Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 1, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
253581 5.5 警告 オラクル - Oracle PeopleSoft Enterprise PeopleTools におけるセキュリティの処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2011-2315 2011-10-27 09:59 2011-10-18 Show GitHub Exploit DB Packet Storm
253582 2.8 注意 オラクル - Oracle PeopleSoft Enterprise PeopleTools における Personalization の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2011-3520 2011-10-27 09:59 2011-10-18 Show GitHub Exploit DB Packet Storm
253583 4 警告 オラクル - Oracle PeopleSoft Enterprise HRMS における eDevelopment の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2011-3530 2011-10-27 09:58 2011-10-18 Show GitHub Exploit DB Packet Storm
253584 5.5 警告 オラクル - Oracle PeopleSoft Enterprise HRMS における eProfile の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2011-3528 2011-10-27 09:55 2011-10-18 Show GitHub Exploit DB Packet Storm
253585 4 警告 オラクル - Oracle Siebel CRM の Siebel Core - UIF Server コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2011-3526 2011-10-27 09:54 2011-10-18 Show GitHub Exploit DB Packet Storm
253586 5.5 警告 オラクル - Oracle Siebel CRM の Siebel Core - UIF Client コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2011-3518 2011-10-27 09:53 2011-10-18 Show GitHub Exploit DB Packet Storm
253587 4.3 警告 オラクル - Oracle Siebel CRM の Siebel Apps - Marketing コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2011-2316 2011-10-27 09:53 2011-10-18 Show GitHub Exploit DB Packet Storm
253588 1.7 注意 オラクル - Oracle Solaris における Zone の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2011-3539 2011-10-27 09:52 2011-10-18 Show GitHub Exploit DB Packet Storm
253589 7.8 危険 オラクル - Oracle Solaris における Kernel/Filesystem の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2011-3537 2011-10-27 09:52 2011-10-18 Show GitHub Exploit DB Packet Storm
253590 2.1 注意 オラクル - Oracle Solaris における DTrace Software Library の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2011-3536 2011-10-27 09:51 2011-10-18 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 1, 2026, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
219251 9.8 CRITICAL
Network 		couchbase sync_gateway In Couchbase Sync Gateway 2.1.2, an attacker with access to the Sync Gateway’s public REST API was able to issue additional N1QL statements and extract sensitive data or call arbitrary N1QL functions… CWE-89
SQL Injection 		CVE-2019-9039 2024-11-21 13:50 2019-06-27 Show GitHub Exploit DB Packet Storm
219252 6.5 MEDIUM
Network 		digitaldruid hoteldruid Hoteldruid before v2.3.1 allows remote authenticated users to cause a denial of service (invoice-creation outage) via the n_file parameter to visualizza_contratto.php with invalid arguments (any non-… CWE-20
 Improper Input Validation  		CVE-2019-9085 2024-11-21 13:50 2019-06-25 Show GitHub Exploit DB Packet Storm
219253 9.8 CRITICAL
Network 		digitaldruid hoteldruid HotelDruid before v2.3.1 has SQL Injection via the /tab_tariffe.php numtariffa1 parameter. CWE-89
SQL Injection 		CVE-2019-9087 2024-11-21 13:50 2019-06-8 Show GitHub Exploit DB Packet Storm
219254 9.8 CRITICAL
Network 		digitaldruid hoteldruid HotelDruid before v2.3.1 has SQL Injection via the /visualizza_tabelle.php anno parameter. CWE-89
SQL Injection 		CVE-2019-9086 2024-11-21 13:50 2019-06-8 Show GitHub Exploit DB Packet Storm
219255 4.9 MEDIUM
Network 		digitaldruid hoteldruid In Hoteldruid before 2.3.1, a division by zero was discovered in $num_tabelle in tab_tariffe.php (aka the numtariffa1 parameter) due to the mishandling of non-numeric values, as demonstrated by the /… CWE-369
 Divide By Zero 		CVE-2019-9084 2024-11-21 13:50 2019-06-8 Show GitHub Exploit DB Packet Storm
219256 9.8 CRITICAL
Network 		saet tebe_small_firmware
webapp 		The WebApp v04.68 in the supervisor on SAET Impianti Speciali TEBE Small 05.01 build 1137 devices allows remote attackers to execute or include local .php files, as demonstrated by menu=php://filter/… CWE-22
Path Traversal 		CVE-2019-9106 2024-11-21 13:50 2019-06-1 Show GitHub Exploit DB Packet Storm
219257 7.5 HIGH
Network 		saet tebe_small_firmware
webapp 		The WebApp v04.68 in the supervisor on SAET Impianti Speciali TEBE Small 05.01 build 1137 devices allows remote attackers to make several types of API calls without authentication, as demonstrated by… CWE-306
Missing Authentication for Critical Function 		CVE-2019-9105 2024-11-21 13:50 2019-06-1 Show GitHub Exploit DB Packet Storm
219258 6.1 MEDIUM
Network 		digitaldruid hoteldruid HotelDruid 2.3.0 has XSS affecting the nsextt, cambia1, mese_fine, origine, and anno parameters in creaprezzi.php, tabella3.php, personalizza.php, and visualizza_tabelle.php. CWE-79
Cross-site Scripting 		CVE-2019-8937 2024-11-21 13:50 2019-05-18 Show GitHub Exploit DB Packet Storm
219259 6.1 MEDIUM
Network 		zohocorp manageengine_netflow_analyzer An issue was discovered in Zoho ManageEngine Netflow Analyzer Professional 7.0.0.2. XSS exists in the Administration zone /netflow/jspui/selectDevice.jsp file in these GET parameters: param and rtype. CWE-79
Cross-site Scripting 		CVE-2019-8929 2024-11-21 13:50 2019-05-18 Show GitHub Exploit DB Packet Storm
219260 6.1 MEDIUM
Network 		zohocorp manageengine_netflow_analyzer An issue was discovered in Zoho ManageEngine Netflow Analyzer Professional 7.0.0.2. XSS exists in /netflow/jspui/userManagementForm.jsp via these GET parameters: authMeth, passWord, pwd1, and userNam… CWE-79
Cross-site Scripting 		CVE-2019-8928 2024-11-21 13:50 2019-05-18 Show GitHub Exploit DB Packet Storm