Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 2, 2026, 2 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
203601 8.2 重要
Network 		オラクル - Oracle E-Business Suite の Oracle Customer Interaction History における Function Security に関する脆弱性 CWE-noinfo
情報不足 		CVE-2016-3512 2016-07-27 14:30 2016-07-19 Show GitHub Exploit DB Packet Storm
203602 8.2 重要
Network 		オラクル - Oracle E-Business Suite の Oracle CRM Technical Foundation における Wireless Framework に関する脆弱性 CWE-noinfo
情報不足 		CVE-2016-3491 2016-07-27 14:30 2016-07-19 Show GitHub Exploit DB Packet Storm
203603 5.8 警告
Network 		オラクル - Oracle Fusion Middleware の Oracle GlassFish Server における Administration に関する脆弱性 CWE-noinfo
情報不足 		CVE-2016-5477 2016-07-27 14:16 2016-07-19 Show GitHub Exploit DB Packet Storm
203604 5.8 警告
Network 		オラクル - Oracle Fusion Middleware の Oracle GlassFish Server における Administration に関する脆弱性 CWE-noinfo
情報不足 		CVE-2016-3608 2016-07-27 14:16 2016-07-19 Show GitHub Exploit DB Packet Storm
203605 9.8 緊急
Network 		オラクル - Oracle Fusion Middleware の Oracle GlassFish Server における Web Container に関する脆弱性 CWE-noinfo
情報不足 		CVE-2016-3607 2016-07-27 14:16 2016-07-19 Show GitHub Exploit DB Packet Storm
203606 9.8 緊急
Network 		オラクル - Oracle Fusion Middleware の Oracle WebLogic Server における WLS Core Components に関する脆弱性 CWE-noinfo
情報不足 		CVE-2016-3586 2016-07-27 14:16 2016-07-19 Show GitHub Exploit DB Packet Storm
203607 8.1 重要
Network 		オラクル - Oracle Fusion Middleware の Oracle TopLink における JPA-RS に関する脆弱性 CWE-noinfo
情報不足 		CVE-2016-3564 2016-07-27 14:15 2016-07-19 Show GitHub Exploit DB Packet Storm
203608 7.6 重要
Network 		オラクル - Oracle Fusion Middleware の Oracle Business Intelligence Enterprise Edition における Analytics Web General に関する脆弱性 CWE-noinfo
情報不足 		CVE-2016-3544 2016-07-27 14:15 2016-07-19 Show GitHub Exploit DB Packet Storm
203609 8.1 重要
Local 		オラクル - Oracle Java SE における Install に関する脆弱性 CWE-noinfo
情報不足 		CVE-2016-3552 2016-07-27 10:59 2016-07-19 Show GitHub Exploit DB Packet Storm
203610 7.7 重要
Local 		オラクル - Oracle Java SE における Deployment に関する脆弱性 CWE-noinfo
情報不足 		CVE-2016-3511 2016-07-27 10:59 2016-07-19 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 2, 2026, 4:18 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
291401 - s9y serendipity Cross-site scripting (XSS) vulnerability in serendipity_admin_image_selector.php in Serendipity 1.6.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the serendipity[ht… CWE-79
Cross-site Scripting 		CVE-2013-5314 2024-11-21 10:57 2013-08-20 Show GitHub Exploit DB Packet Storm
291402 - bigtreecms bigtree_cms Cross-site request forgery (CSRF) vulnerability in core/admin/modules/users/update.php in BigTree CMS 4.0 RC2 and earlier allows remote attackers to hijack the authentication of administrators for re… CWE-352
 Origin Validation Error 		CVE-2013-5313 2024-11-21 10:57 2013-08-20 Show GitHub Exploit DB Packet Storm
291403 - vastal phpvid Multiple cross-site scripting (XSS) vulnerabilities in Vastal I-Tech phpVID 1.2.3 allow remote attackers to inject arbitrary web script or HTML via the (1) n parameter to browse_videos.php or the (2)… CWE-79
Cross-site Scripting 		CVE-2013-5312 2024-11-21 10:57 2013-08-20 Show GitHub Exploit DB Packet Storm
291404 - vastal phpvid Multiple SQL injection vulnerabilities in Vastal I-Tech phpVID 1.2.3 allow remote attackers to execute arbitrary SQL commands via the "n" parameter to (1) browse_videos.php or (2) members.php. NOTE:… CWE-89
SQL Injection 		CVE-2013-5311 2024-11-21 10:57 2013-08-20 Show GitHub Exploit DB Packet Storm
291405 - mauro_lorenzutti wfqbe SQL injection vulnerability in the DB Integration (wfqbe) extension before 2.0.1 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. CWE-89
SQL Injection 		CVE-2013-5310 2024-11-21 10:57 2013-08-17 Show GitHub Exploit DB Packet Storm
291406 - ilia_alshanetsky
fudforum 		fudforum Cross-site scripting (XSS) vulnerability in install/forum_data/src/custom_fields.inc.t in FUDforum 3.0.4.1 and earlier, when registering a new user, allows remote attackers to inject arbitrary web sc… CWE-79
Cross-site Scripting 		CVE-2013-5309 2024-11-21 10:57 2013-08-17 Show GitHub Exploit DB Packet Storm
291407 - juralsulek realurlmanagement Cross-site scripting (XSS) vulnerability in the RealURL Management (realurlmanagement) extension 0.3.4 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspeci… CWE-79
Cross-site Scripting 		CVE-2013-5308 2024-11-21 10:57 2013-08-17 Show GitHub Exploit DB Packet Storm
291408 - kennziffer ke_search Cross-site scripting (XSS) vulnerability in the Faceted Search (ke_search) extension before 1.4.1 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. CWE-79
Cross-site Scripting 		CVE-2013-5307 2024-11-21 10:57 2013-08-17 Show GitHub Exploit DB Packet Storm
291409 - die-netzmacher browser SQL injection vulnerability in the Browser - TYPO3 without PHP (browser) extension before 4.5.5 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. CWE-89
SQL Injection 		CVE-2013-5306 2024-11-21 10:57 2013-08-17 Show GitHub Exploit DB Packet Storm
291410 - joachim_ruhs locator Cross-site scripting (XSS) vulnerability in the Store Locator (locator) extension before 3.1.5 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. CWE-79
Cross-site Scripting 		CVE-2013-5305 2024-11-21 10:57 2013-08-17 Show GitHub Exploit DB Packet Storm