Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":July 1, 2026, 4:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
227731	3.6	注意	オラクル	-	Oracle Sun Solaris 8、9、10、および 11 における Utility/pax の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2013-0412	2013-11-8 11:46	2013-04-16	Show	GitHub Exploit DB Packet Storm

227732	5.9	警告	オラクル	-	Oracle Sun Solaris 8、9、および 10 における RBAC Configuration の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2013-0411	2013-11-8 11:45	2013-04-16	Show	GitHub Exploit DB Packet Storm

227733	4.3	警告	オラクル	-	Oracle Supply Chain Products Suite の Agile EDM における Base Component - Common Objects の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2013-0410	2013-11-8 11:44	2013-04-16	Show	GitHub Exploit DB Packet Storm

227734	5	警告	オラクル	-	Oracle Sun Solaris 10 における CPU パフォーマンスカウンターデバイスの処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2013-0408	2013-11-8 11:43	2013-04-16	Show	GitHub Exploit DB Packet Storm

227735	4.6	警告	オラクル	-	Oracle Sun Solaris 10 および 11 における Kernel/DTrace Framework の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2013-0407	2013-11-8 11:42	2013-01-15	Show	GitHub Exploit DB Packet Storm

227736	4.3	警告	オラクル	-	Oracle Sun Solaris 10 における Kernel/IPsec の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2013-0406	2013-11-8 11:41	2013-04-16	Show	GitHub Exploit DB Packet Storm

227737	6.4	警告	オラクル	-	Oracle Sun Solaris 8、9、10、および 11 における NFS クライアントマウントおよび IPv6 の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2013-0405	2013-11-8 11:40	2013-04-16	Show	GitHub Exploit DB Packet Storm

227738	3.7	注意	オラクル	-	Oracle Sun Solaris 10 における Kernel/Boot の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2013-0404	2013-11-8 11:39	2013-04-16	Show	GitHub Exploit DB Packet Storm

227739	1.9	注意	オラクル	-	Oracle Sun Solaris 8、9、10、および 11 における Utility の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2013-0403	2013-11-8 11:38	2013-04-16	Show	GitHub Exploit DB Packet Storm

227740	6.6	警告	オラクル	-	Oracle Sun Solaris 9 および 10 における Filesystem/cachefs の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2013-0400	2013-11-8 11:35	2013-01-15	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:July 1, 2026, 4:27 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
273451	5.3	MEDIUM Network	redhat	jboss_bpm_suite	Red Hat JBoss BPM Suite 6.3.x does not include the HTTPOnly flag in a Set-Cookie header for session cookies, which makes it easier for remote attackers to obtain potentially sensitive information via…	CWE-200 Information Exposure	CVE-2016-6344	2024-11-21 11:55	2016-09-8	Show	GitHub Exploit DB Packet Storm

273452	8.8	HIGH Local	ibm	mq_appliance_firmware	MQCLI on IBM MQ Appliance M2000 and M2001 devices allows local users to execute arbitrary shell commands via a crafted (1) Disaster Recovery or (2) High Availability command.	CWE-20 Improper Input Validation	CVE-2016-5879	2024-11-21 11:55	2016-09-2	Show	GitHub Exploit DB Packet Storm

273453	5.3	MEDIUM Network	latchset	jwcrypto	The _Rsa15 class in the RSA 1.5 algorithm implementation in jwa.py in jwcrypto before 0.3.2 lacks the Random Filling protection mechanism, which makes it easier for remote attackers to obtain clearte…	CWE-200 Information Exposure	CVE-2016-6298	2024-11-21 11:55	2016-09-2	Show	GitHub Exploit DB Packet Storm

273454	9.8	CRITICAL Network	vbulletin	vbulletin	SQL injection vulnerability in forumrunner/includes/moderation.php in vBulletin before 4.2.2 Patch Level 5 and 4.2.3 before Patch Level 1 allows remote attackers to execute arbitrary SQL commands via…	CWE-89 SQL Injection	CVE-2016-6195	2024-11-21 11:55	2016-08-31	Show	GitHub Exploit DB Packet Storm

273455	7.8	HIGH Local	cisco	anyconnect_secure_mobility_client	Cisco AnyConnect Secure Mobility Client before 4.2.05015 and 4.3.x before 4.3.02039 mishandles pathnames, which allows local users to gain privileges via a crafted INF file, aka Bug ID CSCuz92464.	CWE-264 Permissions, Privileges, and Access Controls	CVE-2016-6369	2024-11-21 11:55	2016-08-26	Show	GitHub Exploit DB Packet Storm

273456	5.9	MEDIUM Network	kaspersky	safe_browser	Kaspersky Safe Browser iOS before 1.7.0 does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to obtain sensitive information via a crafted certificate.	CWE-200 Information Exposure	CVE-2016-6231	2024-11-21 11:55	2016-08-26	Show	GitHub Exploit DB Packet Storm

273457	3.3	LOW Local	moxa	oncell_g3001_firmware oncell_g3100v2_firmware	Moxa OnCell G3100V2 devices before 2.8 and G3111, G3151, G3211, and G3251 devices before 1.7 use cleartext password storage, which makes it easier for local users to obtain sensitive information by r…	CWE-200 Information Exposure	CVE-2016-5812	2024-11-21 11:55	2016-08-24	Show	GitHub Exploit DB Packet Storm

273458	9.8	CRITICAL Network	moxa	oncell_g3001_firmware oncell_g3100v2_firmware	Moxa OnCell G3100V2 devices before 2.8 and G3111, G3151, G3211, and G3251 devices before 1.7 do not properly restrict authentication attempts, which makes it easier for remote attackers to obtain acc…	CWE-285 Improper Authorization	CVE-2016-5799	2024-11-21 11:55	2016-08-24	Show	GitHub Exploit DB Packet Storm

273459	6.1	MEDIUM Network	cisco	firepower_management_center	Cross-site scripting (XSS) vulnerability in Cisco Firepower Management Center 4.10.3, 5.2.0, 5.3.0, 5.3.0.2, 5.3.1, and 5.4.0 allows remote attackers to inject arbitrary web script or HTML via unspec…	CWE-79 Cross-site Scripting	CVE-2016-6365	2024-11-21 11:55	2016-08-23	Show	GitHub Exploit DB Packet Storm

273460	7.5	HIGH Network	cisco	unified_communications_manager	The User Data Services (UDS) API implementation in Cisco Unified Communications Manager 11.5 allows remote attackers to bypass intended access restrictions and obtain sensitive information via unspec…	CWE-200 Information Exposure	CVE-2016-6364	2024-11-21 11:55	2016-08-23	Show	GitHub Exploit DB Packet Storm