Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 9, 2026, 10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
202611	3.7	低 Network	nov (jose-php project)	-	jose-php における重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2016-5429	2016-10-28 14:55	2016-08-30	Show	GitHub Exploit DB Packet Storm

202612	3.1	低 Network	オラクル	-	Oracle Fusion Middleware の Oracle Data Integrator における Code Generation Engine に関する脆弱性	CWE-200 情報漏えい	CVE-2016-5618	2016-10-28 14:20	2016-10-18	Show	GitHub Exploit DB Packet Storm

202613	6.1	警告 Network	オラクル	-	Oracle Financial Services Applications の Oracle FLEXCUBE Universal Banking における INFRA に関する脆弱性	CWE-Other その他	CVE-2016-5622	2016-10-28 14:20	2016-10-18	Show	GitHub Exploit DB Packet Storm

202614	4.3	警告 Network	オラクル	-	Oracle Financial Services Applications の Oracle FLEXCUBE Universal Banking における INFRA に関する脆弱性	CWE-200 CWE-Other	CVE-2016-5621	2016-10-28 14:20	2016-10-18	Show	GitHub Exploit DB Packet Storm

202615	5.4	警告 Network	オラクル	-	Oracle Financial Services Applications の Oracle FLEXCUBE Universal Banking における INFRA に関する脆弱性	CWE-Other その他	CVE-2016-5620	2016-10-28 14:20	2016-10-18	Show	GitHub Exploit DB Packet Storm

202616	8.1	重要 Network	オラクル	-	Oracle Financial Services Applications の Oracle FLEXCUBE Universal Banking における INFRA に関する脆弱性	CWE-Other その他	CVE-2016-5619	2016-10-28 14:20	2016-10-18	Show	GitHub Exploit DB Packet Storm

202617	8.8	重要 Network	オラクル	-	Oracle Financial Services Applications の Oracle FLEXCUBE Universal Banking における INFRA に関する脆弱性	CWE-Other その他	CVE-2016-5607	2016-10-28 14:20	2016-10-18	Show	GitHub Exploit DB Packet Storm

202618	6.1	警告 Local	オラクル	-	Oracle Sun Systems Products Suite の Solaris における Kernel Zones に関する脆弱性	CWE-Other その他	CVE-2016-5606	2016-10-28 14:20	2016-10-18	Show	GitHub Exploit DB Packet Storm

202619	5.5	警告 Local	オラクル	-	Oracle Virtualization の Oracle VM VirtualBox における Core に関する脆弱性	CWE-Other その他	CVE-2016-5608	2016-10-28 14:20	2016-10-18	Show	GitHub Exploit DB Packet Storm

202620	9.1	緊急 Network	オラクル	-	Oracle Virtualization の Oracle VM VirtualBox における VirtualBox Remote Desktop Extension に関する脆弱性	CWE-Other その他	CVE-2016-5605	2016-10-28 14:20	2016-10-18	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 9, 2026, 4:16 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
345901	-	afterlogic	webmail_pro	Multiple cross-site scripting (XSS) vulnerabilities in history-storage.aspx in AfterLogic WebMail Pro 4.7.10 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) Hist…	CWE-79 Cross-site Scripting	CVE-2009-4743	2017-08-17 10:31	2010-03-27	Show	GitHub Exploit DB Packet Storm

345902	-	oicgroup	exponent_cms	Cross-site scripting (XSS) vulnerability in the Contact module in Exponent CMS 0.97-GA20090213 allows remote attackers to inject arbitrary web script or HTML via the email parameter. NOTE: the prove…	CWE-79 Cross-site Scripting	CVE-2009-4744	2017-08-17 10:31	2010-03-27	Show	GitHub Exploit DB Packet Storm

345903	-	phppower	top_paidmailer	PHP remote file inclusion vulnerability in home.php in Top Paidmailer allows remote attackers to execute arbitrary PHP code via a URL in the page parameter.	CWE-94 Code Injection	CVE-2009-4750	2017-08-17 10:31	2010-03-27	Show	GitHub Exploit DB Packet Storm

345904	-	phppower	swinger_club_portal	SQL injection vulnerability in anzeiger/start.php in Swinger Club Portal allows remote attackers to execute arbitrary SQL commands via the id parameter in a rubrik action.	CWE-89 SQL Injection	CVE-2009-4751	2017-08-17 10:31	2010-03-27	Show	GitHub Exploit DB Packet Storm

345905	-	phppower	swinger_club_portal	PHP remote file inclusion vulnerability in anzeiger/start.php in Swinger Club Portal allows remote attackers to execute arbitrary PHP code via a URL in the go parameter.	CWE-94 Code Injection	CVE-2009-4752	2017-08-17 10:31	2010-03-27	Show	GitHub Exploit DB Packet Storm

345906	-	phpmyvisites	phpmyvisites	Unspecified vulnerability in the ClickHeat plugin, as used in phpMyVisites before 2.4, has unknown impact and attack vectors. NOTE: due to lack of details from the vendor, it is not clear whether th…	NVD-CWE-noinfo	CVE-2009-4763	2017-08-17 10:31	2010-03-31	Show	GitHub Exploit DB Packet Storm

345907	-	plohni	shoutbox	Multiple cross-site scripting (XSS) vulnerabilities in index.php in Plohni Shoutbox 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) input_name and (2) input_text paramet…	CWE-79 Cross-site Scripting	CVE-2009-4767	2017-08-17 10:31	2010-04-20	Show	GitHub Exploit DB Packet Storm

345908	-	blizzard	warcraft_3_the_frozen_throne	Unspecified vulnerability in the JASS script interpreter in Warcraft III: The Frozen Throne 1.24b and earlier allows user-assisted remote attackers to execute arbitrary code via a crafted custom map.…	CWE-94 Code Injection	CVE-2009-4768	2017-08-17 10:31	2010-04-20	Show	GitHub Exploit DB Packet Storm

345909	-	ubercart	ubercart	The PayPal Website Payments Standard functionality in the Ubercart module 5.x before 5.x-1.9 and 6.x before 6.x-2.1 for Drupal does not properly validate orders, which allows remote attackers to trig…	CWE-20 Improper Input Validation	CVE-2009-4771	2017-08-17 10:31	2010-04-20	Show	GitHub Exploit DB Packet Storm

345910	-	ubercart	ubercart	Unspecified vulnerability in the PayPal Website Payments Standard functionality in the Ubercart module 5.x before 5.x-1.9 and 6.x before 6.x-2.1 for Drupal, when a custom checkout completion message …	NVD-CWE-noinfo	CVE-2009-4772	2017-08-17 10:31	2010-04-20	Show	GitHub Exploit DB Packet Storm