Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 9, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
201401 8.8 重要
Network
eClinicalWorks - eClinicalWorks Population Health の portalUserService.jsp におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2015-4593 2017-01-18 10:40 2015-06-16 Show GitHub Exploit DB Packet Storm
201402 9.8 緊急
Network
eClinicalWorks - eClinicalWorks Population Health の portalUserService.jsp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2015-4592 2017-01-18 10:40 2015-06-16 Show GitHub Exploit DB Packet Storm
201403 6.1 警告
Network
eClinicalWorks - eClinicalWorks Population Health の login.jsp におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2015-4591 2017-01-18 10:40 2015-06-16 Show GitHub Exploit DB Packet Storm
201404 3.1
Network
Debian
Canonical
Pidgin
- Pidgin の MXIT プロトコルにおける情報漏えいの脆弱性 CWE-125
CWE-200
CVE-2016-2380 2017-01-18 10:14 2016-06-21 Show GitHub Exploit DB Packet Storm
201405 4.4 警告
Local
マカフィー - Intel Security McAfee SIEM の Enterprise Security Manager および License Manager における認証を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2016-8006 2017-01-18 09:50 2016-09-16 Show GitHub Exploit DB Packet Storm
201406 5.5 警告
Local
サムスン - 特定の Samsung Android デバイスのソフトウェア Android OS の system_server プロセスにおけるサービス運用妨害 (DoS) の脆弱性 CWE-119
CWE-20
CVE-2017-5217 2017-01-17 18:02 2017-01-9 Show GitHub Exploit DB Packet Storm
201407 9.8 緊急
Network
Splunk - Splunk Enterprise の Splunk Web における HTTP リクエストインジェクション攻撃を実行される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2016-10126 2017-01-17 17:45 2016-11-10 Show GitHub Exploit DB Packet Storm
201408 8.6 重要
Network
Linux Containers - LXC におけるコンテナから脱出される脆弱性 CWE-284
不適切なアクセス制御
CVE-2016-10124 2017-01-17 17:34 2016-02-23 Show GitHub Exploit DB Packet Storm
201409 5.5 警告
Local
Netop - Netop Remote Control におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2017-5216 2017-01-17 17:23 2017-01-9 Show GitHub Exploit DB Packet Storm
201410 8.8 重要
Network
GENEXIS - DRGOS を伴う Genexis デバイスの Parental Control パネルにおける任意の CLI コマンドを実行される脆弱性 CWE-77
コマンドインジェクション
CVE-2015-3441 2017-01-17 16:54 2015-04-20 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 10, 2026, 5 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
291561 - oracle jre Unspecified vulnerability in Oracle Java SE 7u45, when running on OS X, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot. NVD-CWE-noinfo
CVE-2014-0408 2024-11-21 11:02 2014-01-16 Show GitHub Exploit DB Packet Storm
291562 - oracle vm_virtualbox Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox prior to 3.2.20, 4.0.22, 4.1.30, 4.2.20, and 4.3.4 allows local users to affect confidentiality, in… NVD-CWE-noinfo
CVE-2014-0407 2024-11-21 11:02 2014-01-16 Show GitHub Exploit DB Packet Storm
291563 - oracle vm_virtualbox Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox prior to 3.2.20, 4.0.22, 4.1.30, 4.2.20, and 4.3.4 allows local users to affect integrity and avail… NVD-CWE-noinfo
CVE-2014-0406 2024-11-21 11:02 2014-01-16 Show GitHub Exploit DB Packet Storm
291564 - oracle vm_virtualbox Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox prior to 3.2.20, 4.0.22, 4.1.30, 4.2.20, and 4.3.4 allows local users to affect confidentiality, in… NVD-CWE-noinfo
CVE-2014-0405 2024-11-21 11:02 2014-01-16 Show GitHub Exploit DB Packet Storm
291565 - oracle vm_virtualbox Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox prior to 3.2.20, 4.0.22, 4.1.30, 4.2.20, and 4.3.4 allows local users to affect integrity and avail… NVD-CWE-noinfo
CVE-2014-0404 2024-11-21 11:02 2014-01-16 Show GitHub Exploit DB Packet Storm
291566 - oracle jre
jdk
Unspecified vulnerability in Oracle Java SE 6u65 and 7u45 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Deployment, a different vulnerability than CVE… NVD-CWE-noinfo
CVE-2014-0403 2024-11-21 11:02 2014-01-16 Show GitHub Exploit DB Packet Storm
291567 - oracle
mariadb
canonical
debian
redhat
mysql
mariadb
ubuntu_linux
debian_linux
enterprise_linux_server
enterprise_linux_workstation
enterprise_linux_server_aus
enterprise_linux_server_tus
enterprise_linux_desktop
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.71 and earlier, 5.5.33 and earlier, and 5.6.13 and earlier allows remote authenticated users to affect availability via unk… NVD-CWE-noinfo
CVE-2014-0402 2024-11-21 11:02 2014-01-16 Show GitHub Exploit DB Packet Storm
291568 - oracle
mariadb
canonical
debian
redhat
mysql
mariadb
ubuntu_linux
debian_linux
enterprise_linux_server
enterprise_linux_workstation
enterprise_linux_server_aus
enterprise_linux_server_tus
enterprise_linux_desktop
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.72 and earlier, 5.5.34 and earlier, and 5.6.14 and earlier allows remote authenticated users to affect availability via unk… NVD-CWE-noinfo
CVE-2014-0401 2024-11-21 11:02 2014-01-16 Show GitHub Exploit DB Packet Storm
291569 - oracle fusion_middleware Unspecified vulnerability in the Oracle Internet Directory component in Oracle Fusion Middleware 11.1.1.6 and 11.1.1.7 allows remote authenticated users to affect confidentiality via vectors related … NVD-CWE-noinfo
CVE-2014-0400 2024-11-21 11:02 2014-01-16 Show GitHub Exploit DB Packet Storm
291570 - oracle supply_chain_products_suite Unspecified vulnerability in the Oracle Transportation Management component in Oracle Supply Chain Products Suite 6.2, 6.3, 6.3.1, and 6.3.2 allows remote authenticated users to affect confidentialit… NVD-CWE-noinfo
CVE-2014-0399 2024-11-21 11:02 2014-01-16 Show GitHub Exploit DB Packet Storm