Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 21, 2026, 6:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
202991	3.7	低 Network	オラクル	-	Oracle Fusion Middleware の Oracle HTTP Server における SSL/TLS Module に関する脆弱性	CWE-noinfo 情報不足	CVE-2016-3482	2016-07-26 10:31	2016-07-19	Show	GitHub Exploit DB Packet Storm

202992	3.7	低 Network	オラクル	-	Oracle Fusion Middleware の BI Publisher における Security に関する脆弱性	CWE-noinfo 情報不足	CVE-2016-3474	2016-07-26 10:31	2016-07-19	Show	GitHub Exploit DB Packet Storm

202993	8.3	重要 Network	オラクル	-	Oracle Fusion Middleware の Oracle Business Intelligence Enterprise Edition における Analytics Web Administration に関する脆弱性	CWE-noinfo 情報不足	CVE-2016-3446	2016-07-26 10:31	2016-07-19	Show	GitHub Exploit DB Packet Storm

202994	5.4	警告 Network	オラクル	-	Oracle Fusion Middleware の Oracle Business Intelligence Enterprise Edition における Analytics Web Administration に関する脆弱性	CWE-noinfo 情報不足	CVE-2016-3433	2016-07-26 10:31	2016-07-19	Show	GitHub Exploit DB Packet Storm

202995	5.4	警告 Network	オラクル	-	Oracle Fusion Middleware の BI Publisher における Web Server に関する脆弱性	CWE-noinfo 情報不足	CVE-2016-3432	2016-07-26 10:31	2016-07-19	Show	GitHub Exploit DB Packet Storm

202996	4.7	警告 Local	オラクル	-	Oracle MySQL の MySQL Server における Server: Connection に関する脆弱性	CWE-noinfo 情報不足	CVE-2016-5443	2016-07-26 10:20	2016-07-19	Show	GitHub Exploit DB Packet Storm

202997	4.9	警告 Network	オラクル	-	Oracle MySQL の MySQL Server における Server: Security: Encryption に関する脆弱性	CWE-noinfo 情報不足	CVE-2016-5442	2016-07-26 10:20	2016-07-19	Show	GitHub Exploit DB Packet Storm

202998	4.9	警告 Network	オラクル	-	Oracle MySQL の MySQL Server における Server: Replication に関する脆弱性	CWE-noinfo 情報不足	CVE-2016-5441	2016-07-26 10:20	2016-07-19	Show	GitHub Exploit DB Packet Storm

202999	4.9	警告 Network	オラクル	-	Oracle MySQL の MySQL Server における Server: Privileges に関する脆弱性	CWE-noinfo 情報不足	CVE-2016-5439	2016-07-26 10:20	2016-07-19	Show	GitHub Exploit DB Packet Storm

203000	4.9	警告 Network	オラクル	-	Oracle MySQL の MySQL Server における Server: Log に関する脆弱性	CWE-noinfo 情報不足	CVE-2016-5437	2016-07-26 10:20	2016-07-19	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 21, 2026, 4:10 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
291261	-	php-fusion	php-fusion	PHP-Fusion before 7.02.06 stores backup files with predictable filenames in an unrestricted directory under the web document root, which might allow remote attackers to obtain sensitive information v…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2013-1807	2024-11-21 10:50	2014-05-1	Show	GitHub Exploit DB Packet Storm

291262	-	php-fusion	php-fusion	Multiple directory traversal vulnerabilities in PHP-Fusion before 7.02.06 allow remote authenticated users to include and execute arbitrary files via a .. (dot dot) in the (1) user_theme parameter to…	CWE-22 Path Traversal	CVE-2013-1806	2024-11-21 10:50	2014-05-1	Show	GitHub Exploit DB Packet Storm

291263	-	php-fusion	php-fusion	Multiple cross-site scripting (XSS) vulnerabilities in PHP-Fusion before 7.02.06 allow remote attackers to inject arbitrary web script or HTML via the (1) highlight parameter to forum/viewthread.php;…	CWE-79 Cross-site Scripting	CVE-2013-1804	2024-11-21 10:50	2014-04-30	Show	GitHub Exploit DB Packet Storm

291264	-	ushahidi	ushahidi_platform	Cross-site scripting (XSS) vulnerability in Ushahidi Platform 2.5.x through 2.6.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.	CWE-79 Cross-site Scripting	CVE-2013-2025	2024-11-21 10:50	2014-04-26	Show	GitHub Exploit DB Packet Storm

291265	-	packagekit_project	packagekit	The Zypper (aka zypp) backend in PackageKit before 0.8.8 allows local users to downgrade packages via the "install updates" method.	CWE-264 Permissions, Privileges, and Access Controls	CVE-2013-1764	2024-11-21 10:50	2014-04-17	Show	GitHub Exploit DB Packet Storm

291266	-	jenkins cloudbees	jenkins	Cross-site scripting (XSS) vulnerability in Jenkins before 1.514, LTS before 1.509.1, and Enterprise 1.466.x before 1.466.14.1 and 1.480.x before 1.480.4.1 allows remote authenticated users with writ…	CWE-79 Cross-site Scripting	CVE-2013-2033	2024-11-21 10:50	2014-04-11	Show	GitHub Exploit DB Packet Storm

291267	-	restful_web_services_project	restful_web_services	The RESTful Web Services (RESTWS) module 7.x-1.x before 7.x-1.3 and 7.x-2.x before 7.x-2.0-alpha5 for Drupal, when page caching is enabled and anonymous users are assigned RESTWS permissions, allows …	CWE-20 Improper Input Validation	CVE-2013-1946	2024-11-21 10:50	2014-04-7	Show	GitHub Exploit DB Packet Storm

291268	-	ganglia	ganglia-web	Cross-site scripting (XSS) vulnerability in views_view.php in Ganglia Web 3.5.7 allows remote attackers to inject arbitrary web script or HTML via the view_name parameter.	CWE-79 Cross-site Scripting	CVE-2013-1770	2024-11-21 10:50	2014-04-3	Show	GitHub Exploit DB Packet Storm

291269	-	redhat	spacewalk-java satellite	CRLF injection vulnerability in spacewalk-java before 2.1.148-1 and Red Hat Network (RHN) Satellite 5.6 allows remote attackers to inject arbitrary HTTP headers, and conduct HTTP response splitting a…	CWE-20 Improper Input Validation	CVE-2013-1869	2024-11-21 10:50	2014-04-1	Show	GitHub Exploit DB Packet Storm

291270	-	owncloud	owncloud	ownCloud before 5.0.6 does not properly check permissions, which allows remote authenticated users to execute arbitrary API commands via unspecified vectors. NOTE: this can be leveraged using CSRF t…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2013-2048	2024-11-21 10:50	2014-03-15	Show	GitHub Exploit DB Packet Storm