Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 23, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
204971 6.7 警告
Physics 		オラクル - Oracle Retail Applications の Oracle Retail Xstore Payment における Security に関する脆弱性 CWE-Other
その他 		CVE-2016-5540 2016-10-28 13:44 2016-10-18 Show GitHub Exploit DB Packet Storm
204972 5.7 警告
Network 		オラクル - Oracle Fusion Middleware の Oracle Data Integrator における Code Generation Engine に関する脆弱性 CWE-200
情報漏えい 		CVE-2016-5602 2016-10-28 13:42 2016-10-18 Show GitHub Exploit DB Packet Storm
204973 8.2 重要
Network 		オラクル - Oracle E-Business Suite の Oracle Customer Interaction History における Result-Reason に関する脆弱性 CWE-Other
その他 		CVE-2016-5595 2016-10-28 13:41 2016-10-18 Show GitHub Exploit DB Packet Storm
204974 8.2 重要
Network 		オラクル - Oracle E-Business Suite の Oracle Customer Interaction History における Outcome-Result に関する脆弱性 CWE-Other
その他 		CVE-2016-5593 2016-10-28 13:41 2016-10-18 Show GitHub Exploit DB Packet Storm
204975 8.2 重要
Network 		オラクル - Oracle E-Business Suite の Oracle Customer Interaction History における Result-Reason に関する脆弱性 CWE-Other
その他 		CVE-2016-5592 2016-10-28 13:41 2016-10-18 Show GitHub Exploit DB Packet Storm
204976 8.2 重要
Network 		オラクル - Oracle E-Business Suite の Oracle Customer Interaction History における Outcome-Result に関する脆弱性 CWE-Other
その他 		CVE-2016-5591 2016-10-28 13:40 2016-10-18 Show GitHub Exploit DB Packet Storm
204977 8.2 重要
Network 		オラクル - Oracle E-Business Suite の Oracle Email Center における Dispatch/Service Call Requests に関する脆弱性 CWE-Other
その他 		CVE-2016-5586 2016-10-28 13:40 2016-10-18 Show GitHub Exploit DB Packet Storm
204978 6.5 警告
Network 		オラクル - Oracle E-Business Suite の Oracle Interaction Center Intelligence における Select Application Dependencies に関する脆弱性 CWE-Other
その他 		CVE-2016-5585 2016-10-28 13:40 2016-10-18 Show GitHub Exploit DB Packet Storm
204979 4.3 警告
Network 		オラクル - Oracle Financial Services Applications の Oracle FLEXCUBE Universal Banking における INFRA に関する脆弱性 CWE-200
情報漏えい 		CVE-2016-5603 2016-10-28 13:39 2016-10-18 Show GitHub Exploit DB Packet Storm
204980 5 警告
Network 		オラクル - Oracle Financial Services Applications の Oracle FLEXCUBE Universal Banking における INFRA に関する脆弱性 CWE-Other
その他 		CVE-2016-5594 2016-10-28 13:39 2016-10-18 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 24, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
290641 - ibm rational_rhapsody_design_manager
rational_engineering_lifecycle_manager
rational_software_architect_design_manager 		Cross-site request forgery (CSRF) vulnerability in IBM Configuration Management Application (aka VVC) in IBM Rational Engineering Lifecycle Manager before 4.0.7 and 5.x before 5.0.1, Rational Softwar… CWE-352
 Origin Validation Error 		CVE-2014-3037 2024-11-21 11:07 2014-09-10 Show GitHub Exploit DB Packet Storm
290642 - exim exim expand.c in Exim before 4.83 expands mathematical comparisons twice, which allows local users to gain privileges and execute arbitrary commands via a crafted lookup value. CWE-189
Numeric Errors 		CVE-2014-2972 2024-11-21 11:07 2014-09-5 Show GitHub Exploit DB Packet Storm
290643 - exim exim The dmarc_process function in dmarc.c in Exim before 4.82.1, when EXPERIMENTAL_DMARC is enabled, allows remote attackers to execute arbitrary code via the From header in an email, which is passed to … CWE-20
 Improper Input Validation  		CVE-2014-2957 2024-11-21 11:07 2014-09-5 Show GitHub Exploit DB Packet Storm
290644 - cisco ios_xr Cisco IOS XR 4.3(.2) and earlier, as used in Cisco Carrier Routing System (CRS), allows remote attackers to cause a denial of service (CPU consumption and IPv6 packet drops) via a malformed IPv6 pack… CWE-399
 Resource Management Errors 		CVE-2014-3353 2024-11-21 11:07 2014-09-4 Show GitHub Exploit DB Packet Storm
290645 - ibm db2 The SQL engine in IBM DB2 9.5 through FP10, 9.7 through FP9a, 9.8 through FP5, 10.1 through FP4, and 10.5 before FP4 on Linux, UNIX, and Windows allows remote authenticated users to cause a denial of… CWE-20
 Improper Input Validation  		CVE-2014-3095 2024-11-21 11:07 2014-09-4 Show GitHub Exploit DB Packet Storm
290646 - ibm db2 Stack-based buffer overflow in IBM DB2 9.7 through FP9a, 9.8 through FP5, 10.1 through FP4, and 10.5 before FP4 on Linux, UNIX, and Windows allows remote authenticated users to execute arbitrary code… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2014-3094 2024-11-21 11:07 2014-09-4 Show GitHub Exploit DB Packet Storm
290647 - ibm websphere_application_server
business_process_manager 		Cross-site scripting (XSS) vulnerability in IBM Business Process Manager (BPM) 7.5.x through 8.5.5 and WebSphere Lombardi Edition 7.2.0.x allows remote authenticated users to inject arbitrary web scr… CWE-79
Cross-site Scripting 		CVE-2014-3075 2024-11-21 11:07 2014-09-4 Show GitHub Exploit DB Packet Storm
290648 - cisco cloud_portal Cisco Intelligent Automation for Cloud (aka Cisco Cloud Portal) 2008.3_SP9 and earlier does not properly consider whether a session is a problematic NULL session, which allows remote attackers to obt… CWE-20
 Improper Input Validation  		CVE-2014-3352 2024-11-21 11:07 2014-08-30 Show GitHub Exploit DB Packet Storm
290649 - cisco cloud_portal Cisco Intelligent Automation for Cloud (aka Cisco Cloud Portal) does not properly consider whether a session is a problematic NULL session, which allows remote attackers to obtain sensitive informati… CWE-200
Information Exposure 		CVE-2014-3351 2024-11-21 11:07 2014-08-29 Show GitHub Exploit DB Packet Storm
290650 - cisco cloud_portal Cisco Intelligent Automation for Cloud (aka Cisco Cloud Portal) does not properly implement URL redirection, which allows remote authenticated users to obtain sensitive information via a crafted URL,… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2014-3350 2024-11-21 11:07 2014-08-29 Show GitHub Exploit DB Packet Storm