Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 1, 2026, 4:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
224091	5.5	警告	オラクル	-	Oracle Industry Applications の Oracle Retail Invoice Matching における System Administration に関する脆弱性	CWE-noinfo 情報不足	CVE-2013-3814	2013-10-17 17:33	2013-10-15	Show	GitHub Exploit DB Packet Storm

224092	6.8	警告	VideoLAN	-	VideoLAN VLC media player の mp4a packetizer におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2013-4388	2013-10-17 17:19	2013-08-25	Show	GitHub Exploit DB Packet Storm

224093	4.3	警告	オラクル	-	Oracle Fusion Middleware の Oracle Identity Manager における End User Self Service に関する脆弱性	CWE-noinfo 情報不足	CVE-2013-5798	2013-10-17 16:56	2013-10-15	Show	GitHub Exploit DB Packet Storm

224094	4.3	警告	オラクル	-	Oracle Fusion Middleware の Oracle Containers for J2EE における Servlet Runtime に関する脆弱性	CWE-noinfo 情報不足	CVE-2013-5773	2013-10-17 16:50	2013-10-15	Show	GitHub Exploit DB Packet Storm

224095	3.5	注意	オラクル	-	Oracle Fusion Middleware の Oracle Web Cache における ESI/Partial Page Caching に関する脆弱性	CWE-noinfo 情報不足	CVE-2013-3836	2013-10-17 16:49	2013-10-15	Show	GitHub Exploit DB Packet Storm

224096	4.3	警告	オラクル	-	Oracle Fusion Middleware の Oracle Access Manager における Authentication Engine に関する脆弱性	CWE-noinfo 情報不足	CVE-2013-3833	2013-10-17 16:49	2013-10-15	Show	GitHub Exploit DB Packet Storm

224097	5.5	警告	オラクル	-	Oracle Fusion Middleware の Oracle Portal における Demos に関する脆弱性	CWE-noinfo 情報不足	CVE-2013-3831	2013-10-17 16:48	2013-10-15	Show	GitHub Exploit DB Packet Storm

224098	5	警告	オラクル	-	Oracle Fusion Middleware の Oracle Web Services における Test Page に関する脆弱性	CWE-noinfo 情報不足	CVE-2013-3828	2013-10-17 16:48	2013-10-15	Show	GitHub Exploit DB Packet Storm

224099	6.8	警告	シスコシステムズ	-	Cisco NX-OS における権限を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-4121	2013-10-17 10:39	2013-10-8	Show	GitHub Exploit DB Packet Storm

224100	4.3	警告	シスコシステムズ	-	Cisco NX-OS の BGP の実装におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2012-4099	2013-10-17 10:38	2013-10-4	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 1, 2026, 4:12 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
277401	-	janitza	umg_511 umg_509 umg_508 umg_604 umg_605	Janitza UMG 508, 509, 511, 604, and 605 devices allow remote attackers to obtain sensitive network-connection information via a request to UDP port (1) 1234 or (2) 1235.	CWE-200 Information Exposure	CVE-2015-3969	2024-11-21 11:30	2015-10-28	Show	GitHub Exploit DB Packet Storm

277402	-	janitza	umg_511 umg_509 umg_508 umg_604 umg_605	The FTP service on Janitza UMG 508, 509, 511, 604, and 605 devices has a default password, which makes it easier for remote attackers to read or write to files via a session on TCP port 21.	CWE-255 Credentials Management	CVE-2015-3968	2024-11-21 11:30	2015-10-28	Show	GitHub Exploit DB Packet Storm

277403	-	janitza	umg_511 umg_509 umg_508 umg_604 umg_605	Cross-site request forgery (CSRF) vulnerability on Janitza UMG 508, 509, 511, 604, and 605 devices allows remote attackers to hijack the authentication of arbitrary users.	CWE-352 Origin Validation Error	CVE-2015-3967	2024-11-21 11:30	2015-10-28	Show	GitHub Exploit DB Packet Storm

277404	-	afnetworking_project	afnetworking	The default AFSecurityPolicy.validatesDomainName configuration for AFSSLPinningModeNone in the AFNetworking framework before 2.5.3, as used in the ownCloud iOS Library, disables verification of a ser…	CWE-254 7PK - Security Features	CVE-2015-3996	2024-11-21 11:30	2015-10-28	Show	GitHub Exploit DB Packet Storm

277405	-	cisco	telepresence_video_communication_server_software	The process-management implementation in Cisco TelePresence Video Communication Server (VCS) Expressway X8.5.2 allows local users to gain privileges by terminating a firestarter.py supervised process…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2015-4325	2024-11-21 11:30	2015-10-12	Show	GitHub Exploit DB Packet Storm

277406	-	cisco	ucs_b-series_blade_server_software	Cisco Unified Computing System (UCS) B Blade Server Software 2.2.x before 2.2.6 allows local users to cause a denial of service (host OS or BMC hang) by sending crafted packets over the Inter-IC (I2C…	CWE-399 Resource Management Errors	CVE-2015-4265	2024-11-21 11:30	2015-10-12	Show	GitHub Exploit DB Packet Storm

277407	-	google	android	Media Player Framework in Android before 5.1.1 LMY48T allows attackers to gain privileges via a crafted application, aka internal bug 23223325.	CWE-264 Permissions, Privileges, and Access Controls	CVE-2015-3879	2024-11-21 11:30	2015-10-7	Show	GitHub Exploit DB Packet Storm

277408	-	google	android	Media Projection in Android 5.x before 5.1.1 LMY48T and 6.0 before 2015-10-01 allows attackers to bypass an intended screen-recording warning feature and obtain sensitive screen-snapshot information …	CWE-264 Permissions, Privileges, and Access Controls	CVE-2015-3878	2024-11-21 11:30	2015-10-7	Show	GitHub Exploit DB Packet Storm

277409	-	google	android	Skia, as used in Android before 5.1.1 LMY48T, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 20723696.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2015-3877	2024-11-21 11:30	2015-10-7	Show	GitHub Exploit DB Packet Storm

277410	-	mitsubishi_electric	melsec_fx3g	The HTTP application on Mitsubishi Electric MELSEC FX3G PLC devices before April 2015 allows remote attackers to cause a denial of service (device outage) via a long parameter.	CWE-399 Resource Management Errors	CVE-2015-3938	2024-11-21 11:30	2015-10-6	Show	GitHub Exploit DB Packet Storm