Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 24, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
202841	8.1	重要 Network	Hitek Software, LLC.	-	Hitek Software Automize の hitek.jar における暗号化されたパスワードを取得される脆弱性	CWE-326 不適切な暗号強度	CVE-2016-10102	2017-02-6 13:47	2016-12-15	Show	GitHub Exploit DB Packet Storm

202842	8.1	重要 Network	Hitek Software, LLC.	-	Hitek Software Automize の passManager.jsd における情報を開示される脆弱性	CWE-255 CWE-326	CVE-2016-10101	2017-02-6 13:47	2016-12-15	Show	GitHub Exploit DB Packet Storm

202843	7.8	重要 Local	Adups	-	BLU R1 HD デバイス上で稼動する Adups FOTA の com.adups.fota および com.adups.fota.sysoper における権限を付与される脆弱性	CWE-310 暗号の問題	CVE-2016-10139	2017-02-6 13:45	2016-11-15	Show	GitHub Exploit DB Packet Storm

202844	7.8	重要 Local	Adups	-	BLU Advance 5.0 および BLU R1 HD デバイス上で稼動する Adups FOTA の com.adups.fota.sysoper における中間者攻撃を実行される脆弱性	CWE-310 暗号の問題	CVE-2016-10138	2017-02-6 13:45	2016-11-15	Show	GitHub Exploit DB Packet Storm

202845	7.8	重要 Local	Adups	-	BLU R1 HD デバイス上で稼動する Adups FOTA の com.adups.fota.sysoper におけるファイルを読まれる脆弱性	CWE-310 暗号の問題	CVE-2016-10137	2017-02-6 13:45	2016-11-15	Show	GitHub Exploit DB Packet Storm

202846	7.8	重要 Local	Adups	-	BLU R1 HD デバイス上で稼動する Adups FOTA の com.adups.fota.sysoper におけるファイルを読まれる脆弱性	CWE-310 暗号の問題	CVE-2016-10136	2017-02-6 13:45	2016-11-15	Show	GitHub Exploit DB Packet Storm

202847	6.1	警告 Network	オラクル	-	Oracle Financial Services Applications の Oracle FLEXCUBE Universal Banking における Core に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2017-3314	2017-02-6 11:27	2017-01-17	Show	GitHub Exploit DB Packet Storm

202848	5.3	警告 Network	オラクル	-	Oracle Financial Services Applications の Oracle FLEXCUBE Direct Banking における Framework に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2017-3297	2017-02-6 11:27	2017-01-17	Show	GitHub Exploit DB Packet Storm

202849	4.7	警告 Network	オラクル	-	Oracle Financial Services Applications の Oracle FLEXCUBE Direct Banking における Pre-Login に関する脆弱性	CWE-200 情報漏えい	CVE-2017-3245	2017-02-6 11:27	2017-01-17	Show	GitHub Exploit DB Packet Storm

202850	4.7	警告 Network	オラクル	-	Oracle Financial Services Applications の Oracle FLEXCUBE Universal Banking における Core に関する脆弱性	CWE-20 不適切な入力確認	CVE-2017-3236	2017-02-6 11:27	2017-01-17	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 25, 2026, 4:04 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
292531	-	ibm	tivoli_identity_manager security_identity_manager	Cross-site request forgery (CSRF) vulnerability in IBM Tivoli Identity Manager (ITIM) 5.0 before 5.0.0.15 and 5.1 before 5.1.0.15 and IBM Security Identity Manager (ISIM) 6.0 before 6.0.0.2 allows re…	CWE-352 Origin Validation Error	CVE-2014-0961	2024-11-21 11:03	2014-06-9	Show	GitHub Exploit DB Packet Storm

292532	-	ibm	smart_analytics_system_7700 smart_analytics_system_7710	Unspecified vulnerability in IBM Smart Analytics System 7700 before FP 2.1.3.0 and 7710 before FP 2.1.3.0 allows local users to gain privileges via vectors related to events.	NVD-CWE-noinfo	CVE-2014-0935	2024-11-21 11:03	2014-06-4	Show	GitHub Exploit DB Packet Storm

292533	-	ibm	db2	Multiple untrusted search path vulnerabilities in unspecified (1) setuid and (2) setgid programs in IBM DB2 9.5, 9.7 before FP9a, 9.8, 10.1 before FP3a, and 10.5 before FP3a on Linux and UNIX allow l…	NVD-CWE-Other	CVE-2014-0907	2024-11-21 11:03	2014-05-31	Show	GitHub Exploit DB Packet Storm

292534	-	ibm	sterling_control_center	Open redirect vulnerability in IBM Sterling Control Center 5.4.0 before 5.4.0.1 iFix 3 and 5.4.1 before 5.4.1.0 iFix 2 allows remote authenticated users to redirect users to arbitrary web sites and c…	NVD-CWE-Other	CVE-2014-0925	2024-11-21 11:03	2014-05-31	Show	GitHub Exploit DB Packet Storm

292535	-	ibm	sametime	The Meeting Server in IBM Sametime 8.x through 8.5.2.1 and 9.x through 9.0.0.1 does not check whether a session cookie is current, which allows remote attackers to conduct user-search actions by leve…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2014-0906	2024-11-21 11:03	2014-05-26	Show	GitHub Exploit DB Packet Storm

292536	-	ibm	websphere_commerce	IBM WebSphere Commerce 6.0 Feature Pack 2 through Feature Pack 5, 7.0.0.0 through 7.0.0.8, and 7.0 Feature Pack 1 through Feature Pack 7 allows remote attackers to cause a denial of service (resource…	CWE-20 Improper Input Validation	CVE-2014-0943	2024-11-21 11:03	2014-05-26	Show	GitHub Exploit DB Packet Storm

292537	-	ibm	websphere_portal	IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0 through 7.0.0.2 CF28, and 8.0 before 8.0.0.1 CF12 allows remote authenticated users to cause a denial of service (infi…	CWE-20 Improper Input Validation	CVE-2014-0959	2024-11-21 11:03	2014-05-22	Show	GitHub Exploit DB Packet Storm

292538	-	ibm	websphere_portal	Open redirect vulnerability in IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0 through 7.0.0.2 CF28, and 8.0 before 8.0.0.1 CF12 allows remote attackers to redirect u…	NVD-CWE-Other	CVE-2014-0958	2024-11-21 11:03	2014-05-22	Show	GitHub Exploit DB Packet Storm

292539	-	ibm	websphere_portal	Cross-site scripting (XSS) vulnerability in googlemap.jsp in IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0 through 7.0.0.2 CF28, and 8.0 before 8.0.0.1 CF12 allows …	CWE-79 Cross-site Scripting	CVE-2014-0956	2024-11-21 11:03	2014-05-22	Show	GitHub Exploit DB Packet Storm

292540	-	ibm	websphere_portal	Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 8.0 before 8.0.0.1 CF12, when Social Rendering in Connections integration is enabled, allows remote authenticated users to inject arbi…	CWE-79 Cross-site Scripting	CVE-2014-0955	2024-11-21 11:03	2014-05-22	Show	GitHub Exploit DB Packet Storm