Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 8, 2026, 2:12 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
243331 6.8 警告 オラクル - Oracle Siebel CRM の Web UI の処理に関する脆弱性 CWE-noinfo
情報不足
CVE-2012-1731 2012-07-20 10:49 2012-07-17 Show GitHub Exploit DB Packet Storm
243332 5.8 警告 オラクル - Oracle Siebel CRM の Portal Framework の処理に関する脆弱性 CWE-noinfo
情報不足
CVE-2012-1728 2012-07-20 10:49 2012-07-17 Show GitHub Exploit DB Packet Storm
243333 4 警告 オラクル - Oracle MySQL Server における InnoDB の処理に関する脆弱性 CWE-noinfo
情報不足
CVE-2012-1757 2012-07-20 10:31 2012-07-17 Show GitHub Exploit DB Packet Storm
243334 4 警告 オラクル - Oracle MySQL Server における脆弱性 CWE-noinfo
情報不足
CVE-2012-1756 2012-07-20 10:30 2012-07-17 Show GitHub Exploit DB Packet Storm
243335 6.8 警告 オラクル - Oracle MySQL Server における Server Optimizer の処理に関する脆弱性 CWE-noinfo
情報不足
CVE-2012-1735 2012-07-20 10:28 2012-07-17 Show GitHub Exploit DB Packet Storm
243336 5 警告 オラクル - Oracle Database Server の Network Layer における脆弱性 CWE-noinfo
情報不足
CVE-2012-1747 2012-07-20 10:10 2012-07-17 Show GitHub Exploit DB Packet Storm
243337 5 警告 オラクル - Oracle Database Server の Network Layer における脆弱性 CWE-noinfo
情報不足
CVE-2012-1746 2012-07-20 10:04 2012-07-17 Show GitHub Exploit DB Packet Storm
243338 5.8 警告 Outercurve Foundation - WebsitePanel のログインページにおけるオープンリダイレクトの脆弱性 CWE-20
不適切な入力確認
CVE-2012-4032 2012-07-19 16:48 2012-07-17 Show GitHub Exploit DB Packet Storm
243339 5 警告 WANGKONGBAO - Wangkongbao CNS-1000 および CNS-1100 におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2012-4031 2012-07-19 16:46 2012-07-17 Show GitHub Exploit DB Packet Storm
243340 3.5 注意 OpenStack - OpenStack Compute (Nova) Folsom および Essex におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2012-3371 2012-07-19 16:44 2012-06-26 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 8, 2026, 4:09 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
267751 5.3 MEDIUM
Network
apache
debian
redhat
netapp
canonical
oracle
tomcat
debian_linux
enterprise_linux_desktop
enterprise_linux_workstation
enterprise_linux_server
jboss_enterprise_web_server
enterprise_linux_eus
enterprise_linux_server_tus
When a SecurityManager is configured, a web application's ability to read system properties should be controlled by the SecurityManager. In Apache Tomcat 9.0.0.M1 to 9.0.0.M9, 8.5.0 to 8.5.4, 8.0.0.R… NVD-CWE-noinfo
CVE-2016-6794 2024-11-21 11:56 2017-08-11 Show GitHub Exploit DB Packet Storm
267752 9.8 CRITICAL
Network
apache sling In the XSS Protection API module before 1.0.12 in Apache Sling, the method XSS.getValidXML() uses an insecure SAX parser to validate the input string, which allows for XXE attacks in all scripts whic… CWE-611
XXE
CVE-2016-6798 2024-11-21 11:56 2017-07-20 Show GitHub Exploit DB Packet Storm
267753 9.1 CRITICAL
Network
apache wicket The DiskFileItem class in Apache Wicket 6.x before 6.25.0 and 1.5.x before 1.5.17 allows remote attackers to cause a denial of service (infinite loop) and write to, move, and delete files with the pe… CWE-502
 Deserialization of Untrusted Data
CVE-2016-6793 2024-11-21 11:56 2017-07-17 Show GitHub Exploit DB Packet Storm
267754 9.8 CRITICAL
Network
cloudfoundry cf-mysql-release
cf-release
An issue was discovered in Cloud Foundry Foundation Cloud Foundry release versions prior to v245 and cf-mysql-release versions prior to v31. A command injection vulnerability was discovered in a comm… CWE-77
Command Injection
CVE-2016-6655 2024-11-21 11:56 2017-06-13 Show GitHub Exploit DB Packet Storm
267755 7.5 HIGH
Network
bluecoat proxysg
cacheflow
advanced_secure_gateway
Blue Coat Advanced Secure Gateway 6.6, CacheFlow 3.4, ProxySG 6.5 and 6.6 allows remote attackers to bypass blocked requests, user authentication, and payload scanning. CWE-254
 7PK - Security Features
CVE-2016-6594 2024-11-21 11:56 2017-06-9 Show GitHub Exploit DB Packet Storm
267756 7.5 HIGH
Network
apache cordova Product: Apache Cordova Android 5.2.2 and earlier. The application calls methods of the Log class. Messages passed to these methods (Log.v(), Log.d(), Log.i(), Log.w(), and Log.e()) are stored in a s… CWE-532
 Inclusion of Sensitive Information in Log Files
CVE-2016-6799 2024-11-21 11:56 2017-05-10 Show GitHub Exploit DB Packet Storm
267757 5.4 MEDIUM
Network
redhat
openstack
openstack
manila
Cross-site scripting (XSS) vulnerability in the "Shares" overview in Openstack Manila before 2.5.1 allows remote authenticated users to inject arbitrary web script or HTML via the Metadata field in t… CWE-79
Cross-site Scripting
CVE-2016-6519 2024-11-21 11:56 2017-04-22 Show GitHub Exploit DB Packet Storm
267758 9.8 CRITICAL
Network
google android The Qualcomm GPS subsystem in Android on Android One devices allows remote attackers to execute arbitrary code. CWE-264
Permissions, Privileges, and Access Controls
CVE-2016-6727 2024-11-21 11:56 2017-04-18 Show GitHub Exploit DB Packet Storm
267759 9.8 CRITICAL
Network
google android Unspecified vulnerability in Qualcomm components in Android on Nexus 6 and Android One devices. NVD-CWE-noinfo
CVE-2016-6726 2024-11-21 11:56 2017-04-18 Show GitHub Exploit DB Packet Storm
267760 7.5 HIGH
Network
redhat
canonical
nettle_project
enterprise_linux_desktop
enterprise_linux_workstation
enterprise_linux_server
enterprise_linux_hpc_node
ubuntu_linux
nettle
The RSA and DSA decryption code in Nettle makes it easier for attackers to discover private keys via a cache side channel attack. CWE-203
 Information Exposure Through Discrepancy
CVE-2016-6489 2024-11-21 11:56 2017-04-15 Show GitHub Exploit DB Packet Storm