Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 4, 2026, 4 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
222521 4 警告 オラクル - Oracle E-Business Suite の Oracle Applications Framework における Attachments に関する脆弱性 CWE-noinfo
情報不足
CVE-2014-0366 2014-01-16 14:13 2014-01-14 Show GitHub Exploit DB Packet Storm
222522 2.8 注意 オラクル - Oracle Siebel CRM の Siebel Life Sciences における Clinical Trip Report に関する脆弱性 CWE-noinfo
情報不足
CVE-2014-0370 2014-01-16 14:06 2014-01-14 Show GitHub Exploit DB Packet Storm
222523 5 警告 オラクル - Oracle Siebel CRM の Siebel Core - EAI における Java Integration に関する脆弱性 CWE-noinfo
情報不足
CVE-2014-0369 2014-01-16 14:05 2014-01-14 Show GitHub Exploit DB Packet Storm
222524 4.3 警告 オラクル - Oracle iLearning における Learner Pages に関する脆弱性 CWE-noinfo
情報不足
CVE-2014-0389 2014-01-16 13:49 2014-01-14 Show GitHub Exploit DB Packet Storm
222525 4.3 警告 オラクル - Oracle Sun Solaris における Java Web Console に関する脆弱性 CWE-noinfo
情報不足
CVE-2014-0390 2014-01-16 13:36 2014-01-14 Show GitHub Exploit DB Packet Storm
222526 4 警告 オラクル - Oracle MySQL の MySQL Server における InnoDB に関する脆弱性 CWE-noinfo
情報不足
CVE-2013-5894 2014-01-16 11:58 2014-01-14 Show GitHub Exploit DB Packet Storm
222527 7.2 危険 マイクロソフト - Microsoft Windows 7 および Windows Server 2008 R2 のカーネルモードドライバの win32k.sys における権限昇格の脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2014-0262 2014-01-16 11:50 2014-01-14 Show GitHub Exploit DB Packet Storm
222528 4 警告 マイクロソフト - Microsoft Dynamics AX におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2014-0261 2014-01-16 11:49 2014-01-14 Show GitHub Exploit DB Packet Storm
222529 9.3 危険 マイクロソフト - 複数の Microsoft 製品における任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2014-0260 2014-01-16 11:48 2014-01-14 Show GitHub Exploit DB Packet Storm
222530 9.3 危険 マイクロソフト - Microsoft Word 2007 および Office 互換機能パックにおける任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2014-0259 2014-01-16 11:48 2014-01-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 5, 2026, 4:11 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
268441 7.5 HIGH
Network
osram lightify_pro OSRAM SYLVANIA Osram Lightify Pro through 2016-07-26 allows Zigbee replay. CWE-284
Improper Access Control
CVE-2016-5058 2024-11-21 11:53 2017-04-10 Show GitHub Exploit DB Packet Storm
268442 7.5 HIGH
Network
osram lightify_pro OSRAM SYLVANIA Osram Lightify Pro through 2016-07-26 does not use SSL pinning. CWE-254
 7PK - Security Features
CVE-2016-5057 2024-11-21 11:53 2017-04-10 Show GitHub Exploit DB Packet Storm
268443 7.5 HIGH
Network
osram lightify_pro OSRAM SYLVANIA Osram Lightify Pro before 2016-07-26 uses only 8 hex digits for a PSK. CWE-326
Inadequate Encryption Strength
CVE-2016-5056 2024-11-21 11:53 2017-04-10 Show GitHub Exploit DB Packet Storm
268444 6.1 MEDIUM
Network
osram lightify_pro OSRAM SYLVANIA Osram Lightify Pro before 2016-07-26 has XSS in the username field and Wireless Client Mode configuration page. CWE-79
Cross-site Scripting
CVE-2016-5055 2024-11-21 11:53 2017-04-10 Show GitHub Exploit DB Packet Storm
268445 7.5 HIGH
Network
osram lightify_home OSRAM SYLVANIA Osram Lightify Home through 2016-07-26 allows Zigbee replay. CWE-284
Improper Access Control
CVE-2016-5054 2024-11-21 11:53 2017-04-10 Show GitHub Exploit DB Packet Storm
268446 9.8 CRITICAL
Network
osram lightify_home OSRAM SYLVANIA Osram Lightify Home before 2016-07-26 allows remote attackers to execute arbitrary commands via TCP port 4000. CWE-306
Missing Authentication for Critical Function
CVE-2016-5053 2024-11-21 11:53 2017-04-10 Show GitHub Exploit DB Packet Storm
268447 7.5 HIGH
Network
osram lightify_home OSRAM SYLVANIA Osram Lightify Home through 2016-07-26 does not use SSL pinning. CWE-254
 7PK - Security Features
CVE-2016-5052 2024-11-21 11:53 2017-04-10 Show GitHub Exploit DB Packet Storm
268448 7.5 HIGH
Network
osram lightify_home OSRAM SYLVANIA Osram Lightify Home before 2016-07-26 stores a PSK in cleartext under /private/var/mobile/Containers/Data/Application. CWE-200
Information Exposure
CVE-2016-5051 2024-11-21 11:53 2017-04-10 Show GitHub Exploit DB Packet Storm
268449 5.5 MEDIUM
Local
apache ambari Apache Ambari 2.x before 2.4.0 includes KDC administrator passwords on the kadmin command line, which allows local users to obtain sensitive information via a process listing. CWE-200
Information Exposure
CVE-2016-4976 2024-11-21 11:53 2017-03-30 Show GitHub Exploit DB Packet Storm
268450 7.5 HIGH
Network
openslp openslp The _xrealloc function in xlsp_xmalloc.c in OpenSLP 2.0.0 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a large number of crafted packets, which trigge… CWE-476
 NULL Pointer Dereference
CVE-2016-4912 2024-11-21 11:53 2017-03-28 Show GitHub Exploit DB Packet Storm