Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 19, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
202531	6.1	警告 Network	オラクル	-	Oracle Primavera Products Suite の Primavera P6 Enterprise Project Portfolio Management における Web access に関する脆弱性	CWE-noinfo 情報不足	CVE-2016-3568	2016-07-27 09:41	2016-07-19	Show	GitHub Exploit DB Packet Storm

202532	5.4	警告 Network	オラクル	-	Oracle Primavera Products Suite の Primavera P6 Enterprise Project Portfolio Management における Web access に関する脆弱性	CWE-noinfo 情報不足	CVE-2016-3567	2016-07-27 09:41	2016-07-19	Show	GitHub Exploit DB Packet Storm

202533	6.1	警告 Network	オラクル	-	Oracle Primavera Products Suite の Primavera P6 Enterprise Project Portfolio Management における Web access に関する脆弱性	CWE-noinfo 情報不足	CVE-2016-3566	2016-07-27 09:41	2016-07-19	Show	GitHub Exploit DB Packet Storm

202534	7.3	重要 Network	オラクル	-	Oracle Supply Chain Products Suite の Oracle Agile PLM における SDK に関する脆弱性	CWE-noinfo 情報不足	CVE-2016-3561	2016-07-26 14:46	2016-07-19	Show	GitHub Exploit DB Packet Storm

202535	5.3	警告 Network	オラクル	-	Oracle Supply Chain Products Suite の Oracle Agile PLM における SDK に関する脆弱性	CWE-noinfo 情報不足	CVE-2016-3560	2016-07-26 14:46	2016-07-19	Show	GitHub Exploit DB Packet Storm

202536	6.1	警告 Network	オラクル	-	Oracle Supply Chain Products Suite の Oracle Agile PLM における File Load に関する脆弱性	CWE-noinfo 情報不足	CVE-2016-3557	2016-07-26 14:46	2016-07-19	Show	GitHub Exploit DB Packet Storm

202537	9.8	緊急 Network	オラクル	-	Oracle Supply Chain Products Suite の Oracle Agile PLM における EM Integration に関する脆弱性	CWE-noinfo 情報不足	CVE-2016-3556	2016-07-26 14:46	2016-07-19	Show	GitHub Exploit DB Packet Storm

202538	6.1	警告 Network	オラクル	-	Oracle Supply Chain Products Suite の Oracle Agile PLM における PGC / Excel Plugin に関する脆弱性	CWE-noinfo 情報不足	CVE-2016-3555	2016-07-26 14:46	2016-07-19	Show	GitHub Exploit DB Packet Storm

202539	8.8	重要 Network	オラクル	-	Oracle Supply Chain Products Suite の Oracle Agile PLM における PC / BOM などに関する脆弱性	CWE-noinfo 情報不足	CVE-2016-3554	2016-07-26 14:46	2016-07-19	Show	GitHub Exploit DB Packet Storm

202540	5.4	警告 Network	オラクル	-	Oracle Supply Chain Products Suite の Oracle Agile PLM における PC Core に関する脆弱性	CWE-noinfo 情報不足	CVE-2016-3553	2016-07-26 14:46	2016-07-19	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 19, 2026, 4:16 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
291301	-	i-doit	i-doit	Multiple cross-site scripting (XSS) vulnerabilities in synetics i-doit open 0.9.9-7, i-doit pro 1.0 and earlier, and i-doit pro 1.0.2 when the 'sanitize user input' flag is not enabled, allow remote …	CWE-79 Cross-site Scripting	CVE-2013-1413	2024-11-21 10:49	2014-02-12	Show	GitHub Exploit DB Packet Storm

291302	-	geeklog	geeklog	Cross-site scripting (XSS) vulnerability in calendar/index.php in the Calendar plugin in Geeklog before 1.8.2sr1 and 2.0.0 before 2.0.0rc2 allows remote attackers to inject arbitrary web script or HT…	CWE-79 Cross-site Scripting	CVE-2013-1470	2024-11-21 10:49	2014-02-6	Show	GitHub Exploit DB Packet Storm

291303	-	glfusion	glfusion	Multiple cross-site scripting (XSS) vulnerabilities in glFusion before 1.2.2.pl4 allow remote attackers to inject arbitrary web script or HTML via the (1) subject parameter to profiles.php; (2) addre…	CWE-79 Cross-site Scripting	CVE-2013-1466	2024-11-21 10:49	2014-02-6	Show	GitHub Exploit DB Packet Storm

291304	-	adobe	acrobat_reader acrobat	Buffer overflow in Adobe Reader and Acrobat 9.x before 9.5.3, 10.x before 10.1.5, and 11.x before 11.0.1 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability …	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2013-1376	2024-11-21 10:49	2014-01-31	Show	GitHub Exploit DB Packet Storm

291305	-	lenovo	thinkpad_bluetooth_with_enhanced_data_rate_software	Untrusted search path vulnerability in Lenovo Thinkpad Bluetooth with Enhanced Data Rate Software 6.4.0.2900 and earlier allows local users, and possibly remote attackers, to execute arbitrary code a…	NVD-CWE-Other	CVE-2013-1361	2024-11-21 10:49	2014-01-22	Show	GitHub Exploit DB Packet Storm

291306	-	dave_coffin	dcraw	Unspecified vulnerability in dcraw 0.8.x through 0.8.9, as used in libraw, ufraw, shotwell, and other products, allows context-dependent attackers to cause a denial of service via a crafted photo fil…	NVD-CWE-noinfo	CVE-2013-1438	2024-11-21 10:49	2014-01-20	Show	GitHub Exploit DB Packet Storm

291307	-	zabbix	zabbix	The user.login function in Zabbix before 1.8.16 and 2.x before 2.0.5rc1 allows remote attackers to override LDAP configuration via the cnf parameter.	CWE-287 Improper Authentication	CVE-2013-1364	2024-11-21 10:49	2013-12-15	Show	GitHub Exploit DB Packet Storm

291308	-	uclouvain	openjpeg	OpenJPEG 1.3 and earlier allows remote attackers to cause a denial of service (memory consumption or crash) via unspecified vectors related to NULL pointer dereferences, division-by-zero, and other e…	NVD-CWE-noinfo	CVE-2013-1447	2024-11-21 10:49	2013-12-13	Show	GitHub Exploit DB Packet Storm

291309	-	os4ed	opensis	Eval injection vulnerability in ajax.php in openSIS 4.5 through 5.2 allows remote attackers to execute arbitrary PHP code via the modname parameter.	CWE-94 Code Injection	CVE-2013-1349	2024-11-21 10:49	2013-12-10	Show	GitHub Exploit DB Packet Storm

291310	-	mit	kerberos_5	do_tgs_req.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.11 before 1.11.4, when a single-component realm name is used, allows remote authenticated users to cause a denial of s…	CWE-20 Improper Input Validation	CVE-2013-1417	2024-11-21 10:49	2013-11-20	Show	GitHub Exploit DB Packet Storm