Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 13, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
201511 4.9 警告
Network 		オラクル - Oracle E-Business Suite の Oracle Applications Manager における OAM Client に関する脆弱性 CWE-200
情報漏えい 		CVE-2017-3277 2017-02-3 14:43 2017-01-17 Show GitHub Exploit DB Packet Storm
201512 8.2 重要
Network 		オラクル - Oracle E-Business Suite の Oracle Email Center における User Interface に関する脆弱性 CWE-254
セキュリティ機能 		CVE-2017-3275 2017-02-3 14:43 2017-01-17 Show GitHub Exploit DB Packet Storm
201513 8.2 重要
Network 		オラクル - Oracle E-Business Suite の Oracle Email Center における User Interface に関する脆弱性 CWE-284
不適切なアクセス制御 		CVE-2017-3274 2017-02-3 14:43 2017-01-17 Show GitHub Exploit DB Packet Storm
201514 6 警告
Local 		オラクル - Oracle E-Business Suite の Oracle Application Object Library における Patching に関する脆弱性 CWE-284
不適切なアクセス制御 		CVE-2017-3246 2017-02-3 14:43 2017-01-17 Show GitHub Exploit DB Packet Storm
201515 9.1 緊急
Network 		オラクル - Oracle E-Business Suite の Oracle One-to-One Fulfillment における Internal Operations に関する脆弱性 CWE-284
不適切なアクセス制御 		CVE-2016-8325 2017-02-3 14:43 2017-01-17 Show GitHub Exploit DB Packet Storm
201516 8.2 重要
Network 		オラクル - Oracle E-Business Suite の Oracle Advanced Outbound Telephony における User Interface に関する脆弱性 CWE-284
不適切なアクセス制御 		CVE-2017-3402 2017-02-3 10:34 2017-01-17 Show GitHub Exploit DB Packet Storm
201517 8.2 重要
Network 		オラクル - Oracle E-Business Suite の Oracle Advanced Outbound Telephony における User Interface に関する脆弱性 CWE-284
不適切なアクセス制御 		CVE-2017-3401 2017-02-3 10:34 2017-01-17 Show GitHub Exploit DB Packet Storm
201518 8.2 重要
Network 		オラクル - Oracle E-Business Suite の Oracle Advanced Outbound Telephony における User Interface に関する脆弱性 CWE-284
不適切なアクセス制御 		CVE-2017-3400 2017-02-3 10:34 2017-01-17 Show GitHub Exploit DB Packet Storm
201519 8.2 重要
Network 		オラクル - Oracle E-Business Suite の Oracle Advanced Outbound Telephony における User Interface に関する脆弱性 CWE-284
不適切なアクセス制御 		CVE-2017-3399 2017-02-3 10:34 2017-01-17 Show GitHub Exploit DB Packet Storm
201520 8.2 重要
Network 		オラクル - Oracle E-Business Suite の Oracle Advanced Outbound Telephony における User Interface に関する脆弱性 CWE-284
不適切なアクセス制御 		CVE-2017-3398 2017-02-3 10:34 2017-01-17 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 13, 2026, 4:20 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
289501 5.5 MEDIUM
Local 		linux
redhat
canonical
debian
opensuse
suse 		linux_kernel
enterprise_linux
ubuntu_linux
debian_linux
evergreen
suse_linux_enterprise_server 		arch/x86/kvm/vmx.c in the KVM subsystem in the Linux kernel through 3.17.2 does not have an exit handler for the INVVPID instruction, which allows guest OS users to cause a denial of service (guest O… NVD-CWE-noinfo
CVE-2014-3646 2024-11-21 11:08 2014-11-10 Show GitHub Exploit DB Packet Storm
289502 - linux linux_kernel arch/x86/kvm/vmx.c in the KVM subsystem in the Linux kernel before 3.12 does not have an exit handler for the INVEPT instruction, which allows guest OS users to cause a denial of service (guest OS cr… CWE-20
 Improper Input Validation  		CVE-2014-3645 2024-11-21 11:08 2014-11-10 Show GitHub Exploit DB Packet Storm
289503 4.7 MEDIUM
Local 		linux
redhat
canonical
debian 		linux_kernel
enterprise_linux
ubuntu_linux
debian_linux 		Race condition in the __kvm_migrate_pit_timer function in arch/x86/kvm/i8254.c in the KVM subsystem in the Linux kernel through 3.17.2 allows guest OS users to cause a denial of service (host OS cras… CWE-362
Race Condition 		CVE-2014-3611 2024-11-21 11:08 2014-11-10 Show GitHub Exploit DB Packet Storm
289504 5.5 MEDIUM
Local 		linux
canonical
debian
opensuse
suse 		linux_kernel
ubuntu_linux
debian_linux
evergreen
suse_linux_enterprise_server 		The WRMSR processing functionality in the KVM subsystem in the Linux kernel through 3.17.2 does not properly handle the writing of a non-canonical address to a model-specific register, which allows g… NVD-CWE-noinfo
CVE-2014-3610 2024-11-21 11:08 2014-11-10 Show GitHub Exploit DB Packet Storm
289505 - redhat
canonical
libreoffice
opensuse 		enterprise_linux_desktop
enterprise_linux_workstation
enterprise_linux_server
ubuntu_linux
libreoffice
opensuse 		Use-after-free vulnerability in the socket manager of Impress Remote in LibreOffice 4.x before 4.2.7 and 4.3.x before 4.3.3 allows remote attackers to cause a denial of service (crash) or possibly ex… NVD-CWE-Other
CVE-2014-3693 2024-11-21 11:08 2014-11-8 Show GitHub Exploit DB Packet Storm
289506 - debian
qemu
redhat
canonical 		debian_linux
qemu
enterprise_linux_desktop
enterprise_linux_workstation
enterprise_linux_server
enterprise_linux_hpc_node
ubuntu_linux 		The sosendto function in slirp/udp.c in QEMU before 2.1.2 allows local users to cause a denial of service (NULL pointer dereference) by sending a udp packet with a value of 0 in the source port and a… CWE-476
 NULL Pointer Dereference 		CVE-2014-3640 2024-11-21 11:08 2014-11-8 Show GitHub Exploit DB Packet Storm
289507 - symantec endpoint_protection_manager ConsoleServlet in Symantec Endpoint Protection Manager (SEPM) 12.1 before RU5 allows remote attackers to write to arbitrary files via unspecified vectors. NVD-CWE-noinfo
CVE-2014-3439 2024-11-21 11:08 2014-11-7 Show GitHub Exploit DB Packet Storm
289508 - symantec endpoint_protection_manager Multiple cross-site scripting (XSS) vulnerabilities in console interface scripts in Symantec Endpoint Protection Manager (SEPM) 12.1 before RU5 allow remote attackers to inject arbitrary web script o… CWE-79
Cross-site Scripting 		CVE-2014-3438 2024-11-21 11:08 2014-11-7 Show GitHub Exploit DB Packet Storm
289509 - symantec endpoint_protection_manager The management console in Symantec Endpoint Protection Manager (SEPM) 12.1 before RU5 allows remote attackers to read arbitrary files or send TCP requests to intranet servers via XML data containing … NVD-CWE-Other
CVE-2014-3437 2024-11-21 11:08 2014-11-7 Show GitHub Exploit DB Packet Storm
289510 - php
debian
canonical 		php
debian_linux
ubuntu_linux 		The donote function in readelf.c in file through 5.20, as used in the Fileinfo component in PHP 5.4.34, does not ensure that sufficient note headers are present, which allows remote attackers to caus… CWE-20
 Improper Input Validation  		CVE-2014-3710 2024-11-21 11:08 2014-11-5 Show GitHub Exploit DB Packet Storm