Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 7, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
224011	2.1	注意	オラクル	-	Oracle Supply Chain Products Suite の Oracle Agile PLM Framework における Security の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2013-0370	2013-11-8 10:54	2013-01-15	Show	GitHub Exploit DB Packet Storm

224012	5.5	警告	オラクル	-	Oracle PeopleSoft Products の PeopleSoft PeopleTools における Query の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2013-0369	2013-11-8 10:53	2013-01-15	Show	GitHub Exploit DB Packet Storm

224013	4	警告	MySQL AB オラクル	-	Oracle MySQL の MySQL Server における InnoDB の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2013-0368	2013-11-8 10:52	2013-01-15	Show	GitHub Exploit DB Packet Storm

224014	4	警告	MySQL AB オラクル	-	Oracle MySQL の MySQL Server における Server Partition の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2013-0367	2013-11-8 10:51	2013-01-15	Show	GitHub Exploit DB Packet Storm

224015	4	警告	オラクル	-	Oracle Siebel CRM における Security の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2013-0365	2013-11-8 10:48	2013-01-15	Show	GitHub Exploit DB Packet Storm

224016	7.8	危険	オラクル	-	Oracle Database Mobile Server および Oracle Database Lite における脆弱性	CWE-noinfo 情報不足	CVE-2013-0362	2013-11-8 10:44	2013-01-15	Show	GitHub Exploit DB Packet Storm

224017	5	警告	オラクル	-	Oracle Enterprise Manager Grid Control の APM における Business Transaction Management の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2013-0360	2013-11-8 10:43	2013-01-15	Show	GitHub Exploit DB Packet Storm

224018	7.5	危険	オラクル	-	Oracle Enterprise Manager Grid Control の APM における Business Transaction Management の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2013-0359	2013-11-8 10:42	2013-01-15	Show	GitHub Exploit DB Packet Storm

224019	4.3	警告	オラクル	-	複数の Oracle Enterprise Manager 製品における Resource Manager の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2013-0358	2013-11-8 10:41	2013-01-15	Show	GitHub Exploit DB Packet Storm

224020	4.3	警告	オラクル	-	Oracle PeopleSoft Products の PeopleSoft PeopleTools における PIA Core Technology の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2013-0357	2013-11-8 10:40	2013-01-15	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 7, 2026, 4:13 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
277151	-	getlevelten	spotlight	Cross-site scripting (XSS) vulnerability in the Spotlight module 7.x-1.x before 7.x-1.5 for Drupal allows remote authenticated users with certain permissions to inject arbitrary web script or HTML vi…	CWE-79 Cross-site Scripting	CVE-2015-6808	2024-11-21 11:35	2015-09-5	Show	GitHub Exploit DB Packet Storm

277152	-	mass_contact_project	mass_contact	Cross-site scripting (XSS) vulnerability in the Mass Contact module 6.x-1.x before 6.x-1.6 and 7.x-1.x before 7.x-1.1 for Drupal allows remote authenticated users with the "administer mass contact" p…	CWE-79 Cross-site Scripting	CVE-2015-6807	2024-11-21 11:35	2015-09-5	Show	GitHub Exploit DB Packet Storm

277153	-	google	chrome	Google Chrome before 45.0.2454.85 does not display a location bar for a hosted app's window after navigation away from the installation site, which might make it easier for remote attackers to spoof …	CWE-254 7PK - Security Features	CVE-2015-6583	2024-11-21 11:35	2015-09-4	Show	GitHub Exploit DB Packet Storm

277154	-	google	chrome	The decompose function in platform/transforms/TransformationMatrix.cpp in Blink, as used in Google Chrome before 45.0.2454.85, does not verify that a matrix inversion succeeded, which allows remote a…	CWE-254 7PK - Security Features	CVE-2015-6582	2024-11-21 11:35	2015-09-4	Show	GitHub Exploit DB Packet Storm

277155	-	google	chrome	Double free vulnerability in the opj_j2k_copy_default_tcp_and_create_tcd function in j2k.c in OpenJPEG before r3002, as used in PDFium in Google Chrome before 45.0.2454.85, allows remote attackers to…	NVD-CWE-Other	CVE-2015-6581	2024-11-21 11:35	2015-09-4	Show	GitHub Exploit DB Packet Storm

277156	-	google	v8 chrome	Multiple unspecified vulnerabilities in Google V8 before 4.5.103.29, as used in Google Chrome before 45.0.2454.85, allow attackers to cause a denial of service or possibly have other impact via unkno…	NVD-CWE-noinfo	CVE-2015-6580	2024-11-21 11:35	2015-09-4	Show	GitHub Exploit DB Packet Storm

277157	-	webgroupmedia	cerb	Cross-site request forgery (CSRF) vulnerability in ajax.php in Cerb before 7.0.4 allows remote attackers to hijack the authentication of administrators for requests that add an administrator account …	CWE-352 Origin Validation Error	CVE-2015-6545	2024-11-21 11:35	2015-09-4	Show	GitHub Exploit DB Packet Storm

277158	-	xen	xen	The xenmem_add_to_physmap_one function in arch/arm/mm.c in Xen 4.5.x, 4.4.x, and earlier does not limit the number of printk console messages when reporting a failure to retrieve a reference on a for…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2015-6654	2024-11-21 11:35	2015-09-3	Show	GitHub Exploit DB Packet Storm

277159	-	bestpractical	request_tracker	Cross-site scripting (XSS) vulnerability in the cryptography interface in Request Tracker (RT) before 4.2.12 allows remote attackers to inject arbitrary web script or HTML via a crafted public key.	CWE-79 Cross-site Scripting	CVE-2015-6506	2024-11-21 11:35	2015-09-3	Show	GitHub Exploit DB Packet Storm

277160	-	medhabidotcom	mdc_private_message	Cross-site scripting (XSS) vulnerability in the MDC Private Message plugin 1.0.0 for WordPress allows remote authenticated users to inject arbitrary web script or HTML via the message field in a priv…	CWE-79 Cross-site Scripting	CVE-2015-6805	2024-11-21 11:35	2015-09-2	Show	GitHub Exploit DB Packet Storm