Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 11, 2026, 10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
201061	8.2	重要 Network	オラクル	-	Oracle E-Business Suite の Oracle Advanced Outbound Telephony における User Interface に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2017-3373	2017-02-3 10:34	2017-01-17	Show	GitHub Exploit DB Packet Storm

201062	8.2	重要 Network	オラクル	-	Oracle E-Business Suite の Oracle Interaction Blending における User Interface に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2017-3372	2017-02-3 10:34	2017-01-17	Show	GitHub Exploit DB Packet Storm

201063	8.2	重要 Network	オラクル	-	Oracle E-Business Suite の Oracle iStore における User Interface に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2017-3371	2017-02-3 10:34	2017-01-17	Show	GitHub Exploit DB Packet Storm

201064	8.2	重要 Network	オラクル	-	Oracle E-Business Suite の Oracle iStore における User Interface に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2017-3370	2017-02-3 10:34	2017-01-17	Show	GitHub Exploit DB Packet Storm

201065	8.2	重要 Network	オラクル	-	Oracle E-Business Suite の Oracle iStore における User Interface に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2017-3369	2017-02-3 10:34	2017-01-17	Show	GitHub Exploit DB Packet Storm

201066	8.2	重要 Network	オラクル	-	Oracle E-Business Suite の Oracle iStore における Address Book に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2017-3368	2017-02-3 10:34	2017-01-17	Show	GitHub Exploit DB Packet Storm

201067	8.2	重要 Network	オラクル	-	Oracle E-Business Suite の Oracle Knowledge Management における User Interface に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2017-3367	2017-02-3 10:34	2017-01-17	Show	GitHub Exploit DB Packet Storm

201068	8.2	重要 Network	オラクル	-	Oracle E-Business Suite の Oracle Knowledge Management における User Interface に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2017-3366	2017-02-3 10:34	2017-01-17	Show	GitHub Exploit DB Packet Storm

201069	8.2	重要 Network	オラクル	-	Oracle E-Business Suite の Oracle Knowledge Management における User Interface に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2017-3365	2017-02-3 10:34	2017-01-17	Show	GitHub Exploit DB Packet Storm

201070	8.2	重要 Network	オラクル	-	Oracle E-Business Suite の Oracle Knowledge Management における User Interface に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2017-3364	2017-02-3 10:34	2017-01-17	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 11, 2026, 5:13 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
291291	-	ganesha_digital_library_project	ganesha_digital_library	Multiple directory traversal vulnerabilities in class/session.php in Ganesha Digital Library (GDL) 4.2 allow remote attackers to read arbitrary files via a .. (dot dot) in the (1) newlang or (2) newt…	CWE-22 Path Traversal	CVE-2014-100029	2024-11-21 11:03	2015-01-14	Show	GitHub Exploit DB Packet Storm

291292	-	webcrafted_project	webcrafted	Cross-site scripting (XSS) vulnerability in /signup in WEBCrafted allows remote attackers to inject arbitrary web script or HTML via the username.	CWE-79 Cross-site Scripting	CVE-2014-100028	2024-11-21 11:03	2015-01-14	Show	GitHub Exploit DB Packet Storm

291293	-	getusedtoit	wp_slimstat	Cross-site scripting (XSS) vulnerability in the WP SlimStat plugin before 3.5.6 for WordPress allows remote attackers to inject arbitrary web script or HTML via a crafted URL.	CWE-79 Cross-site Scripting	CVE-2014-100027	2024-11-21 11:03	2015-01-14	Show	GitHub Exploit DB Packet Storm

291294	-	april\'s_super_functions_pack_project	april\'s_super_functions_pack	Cross-site scripting (XSS) vulnerability in readme.php in the April's Super Functions Pack plugin before 1.4.8 for WordPress allows remote attackers to inject arbitrary web script or HTML via the pag…	CWE-79 Cross-site Scripting	CVE-2014-100026	2024-11-21 11:03	2015-01-14	Show	GitHub Exploit DB Packet Storm

291295	-	savsoft_technologies	savsoft_quiz	Cross-site request forgery (CSRF) vulnerability in index.php/user_data/insert_user in Savsoft Quiz allows remote attackers to hijack the authentication of administrators for requests that create an a…	CWE-352 Origin Validation Error	CVE-2014-100025	2024-11-21 11:03	2015-01-14	Show	GitHub Exploit DB Packet Storm

291296	-	seopanel	seo_panel	Cross-site scripting (XSS) vulnerability in Seo Panel before 3.4.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.	CWE-79 Cross-site Scripting	CVE-2014-100024	2024-11-21 11:03	2015-01-14	Show	GitHub Exploit DB Packet Storm

291297	-	mtouch_quiz_project	mtouch_quiz	Multiple cross-site scripting (XSS) vulnerabilities in question.php in the mTouch Quiz before 3.0.7 for WordPress allow remote attackers to inject arbitrary web script or HTML via the quiz parameter …	CWE-79 Cross-site Scripting	CVE-2014-100023	2024-11-21 11:03	2015-01-14	Show	GitHub Exploit DB Packet Storm

291298	-	mtouch_quiz_project	mtouch_quiz	SQL injection vulnerability in question.php in the mTouch Quiz before 3.0.7 for WordPress allows remote attackers to execute arbitrary SQL commands via the quiz parameter to wp-admin/edit.php.	CWE-89 SQL Injection	CVE-2014-100022	2024-11-21 11:03	2015-01-14	Show	GitHub Exploit DB Packet Storm

291299	-	orangehrm	orangehrm	Cross-site scripting (XSS) vulnerability in symfony/web/index.php/pim/viewEmployeeList in OrangeHRM before 3.1.2 allows remote attackers to inject arbitrary web script or HTML via the empsearch[emplo…	CWE-79 Cross-site Scripting	CVE-2014-100021	2024-11-21 11:03	2015-01-14	Show	GitHub Exploit DB Packet Storm

291300	-	itechscripts	itechclassifieds	SQL injection vulnerability in ChangeEmail.php in iTechClassifieds 3.03.057 allows remote attackers to execute arbitrary SQL commands via the PreviewNum parameter. NOTE: the CatID parameter is alrea…	CWE-89 SQL Injection	CVE-2014-100020	2024-11-21 11:03	2015-01-14	Show	GitHub Exploit DB Packet Storm