Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 8, 2026, 12:07 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
202491 3.3 低
Local 		オラクル - Oracle Database Server の RDBMS Security における脆弱性 CWE-200
情報漏えい 		CVE-2016-5498 2016-10-26 14:10 2016-10-18 Show GitHub Exploit DB Packet Storm
202492 3.3 低
Local 		オラクル - Oracle Financial Services Applications の Oracle FLEXCUBE Universal Banking における INFRA に関する脆弱性 CWE-noinfo
情報不足 		CVE-2016-5490 2016-10-26 14:06 2016-10-18 Show GitHub Exploit DB Packet Storm
202493 8.2 重要
Network 		オラクル - Oracle E-Business Suite の Oracle iStore における Runtime Catalog に関する脆弱性 CWE-noinfo
情報不足 		CVE-2016-5489 2016-10-26 14:05 2016-10-18 Show GitHub Exploit DB Packet Storm
202494 5.3 警告
Local 		オラクル - Oracle Sun Solaris における Files に関する脆弱性 CWE-noinfo
情報不足 		CVE-2016-5487 2016-10-26 14:01 2016-10-18 Show GitHub Exploit DB Packet Storm
202495 5.5 警告
Local 		オラクル - Oracle Sun Systems Products Suite の Sun ZFS Storage Appliance Kit (AK) における Core Services に関する脆弱性 CWE-Other
その他 		CVE-2016-5486 2016-10-26 14:00 2016-10-18 Show GitHub Exploit DB Packet Storm
202496 3.7 低
Network 		オラクル - Oracle Sun Systems Products Suite の Sun ZFS Storage Appliance Kit (AK) における Core Services に関する脆弱性 CWE-200
情報漏えい 		CVE-2016-5481 2016-10-26 13:59 2016-10-18 Show GitHub Exploit DB Packet Storm
202497 2.8 低
Local 		オラクル - Oracle Sun Solaris における Bash に関する脆弱性 CWE-noinfo
情報不足 		CVE-2016-5480 2016-10-26 13:58 2016-10-18 Show GitHub Exploit DB Packet Storm
202498 4.3 警告
Network 		オラクル - Oracle Financial Services Applications の Oracle FLEXCUBE Universal Banking における INFRA に関する脆弱性 CWE-200
情報漏えい 		CVE-2016-5479 2016-10-26 13:57 2016-10-18 Show GitHub Exploit DB Packet Storm
202499 9.8 緊急
Network 		オラクル - Oracle Fusion Middleware の Oracle Web Services における JAXWS Web Services Stack に関する脆弱性 CWE-noinfo
情報不足 		CVE-2016-3551 2016-10-26 13:56 2016-10-18 Show GitHub Exploit DB Packet Storm
202500 8.8 重要
Network 		オラクル - Oracle Fusion Middleware の Oracle WebLogic Server における JavaServer Faces に関する脆弱性 CWE-noinfo
情報不足 		CVE-2016-3505 2016-10-26 13:55 2016-10-18 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 8, 2026, 4:09 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
292211 - softaculous webuzo Cross-site scripting (XSS) vulnerability in filemanager/login.php in the File Manager module in Softaculous Webuzo before 2.1.4 allows remote attackers to inject arbitrary web script or HTML via the … CWE-79
Cross-site Scripting 		CVE-2013-6042 2024-11-21 10:58 2013-11-19 Show GitHub Exploit DB Packet Storm
292212 - vmware workstation
player 		VMware Workstation 9.x before 9.0.3 and VMware Player 5.x before 5.0.3 on Linux do not properly handle shared libraries, which allows host OS users to gain host OS privileges via unspecified vectors. CWE-264
Permissions, Privileges, and Access Controls 		CVE-2013-5972 2024-11-21 10:58 2013-11-18 Show GitHub Exploit DB Packet Storm
292213 - ajaxplorer ajaxplorer Directory traversal vulnerability in plugins/editor.zoho/agent/save_zoho.php in the Zoho plugin in Pydio (formerly AjaXplorer) before 5.0.4 allows remote attackers to read or delete arbitrary files v… CWE-22
Path Traversal 		CVE-2013-6226 2024-11-21 10:58 2013-11-15 Show GitHub Exploit DB Packet Storm
292214 - zikula zikula_application_framework Cross-site scripting (XSS) vulnerability in Zikula Application Framework before 1.3.6 allows remote attackers to inject arbitrary web script or HTML via the returnpage parameter to index.php. CWE-79
Cross-site Scripting 		CVE-2013-6168 2024-11-21 10:58 2013-11-15 Show GitHub Exploit DB Packet Storm
292215 - projeqtor projeqtor SQL injection vulnerability in view/objectDetail.php in Project'Or RIA 3.4.0 allows remote attackers to execute arbitrary SQL commands via the objectId parameter. CWE-89
SQL Injection 		CVE-2013-6164 2024-11-21 10:58 2013-11-15 Show GitHub Exploit DB Packet Storm
292216 - projeqtor projeqtor Multiple cross-site scripting (XSS) vulnerabilities in ProjeQtOr (formerly Project'Or RIA) before 4.0.0 allow remote attackers to inject arbitrary web script or HTML via the (1) type parameter to vie… CWE-79
Cross-site Scripting 		CVE-2013-6163 2024-11-21 10:58 2013-11-15 Show GitHub Exploit DB Packet Storm
292217 - apprain apprain SQL injection vulnerability in appRain CMF 3.0.2 and earlier allows remote attackers to execute arbitrary SQL commands via the PATH_INFO to blog-by-cat/. CWE-89
SQL Injection 		CVE-2013-6058 2024-11-21 10:58 2013-11-15 Show GitHub Exploit DB Packet Storm
292218 - justsystems ichitaro_pro
ichitaro_portable_with_oreplug
ichitaro
ichitaro_viewer 		Unspecified vulnerability in JustSystems Ichitaro 2006 through 2011; Ichitaro Government 6, 7, and 2006 through 2010; Ichitaro 2011 Sou; Ichitaro 2012 Shou; Ichitaro 2013 Gen and Gen Trial Edition; I… NVD-CWE-noinfo
CVE-2013-5990 2024-11-21 10:58 2013-11-14 Show GitHub Exploit DB Packet Storm
292219 - tapbots tweetbot Tweetbot 1.3.3 for Mac, and 2.8.5 for iPad and iPhone, does not require confirmation of (1) follow or (2) favorite actions, which allows remote attackers to automatically force the user to perform un… CWE-352
 Origin Validation Error 		CVE-2013-5726 2024-11-21 10:58 2013-11-13 Show GitHub Exploit DB Packet Storm
292220 - qualcomm quic_mobile_station_modem_kernel goodix_tool.c in the Goodix gt915 touchscreen driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, does not properly… CWE-20
 Improper Input Validation  		CVE-2013-6122 2024-11-21 10:58 2013-11-12 Show GitHub Exploit DB Packet Storm