Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 20, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
204261	5.3	警告 Network	オラクル	-	Oracle Supply Chain Products Suite の Oracle Agile PLM における Folders, Files & Attachments に関する脆弱性	CWE-200 情報漏えい	CVE-2016-5510	2016-10-26 14:20	2016-10-18	Show	GitHub Exploit DB Packet Storm

204262	3.3	低 Local	オラクル	-	Oracle Sun Solaris Cluster における Cluster Geo に関する脆弱性	CWE-200 情報漏えい	CVE-2016-5508	2016-10-26 14:17	2016-10-18	Show	GitHub Exploit DB Packet Storm

204263	4.9	警告 Network	オラクル	-	Oracle MySQL の MySQL Server における Server: InnoDB に関する脆弱性	CWE-noinfo 情報不足	CVE-2016-5507	2016-10-26 14:16	2016-10-18	Show	GitHub Exploit DB Packet Storm

204264	5.5	警告 Local	オラクル	-	Oracle Database Server の RDBMS Programmable Interface における脆弱性	CWE-200 情報漏えい	CVE-2016-5505	2016-10-26 14:16	2016-10-18	Show	GitHub Exploit DB Packet Storm

204265	4.1	警告 Local	オラクル	-	Oracle Supply Chain Products Suite の Oracle Agile Product Lifecycle Management for Process における Supplier Portal に関する脆弱性	CWE-200 情報漏えい	CVE-2016-5504	2016-10-26 14:16	2016-10-18	Show	GitHub Exploit DB Packet Storm

204266	8.2	重要 Local	オラクル	-	Oracle Sun Systems Products Suite の Sun ZFS Storage Appliance Kit (AK) における Core Services に関する脆弱性	CWE-noinfo 情報不足	CVE-2016-5503	2016-10-26 14:13	2016-10-18	Show	GitHub Exploit DB Packet Storm

204267	5.4	警告 Network	オラクル	-	Oracle Financial Services Applications の Oracle FLEXCUBE Universal Banking における INFRA に関する脆弱性	CWE-Other その他	CVE-2016-5502	2016-10-26 14:12	2016-10-18	Show	GitHub Exploit DB Packet Storm

204268	7.8	重要 Local	オラクル	-	Oracle Virtualization の Oracle VM VirtualBox における Core に関する脆弱性	CWE-noinfo 情報不足	CVE-2016-5501	2016-10-26 14:11	2016-10-18	Show	GitHub Exploit DB Packet Storm

204269	3.3	低 Local	オラクル	-	Oracle Database Server の RDBMS Security における脆弱性	CWE-200 情報漏えい	CVE-2016-5498	2016-10-26 14:10	2016-10-18	Show	GitHub Exploit DB Packet Storm

204270	3.3	低 Local	オラクル	-	Oracle Financial Services Applications の Oracle FLEXCUBE Universal Banking における INFRA に関する脆弱性	CWE-noinfo 情報不足	CVE-2016-5490	2016-10-26 14:06	2016-10-18	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 20, 2026, 4:01 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
291341	-	lightwitch prosody	metronome prosody	plugins/mod_compression.lua in (1) Prosody before 0.9.4 and (2) Lightwitch Metronome through 3.4 negotiates stream compression while a session is unauthenticated, which allows remote attackers to cau…	CWE-20 Improper Input Validation	CVE-2014-2744	2024-11-21 11:06	2014-04-11	Show	GitHub Exploit DB Packet Storm

291342	-	lightwitch	metronome	plugins/mod_compression.lua in Lightwitch Metronome through 3.4 does not properly restrict the processing of compressed XML elements, which allows remote attackers to cause a denial of service (resou…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2014-2743	2024-11-21 11:06	2014-04-11	Show	GitHub Exploit DB Packet Storm

291343	-	isode	m-link	Isode M-Link before 16.0v7 does not properly restrict the processing of compressed XML elements, which allows remote attackers to cause a denial of service (resource consumption) via a crafted XMPP s…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2014-2742	2024-11-21 11:06	2014-04-11	Show	GitHub Exploit DB Packet Storm

291344	-	igniterealtime	openfire	nio/XMLLightweightParser.java in Ignite Realtime Openfire before 3.9.2 does not properly restrict the processing of compressed XML elements, which allows remote attackers to cause a denial of service…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2014-2741	2024-11-21 11:06	2014-04-11	Show	GitHub Exploit DB Packet Storm

291345	-	sap	business_object_processing_framework_for_abap	SAP Business Object Processing Framework (BOPF) for ABAP has hardcoded credentials, which makes it easier for remote attackers to obtain access via unspecified vectors.	CWE-255 Credentials Management	CVE-2014-2752	2024-11-21 11:06	2014-04-11	Show	GitHub Exploit DB Packet Storm

291346	-	sap	print_and_output_management	SAP Print and Output Management has hardcoded credentials, which makes it easier for remote attackers to obtain access via unspecified vectors.	CWE-255 Credentials Management	CVE-2014-2751	2024-11-21 11:06	2014-04-11	Show	GitHub Exploit DB Packet Storm

291347	-	sap	hana	The HANA ICM process in SAP HANA allows remote attackers to obtain the platform version, host name, instance number, and possibly other sensitive information via a malformed HTTP GET request.	CWE-200 Information Exposure	CVE-2014-2749	2024-11-21 11:06	2014-04-11	Show	GitHub Exploit DB Packet Storm

291348	-	sap	enhancement_package	The Security Audit Log facility in SAP Enhancement Package (EHP) 6 for SAP ERP 6.0 allows remote attackers to modify or delete arbitrary log classes via unspecified vectors. NOTE: some of these deta…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2014-2748	2024-11-21 11:06	2014-04-11	Show	GitHub Exploit DB Packet Storm

291349	-	cacti	cacti	Multiple SQL injection vulnerabilities in graph_xport.php in Cacti 0.8.7g, 0.8.8b, and earlier allow remote attackers to execute arbitrary SQL commands via the (1) graph_start, (2) graph_end, (3) gra…	CWE-89 SQL Injection	CVE-2014-2708	2024-11-21 11:06	2014-04-11	Show	GitHub Exploit DB Packet Storm

291350	-	linux-pam	linux-pam	Multiple directory traversal vulnerabilities in pam_timestamp.c in the pam_timestamp module for Linux-PAM (aka pam) 1.1.8 allow local users to create arbitrary files or possibly bypass authentication…	CWE-22 Path Traversal	CVE-2014-2583	2024-11-21 11:06	2014-04-11	Show	GitHub Exploit DB Packet Storm