Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 6, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
202211	4.2	警告 Network	オラクル	-	Oracle Financial Services Applications の Oracle FLEXCUBE Private Banking における Admin に関する脆弱性	CWE-Other その他	CVE-2016-5493	2016-10-28 13:56	2016-10-18	Show	GitHub Exploit DB Packet Storm

202212	7.1	重要 Local	オラクル	-	Oracle Sun Systems Products Suite の Sun ZFS Storage Appliance Kit (AK) における SMB Users に関する脆弱性	CWE-Other その他	CVE-2016-5492	2016-10-28 13:55	2016-10-18	Show	GitHub Exploit DB Packet Storm

202213	8.2	重要 Network	オラクル	-	Oracle Commerce の Oracle Commerce Service Center における Commerce Service Center に関する脆弱性	CWE-Other その他	CVE-2016-5491	2016-10-28 13:52	2016-10-18	Show	GitHub Exploit DB Packet Storm

202214	8.2	重要 Network	オラクル	-	Oracle Commerce の Oracle Commerce Guided Search における Oracle Commerce Guided Search に関する脆弱性	CWE-Other その他	CVE-2016-5482	2016-10-28 13:52	2016-10-18	Show	GitHub Exploit DB Packet Storm

202215	2.4	低 Network	オラクル	-	Oracle Database Server の RDBMS Security and SQL*Plus における脆弱性	CWE-200 情報漏えい	CVE-2016-3562	2016-10-28 13:51	2016-10-18	Show	GitHub Exploit DB Packet Storm

202216	5.5	警告 Local	オラクル	-	Oracle Sun Systems Products Suite の Solaris における Kernel Zones に関する脆弱性	CWE-Other その他	CVE-2016-5576	2016-10-28 13:44	2016-10-18	Show	GitHub Exploit DB Packet Storm

202217	5.3	警告 Network	オラクル	-	Oracle E-Business Suite の Oracle Common Applications Calendar における Resources Module に関する脆弱性	CWE-200 CWE-Other	CVE-2016-5575	2016-10-28 13:44	2016-10-18	Show	GitHub Exploit DB Packet Storm

202218	8.6	重要 Network	オラクル	-	Oracle Fusion Middleware の Oracle Outside In Technology における Outside In Filters に関する脆弱性	CWE-Other その他	CVE-2016-5574	2016-10-28 13:44	2016-10-18	Show	GitHub Exploit DB Packet Storm

202219	7.6	重要 Network	オラクル	-	Oracle E-Business Suite の Oracle iProcurement における Requisition Management に関する脆弱性	CWE-Other その他	CVE-2016-5562	2016-10-28 13:44	2016-10-18	Show	GitHub Exploit DB Packet Storm

202220	3.1	低 Network	オラクル	-	Oracle Sun Systems Products Suite の Solaris における IKE に関する脆弱性	CWE-noinfo 情報不足	CVE-2016-5561	2016-10-28 13:44	2016-10-18	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 7, 2026, 4:13 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
292001	-	oracle	mojarra	Oracle Mojarra 2.2.x before 2.2.6 and 2.1.x before 2.1.28 does not perform appropriate encoding when a (1) <h:outputText> tag or (2) EL expression is used after a scriptor style block, which allows r…	CWE-79 Cross-site Scripting	CVE-2013-5855	2024-11-21 10:58	2014-07-17	Show	GitHub Exploit DB Packet Storm

292002	-	yealink	sip-t38g	config/.htpasswd in Yealink IP Phone SIP-T38G has a hardcoded password of (1) user (s7C9Cx.rLsWFA) for the user account, (2) admin (uoCbM.VEiKQto) for the admin account, and (3) var (jhl3iZAe./qXM) f…	CWE-255 Credentials Management	CVE-2013-5755	2024-11-21 10:58	2014-07-16	Show	GitHub Exploit DB Packet Storm

292003	-	dahuasecurity	dvr_firmware	Dahua DVR 2.608.0000.0 and 2.608.GV00.0 allows remote attackers to bypass authentication and obtain sensitive information including user credentials, change user passwords, clear log files, and perfo…	CWE-287 Improper Authentication	CVE-2013-6117	2024-11-21 10:58	2014-07-12	Show	GitHub Exploit DB Packet Storm

292004	-	ibm	marketing_platform	SQL injection vulnerability in IBM Marketing Platform 9.1 before FP2 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.	CWE-89 SQL Injection	CVE-2013-6311	2024-11-21 10:58	2014-06-28	Show	GitHub Exploit DB Packet Storm

292005	-	ibm	marketing_platform	Cross-site scripting (XSS) vulnerability in IBM Marketing Platform 9.1 before FP2 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.	CWE-79 Cross-site Scripting	CVE-2013-6310	2024-11-21 10:58	2014-06-28	Show	GitHub Exploit DB Packet Storm

292006	-	ibm	marketing_platform	IBM Marketing Platform 9.1 before FP2 allows remote authenticated users to hijack sessions, and consequently read records, modify records, or conduct transactions, via an unspecified link injection.	CWE-94 Code Injection	CVE-2013-6309	2024-11-21 10:58	2014-06-28	Show	GitHub Exploit DB Packet Storm

292007	-	ibm	marketing_platform	IBM Marketing Platform 9.1 before FP2 allows remote authenticated users to conduct phishing attacks and capture login credentials via an unspecified injection.	NVD-CWE-Other	CVE-2013-6308	2024-11-21 10:58	2014-06-28	Show	GitHub Exploit DB Packet Storm

292008	-	hp	service_virtualization	Directory traversal vulnerability in CommunicationServlet in HP Service Virtualization 3.x before 3.50.1, when the AutoPass license server is enabled, allows remote attackers to create arbitrary file…	CWE-22 Path Traversal	CVE-2013-6221	2024-11-21 10:58	2014-06-19	Show	GitHub Exploit DB Packet Storm

292009	-	emc	rsa_bsafe_toolkits rsa_data_protection_manager	The default configuration of EMC RSA BSAFE Toolkits and RSA Data Protection Manager (DPM) 20130918 uses the Dual Elliptic Curve Deterministic Random Bit Generation (Dual_EC_DRBG) algorithm, which mak…	CWE-310 Cryptographic Issues	CVE-2013-6078	2024-11-21 10:58	2014-06-18	Show	GitHub Exploit DB Packet Storm

292010	-	livezilla	livezilla	LiveZilla before 5.1.1.0 stores the admin Base64 encoded username and password in a 1click file, which allows local users to obtain access by reading the file.	CWE-255 Credentials Management	CVE-2013-6223	2024-11-21 10:58	2014-06-10	Show	GitHub Exploit DB Packet Storm