Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 30, 2026, 4 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
223421 4.3 警告 オラクル - Oracle E-Business Suite の Oracle Applications Manager における HTML OAM クライアントの処理に関する脆弱性 CWE-noinfo
情報不足
CVE-2013-2396 2013-11-8 16:37 2013-04-16 Show GitHub Exploit DB Packet Storm
223422 6.8 警告 オラクル - Oracle MySQL における Data Manipulation Language の処理に関する脆弱性 CWE-noinfo
情報不足
CVE-2013-2395 2013-11-8 16:36 2013-04-16 Show GitHub Exploit DB Packet Storm
223423 4 警告 MySQL AB
オラクル
- Oracle MySQL における Server Optimizer の処理に関する脆弱性 CWE-noinfo
情報不足
CVE-2013-2392 2013-11-8 16:25 2013-04-16 Show GitHub Exploit DB Packet Storm
223424 3 注意 MySQL AB
オラクル
- Oracle MySQL における Server Install の処理に関する脆弱性 CWE-noinfo
情報不足
CVE-2013-2391 2013-11-8 16:24 2013-04-16 Show GitHub Exploit DB Packet Storm
223425 4.3 警告 オラクル - Oracle Fusion Middleware の Oracle WebLogic Server における WebLogic Console の処理に関する脆弱性 CWE-noinfo
情報不足
CVE-2013-2390 2013-11-8 16:22 2013-04-16 Show GitHub Exploit DB Packet Storm
223426 4 警告 MySQL AB
オラクル
- Oracle MySQL における InnoDB の処理に関する脆弱性 CWE-noinfo
情報不足
CVE-2013-2389 2013-11-8 16:22 2013-04-16 Show GitHub Exploit DB Packet Storm
223427 5 警告 オラクル - Oracle E-Business Suite の Oracle Applications Technology Stack における Mid Tier File Management の処理に関する脆弱性 CWE-noinfo
情報不足
CVE-2013-2388 2013-11-8 16:20 2013-04-16 Show GitHub Exploit DB Packet Storm
223428 3.6 注意 オラクル - Oracle Financial Services Software における BASE の処理に関する脆弱性 CWE-noinfo
情報不足
CVE-2013-2387 2013-11-8 16:20 2013-04-16 Show GitHub Exploit DB Packet Storm
223429 4.9 警告 オラクル - Oracle Financial Services Software における BASE の処理に関する脆弱性 CWE-noinfo
情報不足
CVE-2013-2386 2013-11-8 16:19 2013-04-16 Show GitHub Exploit DB Packet Storm
223430 4 警告 オラクル - Oracle Financial Services Software における BASE の処理に関する脆弱性 CWE-noinfo
情報不足
CVE-2013-2385 2013-11-8 16:18 2013-04-16 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 30, 2026, 4:16 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
277621 5.5 MEDIUM
Local
google android The MessageStatusReceiver service in the AndroidManifest.XML in Android 5.1.1 and earlier allows local users to alter sent/received statuses of SMS and MMS messages without the associated "WRITE_SMS"… CWE-284
Improper Access Control
CVE-2015-3840 2024-11-21 11:29 2017-06-28 Show GitHub Exploit DB Packet Storm
277622 7.8 HIGH
Local
redhat automatic_bug_reporting_tool Automatic Bug Reporting Tool (ABRT) allows local users to read, change the ownership of, or have other unspecified impact on arbitrary files via a symlink attack on (1) /var/tmp/abrt/*/maps, (2) /tmp… CWE-59
Link Following
CVE-2015-3315 2024-11-21 11:29 2017-06-27 Show GitHub Exploit DB Packet Storm
277623 6.5 MEDIUM
Network
apache thrift The client libraries in Apache Thrift before 0.9.3 might allow remote authenticated users to cause a denial of service (infinite recursion) via vectors involving the skip function. CWE-20
 Improper Input Validation 
CVE-2015-3254 2024-11-21 11:29 2017-06-17 Show GitHub Exploit DB Packet Storm
277624 7.5 HIGH
Network
slideshow_project slideshow The SlideshowPluginSlideshowStylesheet::loadStylesheetByAJAX function in the Slideshow plugin 2.2.8 through 2.2.21 for Wordpress allows remote attackers to read arbitrary Wordpress option values. CWE-200
Information Exposure
CVE-2015-3634 2024-11-21 11:29 2017-06-9 Show GitHub Exploit DB Packet Storm
277625 5.3 MEDIUM
Network
markdown-it_project markdown-it markdown-it before 4.1.0 does not block data: URLs. CWE-284
Improper Access Control
CVE-2015-3295 2024-11-21 11:29 2017-06-8 Show GitHub Exploit DB Packet Storm
277626 6.5 MEDIUM
Network
google android The stock Android browser address bar in all Android operating systems suffers from Address Bar Spoofing, which allows remote attackers to trick a victim by displaying a malicious page for legitimate… CWE-20
 Improper Input Validation 
CVE-2015-3830 2024-11-21 11:29 2017-06-7 Show GitHub Exploit DB Packet Storm
277627 8.8 HIGH
Network
genexia drgos The Parental Control panel in Genexis devices with DRGOS before 1.14.1 allows remote authenticated users to execute arbitrary CLI commands via the (1) start_hour, (2) start_minute, (3) end_hour, (4) … CWE-77
Command Injection
CVE-2015-3441 2024-11-21 11:29 2017-01-6 Show GitHub Exploit DB Packet Storm
277628 5.3 MEDIUM
Network
apache tika Apache Tika server (aka tika-server) in Apache Tika 1.9 might allow remote attackers to read arbitrary files via the HTTP fileUrl header. CWE-200
Information Exposure
CVE-2015-3271 2024-11-21 11:29 2016-12-16 Show GitHub Exploit DB Packet Storm
277629 7.5 HIGH
Network
x.org xorg-server The ProcPutImage function in dix/dispatch.c in X.Org Server (aka xserver and xorg-server) before 1.16.4 allows attackers to cause a denial of service (divide-by-zero and crash) via a zero-height PutI… CWE-369
 Divide By Zero
CVE-2015-3418 2024-11-21 11:29 2016-12-14 Show GitHub Exploit DB Packet Storm
277630 7.8 HIGH
Local
linux linux_kernel mm/memory.c in the Linux kernel before 4.1.4 mishandles anonymous pages, which allows local users to gain privileges or cause a denial of service (page tainting) via a crafted application that trigge… CWE-20
 Improper Input Validation 
CVE-2015-3288 2024-11-21 11:29 2016-10-17 Show GitHub Exploit DB Packet Storm