Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 1, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
201891 5.4 警告
Network
オラクル - Oracle Financial Services Applications の Oracle FLEXCUBE Universal Banking における INFRA に関する脆弱性 CWE-Other
その他
CVE-2016-5502 2016-10-26 14:12 2016-10-18 Show GitHub Exploit DB Packet Storm
201892 7.8 重要
Local
オラクル - Oracle Virtualization の Oracle VM VirtualBox における Core に関する脆弱性 CWE-noinfo
情報不足
CVE-2016-5501 2016-10-26 14:11 2016-10-18 Show GitHub Exploit DB Packet Storm
201893 3.3
Local
オラクル - Oracle Database Server の RDBMS Security における脆弱性 CWE-200
情報漏えい
CVE-2016-5498 2016-10-26 14:10 2016-10-18 Show GitHub Exploit DB Packet Storm
201894 3.3
Local
オラクル - Oracle Financial Services Applications の Oracle FLEXCUBE Universal Banking における INFRA に関する脆弱性 CWE-noinfo
情報不足
CVE-2016-5490 2016-10-26 14:06 2016-10-18 Show GitHub Exploit DB Packet Storm
201895 8.2 重要
Network
オラクル - Oracle E-Business Suite の Oracle iStore における Runtime Catalog に関する脆弱性 CWE-noinfo
情報不足
CVE-2016-5489 2016-10-26 14:05 2016-10-18 Show GitHub Exploit DB Packet Storm
201896 5.3 警告
Local
オラクル - Oracle Sun Solaris における Files に関する脆弱性 CWE-noinfo
情報不足
CVE-2016-5487 2016-10-26 14:01 2016-10-18 Show GitHub Exploit DB Packet Storm
201897 5.5 警告
Local
オラクル - Oracle Sun Systems Products Suite の Sun ZFS Storage Appliance Kit (AK) における Core Services に関する脆弱性 CWE-Other
その他
CVE-2016-5486 2016-10-26 14:00 2016-10-18 Show GitHub Exploit DB Packet Storm
201898 3.7
Network
オラクル - Oracle Sun Systems Products Suite の Sun ZFS Storage Appliance Kit (AK) における Core Services に関する脆弱性 CWE-200
情報漏えい
CVE-2016-5481 2016-10-26 13:59 2016-10-18 Show GitHub Exploit DB Packet Storm
201899 2.8
Local
オラクル - Oracle Sun Solaris における Bash に関する脆弱性 CWE-noinfo
情報不足
CVE-2016-5480 2016-10-26 13:58 2016-10-18 Show GitHub Exploit DB Packet Storm
201900 4.3 警告
Network
オラクル - Oracle Financial Services Applications の Oracle FLEXCUBE Universal Banking における INFRA に関する脆弱性 CWE-200
情報漏えい
CVE-2016-5479 2016-10-26 13:57 2016-10-18 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 1, 2026, 4:12 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
289861 - optimizepress optimizepress Multiple unrestricted file upload vulnerabilities in (1) media-upload.php, (2) media-upload-lncthumb.php, and (3) media-upload-sq_button.php in lib/admin/ in the OptimizePress theme before 1.61 for W… CWE-20
 Improper Input Validation 
CVE-2013-7102 2024-11-21 11:00 2013-12-24 Show GitHub Exploit DB Packet Storm
289862 - typo3 typo3 The (old) Form Content Element component in TYPO3 4.5.0 through 4.5.31, 4.7.0 through 4.7.16, 6.0.0 through 6.0.11, and 6.1.0 through 6.1.6 allows remote authenticated editors to generate arbitrary H… CWE-264
Permissions, Privileges, and Access Controls
CVE-2013-7081 2024-11-21 11:00 2013-12-24 Show GitHub Exploit DB Packet Storm
289863 - typo3 typo3 The creating record functionality in Extension table administration library (feuser_adminLib.inc) in TYPO3 4.5.0 through 4.5.31, 4.7.0 through 4.7.16, and 6.0.0 through 6.0.11 allows remote attackers… NVD-CWE-noinfo
CVE-2013-7080 2024-11-21 11:00 2013-12-24 Show GitHub Exploit DB Packet Storm
289864 - typo3 typo3 Open redirect vulnerability in the OpenID extension in TYPO3 4.5.0 through 4.5.31, 4.7.0 through 4.7.16, 6.0.0 through 6.0.11, and 6.1.0 through 6.1.6 allows remote attackers to redirect users to arb… CWE-20
 Improper Input Validation 
CVE-2013-7079 2024-11-21 11:00 2013-12-24 Show GitHub Exploit DB Packet Storm
289865 - typo3 typo3 The Content Editing Wizards component in TYPO3 4.5.0 through 4.5.31, 4.7.0 through 4.7.16, 6.0.0 through 6.0.11, and 6.1.0 through 6.1.6 allows remote authenticated backend users to unserialize arbit… CWE-310
Cryptographic Issues
CVE-2013-7075 2024-11-21 11:00 2013-12-24 Show GitHub Exploit DB Packet Storm
289866 - typo3 typo3 The Content Editing Wizards component in TYPO3 4.5.0 through 4.5.31, 4.7.0 through 4.7.16, 6.0.0 through 6.0.11, and 6.1.0 through 6.1.6 does not check permissions, which allows remote authenticated … CWE-264
Permissions, Privileges, and Access Controls
CVE-2013-7073 2024-11-21 11:00 2013-12-24 Show GitHub Exploit DB Packet Storm
289867 - znc znc-msvc Stack-based buffer overflow in fish.cpp in the Fish plugin for ZNC, as used in ZNC for Windows (znc-msvc) 0.206 and earlier, allows remote attackers to cause a denial of service (crash) via a long st… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2013-7049 2024-11-21 11:00 2013-12-24 Show GitHub Exploit DB Packet Storm
289868 - cisco ios_xe The VTY authentication implementation in Cisco IOS XE 03.02.xxSE and 03.03.xxSE incorrectly relies on the Linux-IOS internal-network configuration, which allows remote attackers to bypass authenticat… CWE-287
Improper Authentication
CVE-2013-6979 2024-11-21 11:00 2013-12-24 Show GitHub Exploit DB Packet Storm
289869 - cisco unified_communications_manager The disaster recovery system (DRS) component in Cisco Unified Communications Manager (UCM) 9.1(1) and earlier allows remote authenticated users to obtain sensitive device information by reading "extr… CWE-200
Information Exposure
CVE-2013-6978 2024-11-21 11:00 2013-12-21 Show GitHub Exploit DB Packet Storm
289870 - efrontlearning efront Multiple cross-site scripting (XSS) vulnerabilities in www/administrator.php in eFront 3.6.14 (build 18012) allow remote authenticated administrators to inject arbitrary web script or HTML via the (1… CWE-79
Cross-site Scripting
CVE-2013-7194 2024-11-21 11:00 2013-12-21 Show GitHub Exploit DB Packet Storm