Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 11, 2026, 2 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
203161 7.3 重要
Physics
オラクル - Oracle Retail Applications の Oracle Retail Xstore Payment における Security に関する脆弱性 CWE-noinfo
情報不足
CVE-2016-5539 2016-10-27 11:44 2016-10-18 Show GitHub Exploit DB Packet Storm
203162 3.3
Local
オラクル - Oracle Database Server の RDBMS Security における脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2016-5499 2016-10-27 11:43 2016-10-18 Show GitHub Exploit DB Packet Storm
203163 4.4 警告
Network
オラクル - Oracle MySQL の MySQL Server における Server: Performance Schema に関する脆弱性 CWE-noinfo
情報不足
CVE-2016-8290 2016-10-27 11:25 2016-10-18 Show GitHub Exploit DB Packet Storm
203164 4.7 警告
Local
オラクル - Oracle MySQL の MySQL Server における Server: InnoDB に関する脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2016-8289 2016-10-27 11:25 2016-10-18 Show GitHub Exploit DB Packet Storm
203165 3.1
Network
オラクル - Oracle MySQL の MySQL Server における Server: InnoDB Plugin に関する脆弱性 CWE-Other
その他
CVE-2016-8288 2016-10-27 11:25 2016-10-18 Show GitHub Exploit DB Packet Storm
203166 4.5 警告
Network
オラクル - Oracle MySQL の MySQL Server における Server: Replication に関する脆弱性 CWE-noinfo
情報不足
CVE-2016-8287 2016-10-27 11:25 2016-10-18 Show GitHub Exploit DB Packet Storm
203167 3.1
Network
オラクル - Oracle MySQL の MySQL Server における Server: Security: Privileges に関する脆弱性 CWE-200
情報漏えい
CVE-2016-8286 2016-10-27 11:25 2016-10-18 Show GitHub Exploit DB Packet Storm
203168 1.8
Local
オラクル - Oracle MySQL の MySQL Server における Server: Replication に関する脆弱性 CWE-noinfo
情報不足
CVE-2016-8284 2016-10-27 11:25 2016-10-18 Show GitHub Exploit DB Packet Storm
203169 4.3 警告
Network
オラクル - Oracle MySQL の MySQL Server における Server: Types に関する脆弱性 CWE-noinfo
情報不足
CVE-2016-8283 2016-10-27 11:25 2016-10-18 Show GitHub Exploit DB Packet Storm
203170 4.9 警告
Network
オラクル - Oracle MySQL の MySQL Server における Server: Security: Audit に関する脆弱性 CWE-noinfo
情報不足
CVE-2016-5635 2016-10-27 11:25 2016-10-18 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 11, 2026, 5:13 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
292011 6.1 MEDIUM
Network
redhat subscription_asset_manager Multiple cross-site scripting (XSS) vulnerabilities in the SAM web application in Red Hat katello-headpin allow remote attackers to inject arbitrary web script or HTML via unspecified parameters. CWE-79
Cross-site Scripting
CVE-2014-0029 2024-11-21 11:01 2017-10-16 Show GitHub Exploit DB Packet Storm
292012 9.8 CRITICAL
Network
apache roller The XML-RPC protocol support in Apache Roller before 5.0.3 allows attackers to conduct XML External Entity (XXE) attacks via unspecified vectors. CWE-611
XXE
CVE-2014-0030 2024-11-21 11:01 2017-10-10 Show GitHub Exploit DB Packet Storm
292013 7.8 HIGH
Local
docker docker Docker before 1.5 allows local users to have unspecified impact via vectors involving unsafe /tmp usage. NVD-CWE-noinfo
CVE-2014-0047 2024-11-21 11:01 2017-10-7 Show GitHub Exploit DB Packet Storm
292014 5.3 MEDIUM
Network
apache wicket In Apache Wicket 1.5.10 or 6.13.0, by issuing requests to special urls handled by Wicket, it is possible to check for the existence of particular classes in the classpath and thus check whether a thi… CWE-200
Information Exposure
CVE-2014-0043 2024-11-21 11:01 2017-10-3 Show GitHub Exploit DB Packet Storm
292015 6.1 MEDIUM
Network
redhat satellite Cross-site scripting (XSS) vulnerability in Red Hat Satellite 6.0.3. CWE-79
Cross-site Scripting
CVE-2014-0141 2024-11-21 11:01 2017-08-29 Show GitHub Exploit DB Packet Storm
292016 5.5 MEDIUM
Local
qemu qemu The qcow2_open function in the (block/qcow2.c) in QEMU before 1.7.2 and 2.x before 2.0.0 allows local users to cause a denial of service (NULL pointer dereference) via a crafted image which causes an… CWE-476
 NULL Pointer Dereference
CVE-2014-0146 2024-11-21 11:01 2017-08-11 Show GitHub Exploit DB Packet Storm
292017 7.8 HIGH
Local
qemu qemu Multiple buffer overflows in QEMU before 1.7.2 and 2.x before 2.0.0, allow local users to cause a denial of service (crash) or possibly execute arbitrary code via a large (1) L1 table in the qcow2_sn… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2014-0145 2024-11-21 11:01 2017-08-11 Show GitHub Exploit DB Packet Storm
292018 5.5 MEDIUM
Local
qemu qemu QEMU, possibly before 2.0.0, allows local users to cause a denial of service (divide-by-zero error and crash) via a zero value in the (1) tracks field to the seek_to_sector function in block/parallel… CWE-369
 Divide By Zero
CVE-2014-0142 2024-11-21 11:01 2017-08-11 Show GitHub Exploit DB Packet Storm
292019 7.0 HIGH
Local
redhat
qemu
enterprise_linux
qemu
Multiple integer overflows in the block drivers in QEMU, possibly before 2.0.0, allow local users to cause a denial of service (crash) via a crafted catalog size in (1) the parallels_open function in… CWE-190
 Integer Overflow or Wraparound
CVE-2014-0143 2024-11-21 11:01 2017-08-11 Show GitHub Exploit DB Packet Storm
292020 8.8 HIGH
Network
pivotal_software
vmware
spring_framework When processing user provided XML documents, the Spring Framework 4.0.0 to 4.0.4, 3.0.0 to 3.2.8, and possibly earlier unsupported versions did not disable by default the resolution of URI references… CWE-611
XXE
CVE-2014-0225 2024-11-21 11:01 2017-05-26 Show GitHub Exploit DB Packet Storm