Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 19, 2026, 12:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
204141	6.7	警告 Physics	オラクル	-	Oracle Retail Applications の Oracle Retail Xstore Payment における Security に関する脆弱性	CWE-Other その他	CVE-2016-5540	2016-10-28 13:44	2016-10-18	Show	GitHub Exploit DB Packet Storm

204142	5.7	警告 Network	オラクル	-	Oracle Fusion Middleware の Oracle Data Integrator における Code Generation Engine に関する脆弱性	CWE-200 情報漏えい	CVE-2016-5602	2016-10-28 13:42	2016-10-18	Show	GitHub Exploit DB Packet Storm

204143	8.2	重要 Network	オラクル	-	Oracle E-Business Suite の Oracle Customer Interaction History における Result-Reason に関する脆弱性	CWE-Other その他	CVE-2016-5595	2016-10-28 13:41	2016-10-18	Show	GitHub Exploit DB Packet Storm

204144	8.2	重要 Network	オラクル	-	Oracle E-Business Suite の Oracle Customer Interaction History における Outcome-Result に関する脆弱性	CWE-Other その他	CVE-2016-5593	2016-10-28 13:41	2016-10-18	Show	GitHub Exploit DB Packet Storm

204145	8.2	重要 Network	オラクル	-	Oracle E-Business Suite の Oracle Customer Interaction History における Result-Reason に関する脆弱性	CWE-Other その他	CVE-2016-5592	2016-10-28 13:41	2016-10-18	Show	GitHub Exploit DB Packet Storm

204146	8.2	重要 Network	オラクル	-	Oracle E-Business Suite の Oracle Customer Interaction History における Outcome-Result に関する脆弱性	CWE-Other その他	CVE-2016-5591	2016-10-28 13:40	2016-10-18	Show	GitHub Exploit DB Packet Storm

204147	8.2	重要 Network	オラクル	-	Oracle E-Business Suite の Oracle Email Center における Dispatch/Service Call Requests に関する脆弱性	CWE-Other その他	CVE-2016-5586	2016-10-28 13:40	2016-10-18	Show	GitHub Exploit DB Packet Storm

204148	6.5	警告 Network	オラクル	-	Oracle E-Business Suite の Oracle Interaction Center Intelligence における Select Application Dependencies に関する脆弱性	CWE-Other その他	CVE-2016-5585	2016-10-28 13:40	2016-10-18	Show	GitHub Exploit DB Packet Storm

204149	4.3	警告 Network	オラクル	-	Oracle Financial Services Applications の Oracle FLEXCUBE Universal Banking における INFRA に関する脆弱性	CWE-200 情報漏えい	CVE-2016-5603	2016-10-28 13:39	2016-10-18	Show	GitHub Exploit DB Packet Storm

204150	5	警告 Network	オラクル	-	Oracle Financial Services Applications の Oracle FLEXCUBE Universal Banking における INFRA に関する脆弱性	CWE-Other その他	CVE-2016-5594	2016-10-28 13:39	2016-10-18	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 19, 2026, 4:01 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
291771	-	apache adobe	cordova phonegap	Apache Cordova 3.3.0 and earlier and Adobe PhoneGap 2.9.0 and earlier on Windows Phone 7 and 8 do not properly restrict navigation events, which allows remote attackers to bypass intended device-reso…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2014-1884	2024-11-21 11:05	2014-03-3	Show	GitHub Exploit DB Packet Storm

291772	-	adobe	phonegap	Adobe PhoneGap before 2.6.0 on Android uses the shouldOverrideUrlLoading callback instead of the proper shouldInterceptRequest callback, which allows remote attackers to bypass intended device-resour…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2014-1883	2024-11-21 11:05	2014-03-3	Show	GitHub Exploit DB Packet Storm

291773	-	adobe apache	phonegap cordova	Apache Cordova 3.3.0 and earlier and Adobe PhoneGap 2.9.0 and earlier allow remote attackers to bypass intended device-resource restrictions of an event-based bridge via a crafted library clone that …	CWE-264 Permissions, Privileges, and Access Controls	CVE-2014-1882	2024-11-21 11:05	2014-03-3	Show	GitHub Exploit DB Packet Storm

291774	-	apache adobe	cordova phonegap	Apache Cordova 3.3.0 and earlier and Adobe PhoneGap 2.9.0 and earlier allow remote attackers to bypass intended device-resource restrictions of an event-based bridge via a crafted library clone that …	CWE-264 Permissions, Privileges, and Access Controls	CVE-2014-1881	2024-11-21 11:05	2014-03-3	Show	GitHub Exploit DB Packet Storm

291775	-	synology	diskstation_manager	The OpenVPN module in Synology DiskStation Manager (DSM) 4.3-3810 update 1 has a hardcoded root password of synopass, which makes it easier for remote attackers to obtain access via a VPN session.	CWE-255 CWE-200 Credentials Management Information Exposure	CVE-2014-2264	2024-11-21 11:05	2014-03-3	Show	GitHub Exploit DB Packet Storm

291776	-	cmsmadesimple	cms_made_simple	Cross-site scripting (XSS) vulnerability in lib/filemanager/ImageManager/editorFrame.php in CMS Made Simple 1.11.10 allows remote attackers to inject arbitrary web script or HTML via the action param…	CWE-79 Cross-site Scripting	CVE-2014-2092	2024-11-21 11:05	2014-03-3	Show	GitHub Exploit DB Packet Storm

291777	-	atutor	atutor	Cross-site scripting (XSS) vulnerability in mods/_standard/forums/admin/forum_add.php in ATutor 2.1.1 allows remote authenticated administrators to inject arbitrary web script or HTML via the title p…	CWE-79 Cross-site Scripting	CVE-2014-2091	2024-11-21 11:05	2014-03-3	Show	GitHub Exploit DB Packet Storm

291778	-	ilias	ilias	Multiple cross-site scripting (XSS) vulnerabilities in ilias.php in ILIAS 4.4.1 allow remote authenticated users to inject arbitrary web script or HTML via the (1) tar, (2) tar_val, or (3) title para…	CWE-79 Cross-site Scripting	CVE-2014-2090	2024-11-21 11:05	2014-03-3	Show	GitHub Exploit DB Packet Storm

291779	-	ilias	ilias	ILIAS 4.4.1 allows remote attackers to execute arbitrary PHP code via an e-mail attachment that leads to creation of a .php file with a certain client_id pathname.	CWE-94 Code Injection	CVE-2014-2089	2024-11-21 11:05	2014-03-3	Show	GitHub Exploit DB Packet Storm

291780	-	ilias	ilias	Unrestricted file upload vulnerability in ilias.php in ILIAS 4.4.1 allows remote authenticated users to execute arbitrary PHP code by using a .php filename in an upload_files action to the uploadFile…	NVD-CWE-Other	CVE-2014-2088	2024-11-21 11:05	2014-03-3	Show	GitHub Exploit DB Packet Storm