Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 2, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
223421	4	警告	オラクル	-	Oracle Siebel CRM の Siebel Call Center における Email - COMM Server Components の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2013-2399	2013-11-8 16:41	2013-04-16	Show	GitHub Exploit DB Packet Storm

223422	6	警告	オラクル	-	Oracle Siebel CRM の Siebel UI Framework における Open UI Client の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2013-2398	2013-11-8 16:39	2013-04-16	Show	GitHub Exploit DB Packet Storm

223423	5.5	警告	オラクル	-	Oracle Industry Applications の Oracle Retail Central Office における Customer Operations の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2013-2397	2013-11-8 16:37	2013-04-16	Show	GitHub Exploit DB Packet Storm

223424	4.3	警告	オラクル	-	Oracle E-Business Suite の Oracle Applications Manager における HTML OAM クライアントの処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2013-2396	2013-11-8 16:37	2013-04-16	Show	GitHub Exploit DB Packet Storm

223425	6.8	警告	オラクル	-	Oracle MySQL における Data Manipulation Language の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2013-2395	2013-11-8 16:36	2013-04-16	Show	GitHub Exploit DB Packet Storm

223426	4	警告	MySQL AB オラクル	-	Oracle MySQL における Server Optimizer の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2013-2392	2013-11-8 16:25	2013-04-16	Show	GitHub Exploit DB Packet Storm

223427	3	注意	MySQL AB オラクル	-	Oracle MySQL における Server Install の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2013-2391	2013-11-8 16:24	2013-04-16	Show	GitHub Exploit DB Packet Storm

223428	4.3	警告	オラクル	-	Oracle Fusion Middleware の Oracle WebLogic Server における WebLogic Console の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2013-2390	2013-11-8 16:22	2013-04-16	Show	GitHub Exploit DB Packet Storm

223429	4	警告	MySQL AB オラクル	-	Oracle MySQL における InnoDB の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2013-2389	2013-11-8 16:22	2013-04-16	Show	GitHub Exploit DB Packet Storm

223430	5	警告	オラクル	-	Oracle E-Business Suite の Oracle Applications Technology Stack における Mid Tier File Management の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2013-2388	2013-11-8 16:20	2013-04-16	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 3, 2026, 4:18 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
277981	-	redhat	ansible	Ansible before 1.9.2 does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle …	CWE-345 Insufficient Verification of Data Authenticity	CVE-2015-3908	2024-11-21 11:30	2015-08-12	Show	GitHub Exploit DB Packet Storm

277982	-	debian linux canonical	debian_linux linux_kernel ubuntu_linux	The udf_read_inode function in fs/udf/inode.c in the Linux kernel before 3.19.1 does not validate certain length values, which allows local users to cause a denial of service (incorrect data represen…	CWE-189 Numeric Errors	CVE-2015-4167	2024-11-21 11:30	2015-08-6	Show	GitHub Exploit DB Packet Storm

277983	-	windriver	vxworks	Wind River VxWorks before 5.5.1, 6.5.x through 6.7.x before 6.7.1.1, 6.8.x before 6.8.3, 6.9.x before 6.9.4.4, and 7.x before 7 ipnet_coreip 1.2.2.0, as used on Schneider Electric SAGE RTU devices be…	CWE-330 Use of Insufficiently Random Values	CVE-2015-3963	2024-11-21 11:30	2015-08-4	Show	GitHub Exploit DB Packet Storm

277984	-	garrettcom	magnum_6k_firmware magnum_10k_firmware	The web-server component in MNS before 4.5.6 on Belden GarrettCom Magnum 6K and Magnum 10K switches allows remote authenticated users to cause a denial of service (memory corruption and reboot) via a…	CWE-399 Resource Management Errors	CVE-2015-3961	2024-11-21 11:30	2015-08-4	Show	GitHub Exploit DB Packet Storm

277985	-	garrettcom	magnum_6k_firmware magnum_10k_firmware	The firmware in MNS before 4.5.6 on Belden GarrettCom Magnum 6K and Magnum 10K switches uses hardcoded RSA private keys and certificates across different customers' installations, which makes it easi…	CWE-310 Cryptographic Issues	CVE-2015-3960	2024-11-21 11:30	2015-08-4	Show	GitHub Exploit DB Packet Storm

277986	-	garrettcom	magnum_6k_firmware magnum_10k_firmware	The firmware in MNS before 4.5.6 on Belden GarrettCom Magnum 6K and Magnum 10K switches has a hardcoded serial-console password for a privileged account, which might allow physically proximate attack…	NVD-CWE-Other	CVE-2015-3959	2024-11-21 11:30	2015-08-4	Show	GitHub Exploit DB Packet Storm

277987	-	garrettcom	magnum_6k_firmware magnum_10k_firmware	Multiple cross-site scripting (XSS) vulnerabilities in the web-server component in MNS before 4.5.6 on Belden GarrettCom Magnum 6K and Magnum 10K switches allow remote attackers to inject arbitrary w…	CWE-79 Cross-site Scripting	CVE-2015-3942	2024-11-21 11:30	2015-08-4	Show	GitHub Exploit DB Packet Storm

277988	-	schneider-electric	wonderware_system_platform_2014	Untrusted search path vulnerability in Schneider Electric Wonderware System Platform before 2014 R2 Patch 01 allows local users to gain privileges via a Trojan horse DLL in an unspecified directory.	CWE-22 Path Traversal	CVE-2015-3940	2024-11-21 11:30	2015-08-4	Show	GitHub Exploit DB Packet Storm

277989	-	cisco	unified_communications_manager	The Prime Collaboration Deployment component in Cisco Unified Communications Manager 10.5(3.10000.9) allows remote authenticated users to discover root credentials via a direct request to an unspecif…	CWE-200 Information Exposure	CVE-2015-4295	2024-11-21 11:30	2015-08-1	Show	GitHub Exploit DB Packet Storm

277990	-	cisco	unified_communications_manager_im_and_presence_service	Cross-site scripting (XSS) vulnerability in Cisco IM and Presence Service before 10.5 MR1 allows remote attackers to inject arbitrary web script or HTML by constructing a crafted URL that leverages i…	CWE-79 Cross-site Scripting	CVE-2015-4294	2024-11-21 11:30	2015-08-1	Show	GitHub Exploit DB Packet Storm