Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 22, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
251901 4.9 警告 オラクル - Oracle MySQL の MySQL Server コンポーネントにおける脆弱性 CWE-noinfo
情報不足
CVE-2012-0116 2012-01-23 11:04 2012-01-17 Show GitHub Exploit DB Packet Storm
251902 5 警告 オラクル - Oracle MySQL の MySQL Server コンポーネントにおける脆弱性 CWE-noinfo
情報不足
CVE-2011-2262 2012-01-23 11:03 2012-01-17 Show GitHub Exploit DB Packet Storm
251903 5.5 警告 オラクル - Oracle MySQL の MySQL Server コンポーネントにおける脆弱性 CWE-noinfo
情報不足
CVE-2012-0113 2012-01-23 11:03 2012-01-17 Show GitHub Exploit DB Packet Storm
251904 2.1 注意 オラクル - Oracle Communications Unified における Calendar Server の処理に関する脆弱性 CWE-noinfo
情報不足
CVE-2011-3570 2012-01-23 10:59 2012-01-17 Show GitHub Exploit DB Packet Storm
251905 3.3 注意 オラクル - Oracle Communications Unified における Calendar Server の処理に関する脆弱性 CWE-noinfo
情報不足
CVE-2011-3574 2012-01-23 10:58 2012-01-17 Show GitHub Exploit DB Packet Storm
251906 4 警告 オラクル - Oracle Communications Unified における Calendar Server の処理に関する脆弱性 CWE-noinfo
情報不足
CVE-2011-3573 2012-01-23 10:58 2012-01-17 Show GitHub Exploit DB Packet Storm
251907 4.6 警告 オラクル - Oracle Communications Unified における Calendar Server の処理に関する脆弱性 CWE-noinfo
情報不足
CVE-2011-3565 2012-01-23 10:56 2012-01-17 Show GitHub Exploit DB Packet Storm
251908 2.1 注意 オラクル - Oracle GlassFish Enterprise Server における認証の処理に関する脆弱性 CWE-noinfo
情報不足
CVE-2011-3564 2012-01-23 10:42 2012-01-17 Show GitHub Exploit DB Packet Storm
251909 3.7 注意 オラクル - Oracle GlassFish Server における認証の処理に関する脆弱性 CWE-noinfo
情報不足
CVE-2012-0081 2012-01-23 10:33 2012-01-17 Show GitHub Exploit DB Packet Storm
251910 5 警告 オラクル - Oracle GlassFish Server における Web Container の処理に関する脆弱性 CWE-noinfo
情報不足
CVE-2012-0104 2012-01-23 10:32 2012-01-17 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 22, 2026, 4:08 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
247521 7.5 HIGH
Network
rockwellautomation allen-bradley_l30erms_firmware Improperly implemented option-field processing in the TCP/IP stack on Allen-Bradley L30ERMS safety devices v30 and earlier causes a denial of service. When a crafted TCP packet is received, the devic… CWE-20
 Improper Input Validation 
CVE-2017-9312 2024-11-21 12:35 2018-06-26 Show GitHub Exploit DB Packet Storm
247522 8.8 HIGH
Network
dahuasecurity xvr5x16_firmware
xvr5x08_firmware
xvr5x04_firmware
xvr7x16_firmware
ipc-hdbw4xxx_firmware
ipc-hdbw5xxx_firmware
Privilege escalation vulnerability found in some Dahua IP devices. Attacker in possession of low privilege account can gain access to credential information of high privilege account and further obta… NVD-CWE-noinfo
CVE-2017-9317 2024-11-21 12:35 2018-05-24 Show GitHub Exploit DB Packet Storm
247523 7.5 HIGH
Network
netiq identity_manager IDM 4.6 Identity Applications prior to 4.6.2.1 may expose sensitive information. CWE-200
Information Exposure
CVE-2017-9284 2024-11-21 12:35 2018-04-27 Show GitHub Exploit DB Packet Storm
247524 6.1 MEDIUM
Network
netiq identity_reporting NetIQ Identity Reporting, in versions prior to 5.5 Service Pack 1, is susceptible to an XSS attack. CWE-79
Cross-site Scripting
CVE-2017-9275 2024-11-21 12:35 2018-04-27 Show GitHub Exploit DB Packet Storm
247525 9.8 CRITICAL
Network
netiq
microfocus
edirectory NetIQ eDirectory before 9.0 SP4 did not enforce login restrictions when "ebaclient" was used, allowing unpermitted access to eDirectory services. CWE-287
Improper Authentication
CVE-2017-9285 2024-11-21 12:35 2018-03-3 Show GitHub Exploit DB Packet Storm
247526 7.5 HIGH
Network
netiq identity_manager Some NetIQ Identity Manager Applications before Identity Manager 4.5.6.1 included the session token in GET URLs, potentially allowing exposure of user sessions to untrusted third parties via proxies,… CWE-200
Information Exposure
CVE-2017-9280 2024-11-21 12:35 2018-03-3 Show GitHub Exploit DB Packet Storm
247527 7.2 HIGH
Network
netiq identity_manager NetIQ Identity Manager before 4.5.6.1 allowed uploading files with double extensions or non-image content in the Themes handling of the User Application Administration, allowing malicious user admini… CWE-20
 Improper Input Validation 
CVE-2017-9279 2024-11-21 12:35 2018-03-3 Show GitHub Exploit DB Packet Storm
247528 9.8 CRITICAL
Network
netiq identity_manager The NetIQ Identity Manager Oracle EBS driver before 4.0.2.0 sent EBS logs containing the driver authentication password, potentially disclosing this to attackers able to read the EBS tables. CWE-532
 Inclusion of Sensitive Information in Log Files
CVE-2017-9278 2024-11-21 12:35 2018-03-3 Show GitHub Exploit DB Packet Storm
247529 7.5 HIGH
Network
novell edirectory The LDAP backend in Novell eDirectory before 9.0 SP4 when switched to EBA (Enhanced Background Authentication) kept open connections without EBA. NVD-CWE-noinfo
CVE-2017-9277 2024-11-21 12:35 2018-03-3 Show GitHub Exploit DB Packet Storm
247530 6.1 MEDIUM
Network
netiq access_manager Novell Access Manager iManager before 4.3.3 did not validate parameters so that cross site scripting content could be reflected back into the result page using the "a" parameter. CWE-79
Cross-site Scripting
CVE-2017-9276 2024-11-21 12:35 2018-03-3 Show GitHub Exploit DB Packet Storm