Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 29, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
201681	7.6	重要 Network	オラクル	-	Oracle PeopleSoft Products の PeopleSoft Enterprise PeopleTools における LDAP に関する脆弱性	CWE-Other その他	CVE-2016-8296	2016-10-31 11:56	2016-10-18	Show	GitHub Exploit DB Packet Storm

201682	4.3	警告 Network	オラクル	-	Oracle PeopleSoft Products の PeopleSoft Enterprise HCM における Schedule に関する脆弱性	CWE-200 情報漏えい	CVE-2016-8295	2016-10-31 11:56	2016-10-18	Show	GitHub Exploit DB Packet Storm

201683	4.3	警告 Network	オラクル	-	Oracle PeopleSoft Products の PeopleSoft Enterprise PeopleTools における Query に関する脆弱性	CWE-200 情報漏えい	CVE-2016-8294	2016-10-31 11:56	2016-10-18	Show	GitHub Exploit DB Packet Storm

201684	8.2	重要 Network	オラクル	-	Oracle PeopleSoft Products の PeopleSoft Enterprise PeopleTools における Integration Broker に関する脆弱性	CWE-Other その他	CVE-2016-8293	2016-10-31 11:56	2016-10-18	Show	GitHub Exploit DB Packet Storm

201685	4.2	警告 Network	オラクル	-	Oracle PeopleSoft Products の PeopleSoft Enterprise HCM における Talent Acquisition Manager に関する脆弱性	CWE-Other その他	CVE-2016-8292	2016-10-31 11:56	2016-10-18	Show	GitHub Exploit DB Packet Storm

201686	8.2	重要 Network	オラクル	-	Oracle PeopleSoft Products の PeopleSoft Enterprise PeopleTools における Mobile Application Platform に関する脆弱性	CWE-Other その他	CVE-2016-8291	2016-10-31 11:56	2016-10-18	Show	GitHub Exploit DB Packet Storm

201687	4.8	警告 Network	オラクル	-	Oracle PeopleSoft Products の PeopleSoft Enterprise HCM における Candidate Gateway に関する脆弱性	CWE-Other その他	CVE-2016-8285	2016-10-31 11:56	2016-10-18	Show	GitHub Exploit DB Packet Storm

201688	3.3	低 Local	オラクル	-	Oracle Sun Systems Products Suite の Solaris における Lynx に関する脆弱性	CWE-Other その他	CVE-2016-5615	2016-10-31 11:54	2016-10-18	Show	GitHub Exploit DB Packet Storm

201689	4.3	警告 Local	オラクル	-	Oracle Virtualization の Oracle VM VirtualBox における Core に関する脆弱性	CWE-Other その他	CVE-2016-5613	2016-10-31 11:53	2016-10-18	Show	GitHub Exploit DB Packet Storm

201690	4.3	警告 Local	オラクル	-	Oracle Virtualization の Oracle VM VirtualBox における Core に関する脆弱性	CWE-200 情報漏えい	CVE-2016-5611	2016-10-31 11:53	2016-10-18	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 29, 2026, 4:16 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
291171	-	i18n_project	i18n	Cross-site scripting (XSS) vulnerability in exceptions.rb in the i18n gem before 0.6.6 for Ruby allows remote attackers to inject arbitrary web script or HTML via a crafted I18n::MissingTranslationDa…	CWE-79 Cross-site Scripting	CVE-2013-4492	2024-11-21 10:55	2013-12-7	Show	GitHub Exploit DB Packet Storm

291172	-	rubyonrails	rails ruby_on_rails	Cross-site scripting (XSS) vulnerability in actionpack/lib/action_view/helpers/translation_helper.rb in the internationalization component in Ruby on Rails 3.x before 3.2.16 and 4.x before 4.0.2 allo…	CWE-79 Cross-site Scripting	CVE-2013-4491	2024-11-21 10:55	2013-12-7	Show	GitHub Exploit DB Packet Storm

291173	-	jahia	jahia_xcm	Multiple cross-site scripting (XSS) vulnerabilities in Jahia xCM 6.6.1.0 before hotfix 7 allow remote attackers to inject arbitrary web script or HTML via (1) the site parameter to engines/manager.js…	CWE-79 Cross-site Scripting	CVE-2013-4624	2024-11-21 10:55	2013-11-28	Show	GitHub Exploit DB Packet Storm

291174	-	jahia	jahia_xcm	Jahia xCM before 6.6.2 does not include the HTTPOnly flag in a Set-Cookie header for the JSESSIONID cookie, which makes it easier for remote attackers to obtain potentially sensitive information via …	CWE-200 Information Exposure	CVE-2013-4617	2024-11-21 10:55	2013-11-28	Show	GitHub Exploit DB Packet Storm

291175	-	moodle	moodle	Cross-site scripting (XSS) vulnerability in mod/quiz/report/responses/responses_table.php in Moodle through 2.2.11, 2.3.x before 2.3.10, 2.4.x before 2.4.7, and 2.5.x before 2.5.3 allows remote authe…	CWE-79 Cross-site Scripting	CVE-2013-4525	2024-11-21 10:55	2013-11-26	Show	GitHub Exploit DB Packet Storm

291176	-	moodle	moodle	Directory traversal vulnerability in repository/filesystem/lib.php in Moodle through 2.2.11, 2.3.x before 2.3.10, 2.4.x before 2.4.7, and 2.5.x before 2.5.3 allows remote authenticated users to read …	CWE-22 Path Traversal	CVE-2013-4524	2024-11-21 10:55	2013-11-26	Show	GitHub Exploit DB Packet Storm

291177	-	moodle	moodle	Cross-site scripting (XSS) vulnerability in message/lib.php in Moodle through 2.2.11, 2.3.x before 2.3.10, 2.4.x before 2.4.7, and 2.5.x before 2.5.3 allows remote authenticated users to inject arbit…	CWE-79 Cross-site Scripting	CVE-2013-4523	2024-11-21 10:55	2013-11-26	Show	GitHub Exploit DB Packet Storm

291178	-	moodle	moodle	lib/filelib.php in Moodle through 2.2.11, 2.3.x before 2.3.10, 2.4.x before 2.4.7, and 2.5.x before 2.5.3 does not send "Cache-Control: private" HTTP headers, which allows remote attackers to obtain …	CWE-200 Information Exposure	CVE-2013-4522	2024-11-21 10:55	2013-11-26	Show	GitHub Exploit DB Packet Storm

291179	-	mediawiki	mediawiki	Cross-site scripting (XSS) vulnerability in the ZeroRatedMobileAccess extension for MediaWiki 1.19.x before 1.19.9, 1.20.x before 1.20.8, and 1.21.x before 1.21.3 allows remote attackers to inject ar…	CWE-79 Cross-site Scripting	CVE-2013-4573	2024-11-21 10:55	2013-11-26	Show	GitHub Exploit DB Packet Storm

291180	-	ibus_project opensuse	ibus opensuse	The default configuration of IBUS 1.5.4, and possibly 1.5.2 and earlier, when IBus.InputPurpose.PASSWORD is not set and used with GNOME 3, does not obscure the entered password characters, which allo…	CWE-255 Credentials Management	CVE-2013-4509	2024-11-21 10:55	2013-11-24	Show	GitHub Exploit DB Packet Storm