Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 1, 2026, 4:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
223421	4	警告	オラクル	-	Oracle Siebel CRM の Siebel Call Center における Email - COMM Server Components の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2013-2399	2013-11-8 16:41	2013-04-16	Show	GitHub Exploit DB Packet Storm

223422	6	警告	オラクル	-	Oracle Siebel CRM の Siebel UI Framework における Open UI Client の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2013-2398	2013-11-8 16:39	2013-04-16	Show	GitHub Exploit DB Packet Storm

223423	5.5	警告	オラクル	-	Oracle Industry Applications の Oracle Retail Central Office における Customer Operations の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2013-2397	2013-11-8 16:37	2013-04-16	Show	GitHub Exploit DB Packet Storm

223424	4.3	警告	オラクル	-	Oracle E-Business Suite の Oracle Applications Manager における HTML OAM クライアントの処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2013-2396	2013-11-8 16:37	2013-04-16	Show	GitHub Exploit DB Packet Storm

223425	6.8	警告	オラクル	-	Oracle MySQL における Data Manipulation Language の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2013-2395	2013-11-8 16:36	2013-04-16	Show	GitHub Exploit DB Packet Storm

223426	4	警告	MySQL AB オラクル	-	Oracle MySQL における Server Optimizer の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2013-2392	2013-11-8 16:25	2013-04-16	Show	GitHub Exploit DB Packet Storm

223427	3	注意	MySQL AB オラクル	-	Oracle MySQL における Server Install の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2013-2391	2013-11-8 16:24	2013-04-16	Show	GitHub Exploit DB Packet Storm

223428	4.3	警告	オラクル	-	Oracle Fusion Middleware の Oracle WebLogic Server における WebLogic Console の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2013-2390	2013-11-8 16:22	2013-04-16	Show	GitHub Exploit DB Packet Storm

223429	4	警告	MySQL AB オラクル	-	Oracle MySQL における InnoDB の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2013-2389	2013-11-8 16:22	2013-04-16	Show	GitHub Exploit DB Packet Storm

223430	5	警告	オラクル	-	Oracle E-Business Suite の Oracle Applications Technology Stack における Mid Tier File Management の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2013-2388	2013-11-8 16:20	2013-04-16	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 1, 2026, 4:12 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
277591	-	civicrm	civicrm_private_report	Cross-site request forgery (CSRF) vulnerability in the CiviCRM private report module 6.x-1.x before 6.x-1.2 and 7.x-1.x before 7.x-1.3 for Drupal allows remote attackers to hijack the authentication …	CWE-352 Origin Validation Error	CVE-2015-4391	2024-11-21 11:30	2015-06-15	Show	GitHub Exploit DB Packet Storm

277592	-	user_import_project	user_import	Multiple cross-site request forgery (CSRF) vulnerabilities in the User Import module 6.x-4.x before 6.x-4.4 and 7.x-2.x before 7.x-2.3 for Drupal allow remote attackers to hijack the authentication o…	CWE-352 Origin Validation Error	CVE-2015-4390	2024-11-21 11:30	2015-06-15	Show	GitHub Exploit DB Packet Storm

277593	-	open_graph_importer_project	open_graph_importer	The Open Graph Importer (og_tag_importer) 7.x-1.x for Drupal does not properly check the create permission for content types created during import, which allows remote authenticated users to bypass i…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2015-4389	2024-11-21 11:30	2015-06-15	Show	GitHub Exploit DB Packet Storm

277594	-	current_search_links_project	current_search_links	Cross-site scripting (XSS) vulnerability in the Current Search Links module 7.x-1.x before 7.x-1.1 for Drupal, when the "Append the keywords passed by the user to the list" option is disabled, allows…	CWE-79 Cross-site Scripting	CVE-2015-4388	2024-11-21 11:30	2015-06-15	Show	GitHub Exploit DB Packet Storm

277595	-	password_policy_project	password_policy	Cross-site scripting (XSS) vulnerability in unspecified administration pages in the Password Policy module 6.x-1.x before 6.x-1.11 and 7.x-1.x before 7.x-1.11 for Drupal, when a site has a policy tha…	CWE-79 Cross-site Scripting	CVE-2015-4387	2024-11-21 11:30	2015-06-15	Show	GitHub Exploit DB Packet Storm

277596	-	entitybulkdelete_project	entitybulkdelete	Multiple cross-site scripting (XSS) vulnerabilities in unspecified administration pages in the EntityBulkDelete module 7.x-1.0 for Drupal allow remote attackers to inject arbitrary web script or HTML…	CWE-79 Cross-site Scripting	CVE-2015-4386	2024-11-21 11:30	2015-06-15	Show	GitHub Exploit DB Packet Storm

277597	-	imagefield_info_project	imagefield_info	Cross-site scripting (XSS) vulnerability in unspecified administration pages in the Imagefield Info module 7.x-1.x before 7.x-1.2 for Drupal allows remote authenticated users with the "Administer ima…	CWE-79 Cross-site Scripting	CVE-2015-4385	2024-11-21 11:30	2015-06-15	Show	GitHub Exploit DB Packet Storm

277598	-	ubercart_webform_checkout_pane_project	ubercart_webform_checkout_pane	Cross-site scripting (XSS) vulnerability in the Ubercart Webform Checkout Pane module 6.x-3.x before 6.x-3.10 and 7.x-3.x before 7.x-3.11 for Drupal allows remote authenticated users with certain per…	CWE-79 Cross-site Scripting	CVE-2015-4384	2024-11-21 11:30	2015-06-15	Show	GitHub Exploit DB Packet Storm

277599	-	decisions_project	decisions	Cross-site request forgery (CSRF) vulnerability in the Decisions module for Drupal allows remote attackers to hijack the authentication of arbitrary users for requests that remove individual voters v…	CWE-352 Origin Validation Error	CVE-2015-4383	2024-11-21 11:30	2015-06-15	Show	GitHub Exploit DB Packet Storm

277600	-	invoice_project	invoice	Multiple cross-site request forgery (CSRF) vulnerabilities in the Invoice module 6.x-1.x before 6.x-1.2 and 7.x-1.x before 7.x-1.3 for Drupal allow remote attackers to hijack the authentication of ar…	CWE-352 Origin Validation Error	CVE-2015-4382	2024-11-21 11:30	2015-06-15	Show	GitHub Exploit DB Packet Storm