Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 4, 2026, 10 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
223711 4 警告 オラクル - Oracle Siebel CRM の Siebel Call Center における Email - COMM Server Components の処理に関する脆弱性 CWE-noinfo
情報不足
CVE-2013-2399 2013-11-8 16:41 2013-04-16 Show GitHub Exploit DB Packet Storm
223712 6 警告 オラクル - Oracle Siebel CRM の Siebel UI Framework における Open UI Client の処理に関する脆弱性 CWE-noinfo
情報不足
CVE-2013-2398 2013-11-8 16:39 2013-04-16 Show GitHub Exploit DB Packet Storm
223713 5.5 警告 オラクル - Oracle Industry Applications の Oracle Retail Central Office における Customer Operations の処理に関する脆弱性 CWE-noinfo
情報不足
CVE-2013-2397 2013-11-8 16:37 2013-04-16 Show GitHub Exploit DB Packet Storm
223714 4.3 警告 オラクル - Oracle E-Business Suite の Oracle Applications Manager における HTML OAM クライアントの処理に関する脆弱性 CWE-noinfo
情報不足
CVE-2013-2396 2013-11-8 16:37 2013-04-16 Show GitHub Exploit DB Packet Storm
223715 6.8 警告 オラクル - Oracle MySQL における Data Manipulation Language の処理に関する脆弱性 CWE-noinfo
情報不足
CVE-2013-2395 2013-11-8 16:36 2013-04-16 Show GitHub Exploit DB Packet Storm
223716 4 警告 MySQL AB
オラクル
- Oracle MySQL における Server Optimizer の処理に関する脆弱性 CWE-noinfo
情報不足
CVE-2013-2392 2013-11-8 16:25 2013-04-16 Show GitHub Exploit DB Packet Storm
223717 3 注意 MySQL AB
オラクル
- Oracle MySQL における Server Install の処理に関する脆弱性 CWE-noinfo
情報不足
CVE-2013-2391 2013-11-8 16:24 2013-04-16 Show GitHub Exploit DB Packet Storm
223718 4.3 警告 オラクル - Oracle Fusion Middleware の Oracle WebLogic Server における WebLogic Console の処理に関する脆弱性 CWE-noinfo
情報不足
CVE-2013-2390 2013-11-8 16:22 2013-04-16 Show GitHub Exploit DB Packet Storm
223719 4 警告 MySQL AB
オラクル
- Oracle MySQL における InnoDB の処理に関する脆弱性 CWE-noinfo
情報不足
CVE-2013-2389 2013-11-8 16:22 2013-04-16 Show GitHub Exploit DB Packet Storm
223720 5 警告 オラクル - Oracle E-Business Suite の Oracle Applications Technology Stack における Mid Tier File Management の処理に関する脆弱性 CWE-noinfo
情報不足
CVE-2013-2388 2013-11-8 16:20 2013-04-16 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 4, 2026, 4:17 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
314301 - - - Buffer Overflow vulnerability in esp-idf v.5.1 allows a remote attacker to obtain sensitive information via the externalId component. - CVE-2024-33453 2024-10-18 21:52 2024-10-18 Show GitHub Exploit DB Packet Storm
314302 - - - Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Igor Funa Ad Inserter allows Reflected XSS.This issue affects Ad Inserter: from n/a throug… CWE-79
Cross-site Scripting
CVE-2024-49248 2024-10-18 21:52 2024-10-18 Show GitHub Exploit DB Packet Storm
314303 - - - ### Impact When this library is used to deserialize messagepack data from an untrusted source, there is a risk of a denial of service attack by an attacker that sends data contrived to produce hash … CWE-328
 Use of Weak Hash
CVE-2024-48924 2024-10-18 21:52 2024-10-18 Show GitHub Exploit DB Packet Storm
314304 - - - The EWON FLEXY 202 transmits credentials using a weak encoding method base64. An attacker who is present in the network can sniff the traffic and decode the credentials. CWE-522
 Insufficiently Protected Credentials
CVE-2024-7755 2024-10-18 21:52 2024-10-18 Show GitHub Exploit DB Packet Storm
314305 - - - Incorrect Privilege Assignment vulnerability in CodePassenger Job Board Manager for WordPress allows Privilege Escalation.This issue affects Job Board Manager for WordPress: from n/a through 1.0. CWE-266
 Incorrect Privilege Assignment
CVE-2024-49322 2024-10-18 21:52 2024-10-18 Show GitHub Exploit DB Packet Storm
314306 - - - Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ZIPANG Point Maker allows PHP Local File Inclusion.This issue affects Point Ma… CWE-98
 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')
CVE-2024-49317 2024-10-18 21:52 2024-10-18 Show GitHub Exploit DB Packet Storm
314307 - - - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in anand23 Ajax Rating with Custom Login allows SQL Injection.This issue affects Ajax Rating with Cu… CWE-89
SQL Injection
CVE-2024-49246 2024-10-18 21:52 2024-10-18 Show GitHub Exploit DB Packet Storm
314308 - - - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in cmssoft CSV Product Import Export for WooCommerce allows SQL Injection.This issue affects CSV Pro… CWE-89
SQL Injection
CVE-2024-49244 2024-10-18 21:52 2024-10-18 Show GitHub Exploit DB Packet Storm
314309 - - - Insertion of Sensitive Information Into Sent Data vulnerability in VideoWhisper.Com Contact Forms, Live Support, CRM, Video Messages allows Retrieve Embedded Sensitive Data.This issue affects Contact… CWE-201
 Insertion of Sensitive Information Into Sent Data
CVE-2024-49235 2024-10-18 21:52 2024-10-18 Show GitHub Exploit DB Packet Storm
314310 - - - D-Link DIR_882_FW130B06 and DIR_878 DIR_878_FW130B08 were discovered to contain a command injection vulnerability via the SubnetMask parameter in the SetGuestZoneRouterSettings function. This vulnera… - CVE-2024-48638 2024-10-18 21:52 2024-10-18 Show GitHub Exploit DB Packet Storm