Exploit DB Packet Storm
200922 8.2 重要
Network
オラクル - Oracle E-Business Suite の Oracle Advanced Outbound Telephony における User Interface に関する脆弱性 CWE-284
不適切なアクセス制御
CVE-2017-3404 2017-02-2 11:54 2017-01-17 Show GitHub Exploit DB Packet Storm
200923 9.8 緊急
Network
SHDesigns - SHDesigns Resident Download Manager がファームウエアを検証しない問題 CWE-494
ダウンロードしたコードの完全性検証不備
CVE-2016-6567 2017-02-2 11:50 2017-01-31 Show GitHub Exploit DB Packet Storm
200924 3.7
Network
オラクル - Oracle Java SE における Java Mission Control に関する脆弱性 CWE-noinfo
情報不足
CVE-2016-8328 2017-02-2 10:56 2017-01-17 Show GitHub Exploit DB Packet Storm
200925 6.5 警告
Network
オラクル - Oracle Java SE および Java SE Embedded における Libraries に関する脆弱性 CWE-noinfo
情報不足
CVE-2016-5549 2017-02-2 10:56 2017-01-17 Show GitHub Exploit DB Packet Storm
200926 6.5 警告
Network
オラクル - Oracle Java SE および Java SE Embedded における Libraries に関する脆弱性 CWE-noinfo
情報不足
CVE-2016-5548 2017-02-2 10:56 2017-01-17 Show GitHub Exploit DB Packet Storm
200927 5.3 警告
Network
オラクル - 複数の Oracle Java 製品における Libraries に関する脆弱性 CWE-noinfo
情報不足
CVE-2016-5547 2017-02-2 10:56 2017-01-17 Show GitHub Exploit DB Packet Storm
200928 7.5 重要
Network
オラクル - 複数の Oracle Java 製品における Libraries に関する脆弱性 CWE-noinfo
情報不足
CVE-2016-5546 2017-02-2 10:56 2017-01-17 Show GitHub Exploit DB Packet Storm
200929 6.8 警告
Network
オラクル - Oracle MySQL の MySQL Server における Server: Security: Encryption に関する脆弱性 CWE-noinfo
情報不足
CVE-2016-8318 2017-02-2 10:07 2017-01-17 Show GitHub Exploit DB Packet Storm
200930 5.3 警告
Network
オラクル - Oracle Enterprise Manager Grid Control の Application Testing Suite における Test Manager for Web Apps に関する脆弱性 CWE-284
不適切なアクセス制御
CVE-2017-3311 2017-02-2 09:53 2017-01-17 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 9, 2026, 4:16 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
291121 - apache
redhat
cxf
jboss_enterprise_application_platform
The SymmetricBinding in Apache CXF before 2.6.13 and 2.7.x before 2.7.10, when EncryptBeforeSigning is enabled and the UsernameToken policy is set to an EncryptedSupportingToken, transmits the Userna… CWE-310
Cryptographic Issues
CVE-2014-0035 2024-11-21 11:01 2014-07-7 Show GitHub Exploit DB Packet Storm
291122 - apache
redhat
cxf
jboss_enterprise_application_platform
The SecurityTokenService (STS) in Apache CXF before 2.6.12 and 2.7.x before 2.7.9 does not properly validate SAML tokens when caching is enabled, which allows remote attackers to gain access via an i… CWE-20
 Improper Input Validation 
CVE-2014-0034 2024-11-21 11:01 2014-07-7 Show GitHub Exploit DB Packet Storm
291123 - fedoraproject
redhat
libreoffice
canonical
opensuse
fedora
enterprise_linux_desktop
enterprise_linux_workstation
enterprise_linux_server
libreoffice
ubuntu_linux
opensuse
LibreOffice 4.2.4 executes unspecified VBA macros automatically, which has unspecified impact and attack vectors, possibly related to doc/docmacromode.cxx. NVD-CWE-noinfo
CVE-2014-0247 2024-11-21 11:01 2014-07-4 Show GitHub Exploit DB Packet Storm
291124 - microsoft internet_explorer Use-after-free vulnerability in Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site that triggers i… NVD-CWE-Other
CVE-2014-0325 2024-11-21 11:01 2014-07-3 Show GitHub Exploit DB Packet Storm
291125 - linux linux_kernel Array index error in the aio_read_events_ring function in fs/aio.c in the Linux kernel through 3.15.1 allows local users to obtain sensitive information from kernel memory via a large head value. NVD-CWE-Other
CVE-2014-0206 2024-11-21 11:01 2014-06-25 Show GitHub Exploit DB Packet Storm
291126 - samba samba The sys_recvfrom function in nmbd in Samba 3.6.x before 3.6.24, 4.0.x before 4.0.19, and 4.1.x before 4.1.9 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) vi… CWE-20
 Improper Input Validation 
CVE-2014-0244 2024-11-21 11:01 2014-06-23 Show GitHub Exploit DB Packet Storm
291127 5.5 MEDIUM
Local
linux
oracle
linux_kernel
linux
The __do_follow_link function in fs/namei.c in the Linux kernel before 2.6.33 does not properly handle the last pathname component during use of certain filesystems, which allows local users to cause… CWE-416
 Use After Free
CVE-2014-0203 2024-11-21 11:01 2014-06-23 Show GitHub Exploit DB Packet Storm
291128 - theforeman foreman The Smart-Proxy in Foreman before 1.4.5 and 1.5.x before 1.5.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the path parameter to tftp/fetch_boot_file. NVD-CWE-Other
CVE-2014-0007 2024-11-21 11:01 2014-06-20 Show GitHub Exploit DB Packet Storm
291129 - redhat enterprise_linux A certain tomcat7 package for Apache Tomcat 7 in Red Hat Enterprise Linux (RHEL) 7 allows remote attackers to cause a denial of service (CPU consumption) via a crafted request. NOTE: this vulnerabil… NVD-CWE-Other
CVE-2014-0186 2024-11-21 11:01 2014-06-14 Show GitHub Exploit DB Packet Storm
291130 - redhat
fedoraproject
enterprise_linux
sssd
The System Security Services Daemon (SSSD) 1.11.6 does not properly identify group membership when a non-POSIX group is in a group membership chain, which allows local users to bypass access restrict… CWE-264
Permissions, Privileges, and Access Controls
CVE-2014-0249 2024-11-21 11:01 2014-06-11 Show GitHub Exploit DB Packet Storm