Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 13, 2026, 4:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
252611 4.3 警告 オラクル - Oracle E-Business Suite の Web ADI コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2011-0809 2011-05-13 11:01 2011-04-19 Show GitHub Exploit DB Packet Storm
252612 3.6 注意 オラクル - Oracle Solaris における cp の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2011-0801 2011-05-13 11:00 2011-04-19 Show GitHub Exploit DB Packet Storm
252613 6.5 警告 オラクル - Oracle Solaris における Administration Utilities の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2011-0800 2011-05-13 10:58 2011-04-19 Show GitHub Exploit DB Packet Storm
252614 10 危険 サン・マイクロシステムズ - Oracle Sun GlassFish Enterprise Server および Sun Java System Application Server における脆弱性 CWE-noinfo
情報不足 		CVE-2011-0807 2011-05-12 11:03 2011-04-19 Show GitHub Exploit DB Packet Storm
252615 2.1 注意 オラクル - Oracle E-Business Suite の Applications Install コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2011-0797 2011-05-12 10:57 2011-04-19 Show GitHub Exploit DB Packet Storm
252616 1.7 注意 オラクル - Oracle E-Business Suite の Applications Install コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2011-0796 2011-05-12 10:56 2011-04-19 Show GitHub Exploit DB Packet Storm
252617 4.3 警告 オラクル - Oracle E-Business Suite の Application Object Library コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2011-0791 2011-05-12 10:56 2011-04-19 Show GitHub Exploit DB Packet Storm
252618 4.3 警告 オラクル - Oracle Fusion Middleware の Portal コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2011-0798 2011-05-12 10:46 2011-04-19 Show GitHub Exploit DB Packet Storm
252619 3.5 注意 オラクル - Oracle Fusion Middleware の Single Sign On コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2011-0795 2011-05-12 10:45 2011-04-19 Show GitHub Exploit DB Packet Storm
252620 1.7 注意 オラクル - Oracle Solaris における wbem の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2011-0790 2011-05-12 10:44 2011-04-19 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 13, 2026, 5:05 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
254811 7.5 HIGH
Network 		arm arm-trusted-firmware In all versions of ARM Trusted Firmware up to and including v1.4, not initializing or saving/restoring the PMCR_EL0 register can leak secure world timing information. CWE-200
Information Exposure 		CVE-2017-15031 2024-11-21 12:13 2018-12-19 Show GitHub Exploit DB Packet Storm
254812 7.8 HIGH
Local 		google android In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, Userspace can pass IEs to the host driver and if multiple append commands are received, then… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2017-14888 2024-11-21 12:13 2018-12-7 Show GitHub Exploit DB Packet Storm
254813 5.9 MEDIUM
Network 		shein shein-fashion_shopping_online The Shein Group Ltd. "SHEIN - Fashion Shopping" app -- aka shein fashion-shopping/id878577184 -- for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers … CWE-295
Improper Certificate Validation  		CVE-2017-14710 2024-11-21 12:13 2018-07-13 Show GitHub Exploit DB Packet Storm
254814 7.4 HIGH
Network 		komoot komoot The komoot GmbH "Komoot - Cycling & Hiking Maps" app before 9.3.2 -- aka komoot-cycling-hiking-maps/id447374873 -- for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the… CWE-200
CWE-295
Information Exposure
Improper Certificate Validation  		CVE-2017-14709 2024-11-21 12:13 2018-07-13 Show GitHub Exploit DB Packet Storm
254815 5.9 MEDIUM
Network 		shpock shpock "Shpock Boot Sale & Classifieds" app before 3.17.0 -- aka shpock-boot-sale-classifieds/id557153158 -- for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attac… CWE-295
Improper Certificate Validation  		CVE-2017-14612 2024-11-21 12:13 2018-07-13 Show GitHub Exploit DB Packet Storm
254816 5.5 MEDIUM
Local 		google android While flashing meta image, a buffer over-read may potentially occur when the image size is smaller than the image header size or is smaller than the image header size + total image header entry in An… CWE-125
Out-of-bounds Read 		CVE-2017-14893 2024-11-21 12:13 2018-07-7 Show GitHub Exploit DB Packet Storm
254817 5.5 MEDIUM
Local 		google android While flashing a meta image, a buffer over-read can potentially occur when the number of images are out of the maximum range of 32 in Android releases from CAF using the linux kernel (Android for MSM… CWE-125
Out-of-bounds Read 		CVE-2017-14872 2024-11-21 12:13 2018-07-7 Show GitHub Exploit DB Packet Storm
254818 8.8 HIGH
Network 		sierrawireless gx440_firmware
es440_firmware
ls300_firmware
gx400_firmware
es450_firmware
rv50_firmware
rv50x_firmware
mp70_firmware
mp70e_firmware
gx450_firmware 		A vulnerability in Sierra Wireless AirLink GX400, GX440, ES440, and LS300 routers with firmware before 4.4.5 and GX450, ES450, RV50, RV50X, MP70, and MP70E routers with firmware before 4.9 could allo… CWE-20
 Improper Input Validation  		CVE-2017-15043 2024-11-21 12:13 2018-05-5 Show GitHub Exploit DB Packet Storm
254819 4.8 MEDIUM
Network 		genixcms genixcms Cross-site scripting (XSS) vulnerability in GeniXCMS 1.1.0 allows remote authenticated users to inject arbitrary web script or HTML via the Menu ID when adding a menu. CWE-79
Cross-site Scripting 		CVE-2017-14740 2024-11-21 12:13 2018-04-26 Show GitHub Exploit DB Packet Storm
254820 9.1 CRITICAL
Network 		agentejo cockpit SSRF (Server Side Request Forgery) in Cockpit 0.13.0 allows remote attackers to read arbitrary files or send TCP traffic to intranet hosts via the url parameter, related to use of the discontinued ah… CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2017-14611 2024-11-21 12:13 2018-04-11 Show GitHub Exploit DB Packet Storm