Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 16, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
201741	8.1	重要 Network	Hitek Software, LLC.	-	Hitek Software Automize の hitek.jar における暗号化されたパスワードを取得される脆弱性	CWE-326 不適切な暗号強度	CVE-2016-10102	2017-02-6 13:47	2016-12-15	Show	GitHub Exploit DB Packet Storm

201742	8.1	重要 Network	Hitek Software, LLC.	-	Hitek Software Automize の passManager.jsd における情報を開示される脆弱性	CWE-255 CWE-326	CVE-2016-10101	2017-02-6 13:47	2016-12-15	Show	GitHub Exploit DB Packet Storm

201743	7.8	重要 Local	Adups	-	BLU R1 HD デバイス上で稼動する Adups FOTA の com.adups.fota および com.adups.fota.sysoper における権限を付与される脆弱性	CWE-310 暗号の問題	CVE-2016-10139	2017-02-6 13:45	2016-11-15	Show	GitHub Exploit DB Packet Storm

201744	7.8	重要 Local	Adups	-	BLU Advance 5.0 および BLU R1 HD デバイス上で稼動する Adups FOTA の com.adups.fota.sysoper における中間者攻撃を実行される脆弱性	CWE-310 暗号の問題	CVE-2016-10138	2017-02-6 13:45	2016-11-15	Show	GitHub Exploit DB Packet Storm

201745	7.8	重要 Local	Adups	-	BLU R1 HD デバイス上で稼動する Adups FOTA の com.adups.fota.sysoper におけるファイルを読まれる脆弱性	CWE-310 暗号の問題	CVE-2016-10137	2017-02-6 13:45	2016-11-15	Show	GitHub Exploit DB Packet Storm

201746	7.8	重要 Local	Adups	-	BLU R1 HD デバイス上で稼動する Adups FOTA の com.adups.fota.sysoper におけるファイルを読まれる脆弱性	CWE-310 暗号の問題	CVE-2016-10136	2017-02-6 13:45	2016-11-15	Show	GitHub Exploit DB Packet Storm

201747	6.1	警告 Network	オラクル	-	Oracle Financial Services Applications の Oracle FLEXCUBE Universal Banking における Core に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2017-3314	2017-02-6 11:27	2017-01-17	Show	GitHub Exploit DB Packet Storm

201748	5.3	警告 Network	オラクル	-	Oracle Financial Services Applications の Oracle FLEXCUBE Direct Banking における Framework に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2017-3297	2017-02-6 11:27	2017-01-17	Show	GitHub Exploit DB Packet Storm

201749	4.7	警告 Network	オラクル	-	Oracle Financial Services Applications の Oracle FLEXCUBE Direct Banking における Pre-Login に関する脆弱性	CWE-200 情報漏えい	CVE-2017-3245	2017-02-6 11:27	2017-01-17	Show	GitHub Exploit DB Packet Storm

201750	4.7	警告 Network	オラクル	-	Oracle Financial Services Applications の Oracle FLEXCUBE Universal Banking における Core に関する脆弱性	CWE-20 不適切な入力確認	CVE-2017-3236	2017-02-6 11:27	2017-01-17	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 17, 2026, 4:19 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
292561	-	ibm	sterling_order_management sterling_selling_and_fulfillment_foundation	Cross-site scripting (XSS) vulnerability in IBM Sterling Order Management 8.5 before HF105 and Sterling Selling and Fulfillment Foundation 9.0 before HF85 allows remote authenticated users to inject …	CWE-79 Cross-site Scripting	CVE-2014-0932	2024-11-21 11:03	2014-04-22	Show	GitHub Exploit DB Packet Storm

292562	-	sap	router	The passwordCheck function in SAP Router 721 patch 117, 720 patch 411, 710 patch 029, and earlier terminates validation of a Route Permission Table entry password upon encountering the first incorrec…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2014-0984	2024-11-21 11:03	2014-04-17	Show	GitHub Exploit DB Packet Storm

292563	-	ibm	messagesight_jms_client messagesight	IBM MessageSight 1.x before 1.1.0.0-IBM-IMA-IT01015 does not verify that all of the characters of a password are correct, which makes it easier for remote authenticated users to bypass intended acces…	CWE-20 Improper Input Validation	CVE-2014-0924	2024-11-21 11:03	2014-04-16	Show	GitHub Exploit DB Packet Storm

292564	-	ibm	messagesight_jms_client messagesight	IBM MessageSight 1.x before 1.1.0.0-IBM-IMA-IT01015 allows remote attackers to cause a denial of service (daemon restart) via crafted MQ Telemetry Transport (MQTT) authentication data.	CWE-20 Improper Input Validation	CVE-2014-0923	2024-11-21 11:03	2014-04-16	Show	GitHub Exploit DB Packet Storm

292565	-	ibm	messagesight_jms_client messagesight	IBM MessageSight 1.x before 1.1.0.0-IBM-IMA-IT01015 allows remote attackers to cause a denial of service (resource consumption) via WebSockets MQ Telemetry Transport (MQTT) data.	CWE-20 Improper Input Validation	CVE-2014-0922	2024-11-21 11:03	2014-04-16	Show	GitHub Exploit DB Packet Storm

292566	-	ibm	messagesight_jms_client messagesight	The server in IBM MessageSight 1.x before 1.1.0.0-IBM-IMA-IT01015 allows remote attackers to cause a denial of service (daemon crash and message data loss) via malformed headers during a WebSockets c…	CWE-20 Improper Input Validation	CVE-2014-0921	2024-11-21 11:03	2014-04-16	Show	GitHub Exploit DB Packet Storm

292567	-	vmware	vsphere_client	VMware vSphere Client 5.0 before Update 3 and 5.1 before Update 2 does not properly validate X.509 certificates, which allows man-in-the-middle attackers to spoof SSL servers via a crafted certificat…	CWE-310 Cryptographic Issues	CVE-2014-1210	2024-11-21 11:03	2014-04-12	Show	GitHub Exploit DB Packet Storm

292568	-	vmware	vsphere_client	VMware vSphere Client 4.0, 4.1, 5.0 before Update 3, and 5.1 before Update 2 does not properly validate updates to Client files, which allows remote attackers to trigger the downloading and execution…	CWE-20 Improper Input Validation	CVE-2014-1209	2024-11-21 11:03	2014-04-12	Show	GitHub Exploit DB Packet Storm

292569	-	ibm	spss_analytic_server	IBM SPSS Analytic Server 1.0 before IF002 and 1.0.1 before IF004 logs cleartext passwords, which allows remote authenticated users to obtain sensitive information via unspecified vectors.	CWE-255 Credentials Management	CVE-2014-0920	2024-11-21 11:03	2014-04-11	Show	GitHub Exploit DB Packet Storm

292570	-	ibm	business_process_manager	The User Attribute implementation in IBM Business Process Manager (BPM) 7.5.x through 7.5.1.2, 8.0.x through 8.0.1.2, and 8.5.x through 8.5.0.1 does not verify authorization for read or write access …	CWE-264 Permissions, Privileges, and Access Controls	CVE-2014-0908	2024-11-21 11:03	2014-04-11	Show	GitHub Exploit DB Packet Storm