Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 31, 2026, 4 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
201741	7.5	重要 Network	オラクル	-	Oracle Fusion Middleware の Oracle Discoverer における EUL Code & Schema に関する脆弱性	CWE-200 CWE-Other	CVE-2016-5495	2016-10-28 14:01	2016-10-18	Show	GitHub Exploit DB Packet Storm

201742	5.9	警告 Network	オラクル	-	Oracle Supply Chain Products Suite の Oracle Agile PLM における Security に関する脆弱性	CWE-Other その他	CVE-2016-5527	2016-10-28 13:59	2016-10-18	Show	GitHub Exploit DB Packet Storm

201743	6.4	警告 Local	オラクル	-	Oracle Database Server の RDBMS Security における脆弱性	CWE-Other その他	CVE-2016-5497	2016-10-28 13:58	2016-10-18	Show	GitHub Exploit DB Packet Storm

201744	4.2	警告 Network	オラクル	-	Oracle Financial Services Applications の Oracle FLEXCUBE Private Banking における Admin に関する脆弱性	CWE-Other その他	CVE-2016-5493	2016-10-28 13:56	2016-10-18	Show	GitHub Exploit DB Packet Storm

201745	7.1	重要 Local	オラクル	-	Oracle Sun Systems Products Suite の Sun ZFS Storage Appliance Kit (AK) における SMB Users に関する脆弱性	CWE-Other その他	CVE-2016-5492	2016-10-28 13:55	2016-10-18	Show	GitHub Exploit DB Packet Storm

201746	8.2	重要 Network	オラクル	-	Oracle Commerce の Oracle Commerce Service Center における Commerce Service Center に関する脆弱性	CWE-Other その他	CVE-2016-5491	2016-10-28 13:52	2016-10-18	Show	GitHub Exploit DB Packet Storm

201747	8.2	重要 Network	オラクル	-	Oracle Commerce の Oracle Commerce Guided Search における Oracle Commerce Guided Search に関する脆弱性	CWE-Other その他	CVE-2016-5482	2016-10-28 13:52	2016-10-18	Show	GitHub Exploit DB Packet Storm

201748	2.4	低 Network	オラクル	-	Oracle Database Server の RDBMS Security and SQL*Plus における脆弱性	CWE-200 情報漏えい	CVE-2016-3562	2016-10-28 13:51	2016-10-18	Show	GitHub Exploit DB Packet Storm

201749	5.5	警告 Local	オラクル	-	Oracle Sun Systems Products Suite の Solaris における Kernel Zones に関する脆弱性	CWE-Other その他	CVE-2016-5576	2016-10-28 13:44	2016-10-18	Show	GitHub Exploit DB Packet Storm

201750	5.3	警告 Network	オラクル	-	Oracle E-Business Suite の Oracle Common Applications Calendar における Resources Module に関する脆弱性	CWE-200 CWE-Other	CVE-2016-5575	2016-10-28 13:44	2016-10-18	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 31, 2026, 4:16 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
290101	-	apache	libcloud	Libcloud 0.12.3 through 0.13.2 does not set the scrub_data parameter for the destroy DigitalOcean API, which allows local users to obtain sensitive information by leveraging a new VM.	CWE-200 Information Exposure	CVE-2013-6480	2024-11-21 10:59	2014-01-8	Show	GitHub Exploit DB Packet Storm

290102	-	openstack	havana	Interaction error in OpenStack Nova and Neutron before Havana 2013.2.1 and icehouse-1 does not validate the instance ID of the tenant making a request, which allows remote tenants to obtain sensitive…	CWE-200 Information Exposure	CVE-2013-6419	2024-11-21 10:59	2014-01-8	Show	GitHub Exploit DB Packet Storm

290103	-	devscripts_devel_team	devscripts	Uscan in devscripts before 2.13.9 allows remote attackers to execute arbitrary code via a crafted tarball.	NVD-CWE-noinfo	CVE-2013-6888	2024-11-21 10:59	2014-01-8	Show	GitHub Exploit DB Packet Storm

290104	-	cru-inc	ditto_forensic_fieldstation_firmware ditto_forensic_fieldstation	The write-blocker in CRU Ditto Forensic FieldStation with firmware before 2013Oct15a has a default "ditto" username and password, which allows remote attackers to gain privileges.	CWE-255 Credentials Management	CVE-2013-6884	2024-11-21 10:59	2014-01-8	Show	GitHub Exploit DB Packet Storm

290105	-	cru-inc	ditto_forensic_fieldstation_firmware ditto_forensic_fieldstation	CRU Ditto Forensic FieldStation with firmware before 2013Oct15a allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) sector size or (2) skip count fields for the …	CWE-78 OS Command	CVE-2013-6881	2024-11-21 10:59	2014-01-8	Show	GitHub Exploit DB Packet Storm

290106	-	hp	linux_imaging_and_printing_project	base/pkit.py in HP Linux Imaging and Printing (HPLIP) through 3.13.11 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/hp-pkservice.log temporary file.	CWE-59 Link Following	CVE-2013-6402	2024-11-21 10:59	2014-01-6	Show	GitHub Exploit DB Packet Storm

290107	-	openssl	openssl	The DTLS retransmission implementation in OpenSSL 1.0.0 before 1.0.0l and 1.0.1 before 1.0.1f does not properly maintain data structures for digest and encryption contexts, which might allow man-in-t…	CWE-310 Cryptographic Issues	CVE-2013-6450	2024-11-21 10:59	2014-01-2	Show	GitHub Exploit DB Packet Storm

290108	-	mislav_marohnic	will_paginate	Cross-site scripting (XSS) vulnerability in the will_paginate gem before 3.0.5 for Ruby allows remote attackers to inject arbitrary web script or HTML via vectors involving generated pagination links.	CWE-79 Cross-site Scripting	CVE-2013-6459	2024-11-21 10:59	2014-01-1	Show	GitHub Exploit DB Packet Storm

290109	-	irfanview	irfanview	Buffer overflow in IrfanView before 4.37, when a multibyte-character directory name is used, allows user-assisted remote attackers to execute arbitrary code via a crafted file that is incorrectly han…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2013-6932	2024-11-21 10:59	2013-12-28	Show	GitHub Exploit DB Packet Storm

290110	-	cybozu	garoon	SQL injection vulnerability in Cybozu Garoon 3.7 SP2 and earlier allows remote authenticated users to execute arbitrary SQL commands via crafted API input.	CWE-89 SQL Injection	CVE-2013-6929	2024-11-21 10:59	2013-12-28	Show	GitHub Exploit DB Packet Storm