Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 25, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
256941 3.6 注意 オラクル - Oracle Database の RDBMS コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2009-3410 2010-02-12 12:21 2010-01-12 Show GitHub Exploit DB Packet Storm
256942 4 警告 オラクル - Oracle Database の Logical Standby コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2009-1996 2010-02-12 12:21 2010-01-12 Show GitHub Exploit DB Packet Storm
256943 4.9 警告 オラクル - Oracle Database の Oracle Spatial コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2009-3414 2010-02-12 12:21 2010-01-12 Show GitHub Exploit DB Packet Storm
256944 4.9 警告 オラクル - Oracle Database の Oracle Data Pump コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2009-3411 2010-02-12 12:21 2010-01-12 Show GitHub Exploit DB Packet Storm
256945 6 警告 オラクル - Oracle Database の Application Express Application Builder コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-0076 2010-02-12 12:21 2010-01-12 Show GitHub Exploit DB Packet Storm
256946 9 危険 オラクル - Oracle Database の Oracle OLAP コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2009-3415 2010-02-12 12:20 2010-01-12 Show GitHub Exploit DB Packet Storm
256947 10 危険 オラクル - Oracle Database の Listener コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-0071 2010-02-12 12:20 2010-01-12 Show GitHub Exploit DB Packet Storm
256948 5 警告 Pidgin
Adium
レッドハット		 - Pidgin および Adium の MSN プロトコルプラグインにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2010-0013 2010-02-10 13:39 2010-01-8 Show GitHub Exploit DB Packet Storm
256949 10 危険 アドビシステムズ
レッドハット		 - Adobe Reader および Acrobat の U3D 実装における任意のコードを実行される脆弱性 CWE-189
数値処理の問題 		CVE-2009-3959 2010-02-10 13:39 2010-01-12 Show GitHub Exploit DB Packet Storm
256950 10 危険 アドビシステムズ - Adobe Reader および Acrobat のダウンロードマネージャーにおける任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2009-3958 2010-02-10 13:39 2010-01-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 25, 2026, 4:01 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
256861 5.4 MEDIUM
Network 		atutor atutor Cross-Site Scripting (XSS) was discovered in ATutor before 2.2.3. The vulnerability exists due to insufficient filtration of data (url in /mods/_standard/rss_feeds/edit_feed.php). An attacker could i… CWE-79
Cross-site Scripting 		CVE-2017-14981 2024-11-21 12:13 2017-10-3 Show GitHub Exploit DB Packet Storm
256862 7.5 HIGH
Network 		gxlcms gxlcms Gxlcms uses an unsafe character-replacement approach in an attempt to restrict access, which allows remote attackers to read arbitrary files via modified pathnames in the s parameter to index.php, re… NVD-CWE-noinfo
CVE-2017-14979 2024-11-21 12:13 2017-10-3 Show GitHub Exploit DB Packet Storm
256863 8.8 HIGH
Network 		dasinfomedia wphrm_human_resource_management_system WPHRM Human Resource Management System for WordPress 1.0 allows SQL Injection via the employee_id parameter. CWE-89
SQL Injection 		CVE-2017-14848 2024-11-21 12:13 2017-10-3 Show GitHub Exploit DB Packet Storm
256864 7.8 HIGH
Local 		skyboxsecurity skybox_manager_client_application Skybox Manager Client Application prior to 8.5.501 is prone to an elevation of privileges vulnerability during authentication of a valid user in a debugger-pause state. The vulnerability can only be … NVD-CWE-noinfo
CVE-2017-14773 2024-11-21 12:13 2017-10-3 Show GitHub Exploit DB Packet Storm
256865 3.3 LOW
Local 		skyboxsecurity skybox_manager_client_application Skybox Manager Client Application is prone to information disclosure via a username enumeration attack. A local unauthenticated attacker could exploit the flaw to obtain valid usernames, by analyzing… CWE-200
Information Exposure 		CVE-2017-14772 2024-11-21 12:13 2017-10-3 Show GitHub Exploit DB Packet Storm
256866 5.5 MEDIUM
Local 		skyboxsecurity skybox_manager_client_application Skybox Manager Client Application prior to 8.5.501 is prone to an arbitrary file upload vulnerability due to insufficient input validation of user-supplied files path when uploading files via the app… CWE-20
 Improper Input Validation  		CVE-2017-14771 2024-11-21 12:13 2017-10-3 Show GitHub Exploit DB Packet Storm
256867 5.5 MEDIUM
Local 		skyboxsecurity skybox_manager_client_application Skybox Manager Client Application prior to 8.5.501 is prone to an information disclosure vulnerability of user password hashes. A local authenticated attacker can access the password hashes in a debu… CWE-200
Information Exposure 		CVE-2017-14770 2024-11-21 12:13 2017-10-3 Show GitHub Exploit DB Packet Storm
256868 9.8 CRITICAL
Network 		opentext document_sciences_xpression OpenText Document Sciences xPression (formerly EMC Document Sciences xPression) v4.5SP1 Patch 13 (older versions might be affected as well) is prone to an XML External Entity vulnerability: /xFramewo… CWE-611
XXE 		CVE-2017-14759 2024-11-21 12:13 2017-10-3 Show GitHub Exploit DB Packet Storm
256869 8.8 HIGH
Network 		opentext document_sciences_xpression OpenText Document Sciences xPression (formerly EMC Document Sciences xPression) v4.5SP1 Patch 13 (older versions might be affected as well) is prone to SQL Injection: /xAdmin/html/cm_doclist_view_uc.… CWE-89
SQL Injection 		CVE-2017-14758 2024-11-21 12:13 2017-10-3 Show GitHub Exploit DB Packet Storm
256870 8.8 HIGH
Network 		opentext document_sciences_xpression OpenText Document Sciences xPression (formerly EMC Document Sciences xPression) v4.5SP1 Patch 13 (older versions might be affected as well) is prone to SQL Injection: /xDashboard/html/jobhistory/down… CWE-89
SQL Injection 		CVE-2017-14757 2024-11-21 12:13 2017-10-3 Show GitHub Exploit DB Packet Storm