Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 27, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
203261 8.2 重要
Network 		オラクル - Oracle E-Business Suite の Oracle One-to-One Fulfillment における User Interface に関する脆弱性 CWE-284
不適切なアクセス制御 		CVE-2017-3421 2017-02-2 11:55 2017-01-17 Show GitHub Exploit DB Packet Storm
203262 8.2 重要
Network 		オラクル - Oracle E-Business Suite の Oracle CRM Technical Foundation における User Interface に関する脆弱性 CWE-284
不適切なアクセス制御 		CVE-2017-3420 2017-02-2 11:55 2017-01-17 Show GitHub Exploit DB Packet Storm
203263 8.2 重要
Network 		オラクル - Oracle E-Business Suite の Oracle CRM Technical Foundation における User Interface に関する脆弱性 CWE-284
不適切なアクセス制御 		CVE-2017-3419 2017-02-2 11:55 2017-01-17 Show GitHub Exploit DB Packet Storm
203264 8.2 重要
Network 		オラクル - Oracle E-Business Suite の Oracle CRM Technical Foundation における User Interface に関する脆弱性 CWE-284
不適切なアクセス制御 		CVE-2017-3418 2017-02-2 11:54 2017-01-17 Show GitHub Exploit DB Packet Storm
203265 8.2 重要
Network 		オラクル - Oracle E-Business Suite の Oracle Universal Work Queue における User Interface に関する脆弱性 CWE-284
不適切なアクセス制御 		CVE-2017-3417 2017-02-2 11:54 2017-01-17 Show GitHub Exploit DB Packet Storm
203266 8.2 重要
Network 		オラクル - Oracle E-Business Suite の Oracle Universal Work Queue における User Interface に関する脆弱性 CWE-284
不適切なアクセス制御 		CVE-2017-3416 2017-02-2 11:54 2017-01-17 Show GitHub Exploit DB Packet Storm
203267 8.2 重要
Network 		オラクル - Oracle E-Business Suite の Oracle Universal Work Queue における User Interface に関する脆弱性 CWE-284
不適切なアクセス制御 		CVE-2017-3415 2017-02-2 11:54 2017-01-17 Show GitHub Exploit DB Packet Storm
203268 8.2 重要
Network 		オラクル - Oracle E-Business Suite の Oracle Advanced Outbound Telephony における User Interface に関する脆弱性 CWE-284
不適切なアクセス制御 		CVE-2017-3414 2017-02-2 11:54 2017-01-17 Show GitHub Exploit DB Packet Storm
203269 8.2 重要
Network 		オラクル - Oracle E-Business Suite の Oracle Advanced Outbound Telephony における User Interface に関する脆弱性 CWE-284
不適切なアクセス制御 		CVE-2017-3413 2017-02-2 11:54 2017-01-17 Show GitHub Exploit DB Packet Storm
203270 8.2 重要
Network 		オラクル - Oracle E-Business Suite の Oracle Advanced Outbound Telephony における User Interface に関する脆弱性 CWE-284
不適切なアクセス制御 		CVE-2017-3412 2017-02-2 11:54 2017-01-17 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 27, 2026, 4:35 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
211 7.5 HIGH
Network 		- - An unauthenticated directory traversal vulnerability exists in get_fcont.cgi in GeoVision GV-LPC2011 and GV-LPC2211 V1.12 and earlier. The vulnerability is caused by insufficient validation of user-s… New CWE-22
Path Traversal 		CVE-2026-57872 2026-06-27 01:16 2026-06-26 Show GitHub Exploit DB Packet Storm
212 5.3 MEDIUM
Network 		- - Unauthenticated Insecure Direct Object References (IDOR) in GravityView <= 3.0.0 versions. New CWE-639
 Authorization Bypass Through User-Controlled Key 		CVE-2026-57665 2026-06-27 01:16 2026-06-27 Show GitHub Exploit DB Packet Storm
213 4.3 MEDIUM
Network 		- - Unauthenticated Sensitive Data Exposure in Bopo – WooCommerce Product Bundle Builder <= 1.1.6 versions. New CWE-497
 Exposure of Sensitive System Information to an Unauthorized Control Sphere 		CVE-2026-57664 2026-06-27 01:16 2026-06-27 Show GitHub Exploit DB Packet Storm
214 8.8 HIGH
Network 		- - Unauthenticated Cross Site Request Forgery (CSRF) in Paid Memberships Pro - Add Member From Admin <= 0.7.2 versions. New CWE-352
 Origin Validation Error 		CVE-2026-57659 2026-06-27 01:16 2026-06-27 Show GitHub Exploit DB Packet Storm
215 9.1 CRITICAL
Network 		- - Administrator Arbitrary File Upload in TemplateSpare <= 4.2.0 versions. New CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2026-57658 2026-06-27 01:16 2026-06-27 Show GitHub Exploit DB Packet Storm
216 8.5 HIGH
Network 		- - Contributor SQL Injection in WP Job Portal <= 2.5.2 versions. New CWE-89
SQL Injection 		CVE-2026-57653 2026-06-27 01:16 2026-06-27 Show GitHub Exploit DB Packet Storm
217 5.3 MEDIUM
Network 		- - Unauthenticated Insecure Direct Object References (IDOR) in JS Help Desk <= 3.1.0 versions. New CWE-639
 Authorization Bypass Through User-Controlled Key 		CVE-2026-57652 2026-06-27 01:16 2026-06-27 Show GitHub Exploit DB Packet Storm
218 7.5 HIGH
Network 		- - Contributor Local File Inclusion in Panorama Viewer – 360 Degree Image + Video Viewer <= 1.6.1 versions. New CWE-98
 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') 		CVE-2026-57647 2026-06-27 01:16 2026-06-27 Show GitHub Exploit DB Packet Storm
219 5.4 MEDIUM
Network 		- - Subscriber Insecure Direct Object References (IDOR) in Majestic Support <= 1.1.7 versions. New CWE-639
 Authorization Bypass Through User-Controlled Key 		CVE-2026-57646 2026-06-27 01:16 2026-06-27 Show GitHub Exploit DB Packet Storm
220 6.5 MEDIUM
Network 		- - Unauthenticated Cross Site Request Forgery (CSRF) in Real Estate 7 <= 3.5.9 versions. New CWE-352
 Origin Validation Error 		CVE-2026-57641 2026-06-27 01:16 2026-06-27 Show GitHub Exploit DB Packet Storm