Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 6, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
208971	3.5	注意	オラクル	-	Oracle PeopleSoft Products の PeopleSoft Enterprise FIN Expenses における Expense Report General に関する脆弱性	CWE-noinfo 情報不足	CVE-2015-4825	2015-10-22 15:02	2015-10-20	Show	GitHub Exploit DB Packet Storm

208972	5.5	警告	オラクル	-	Oracle PeopleSoft Products の PeopleSoft Enterprise PeopleTools における PIA Core Technology に関する脆弱性	CWE-noinfo 情報不足	CVE-2015-4818	2015-10-22 15:01	2015-10-20	Show	GitHub Exploit DB Packet Storm

208973	4	警告	オラクル	-	Oracle PeopleSoft Products の PeopleSoft Enterprise HCM Talent Acquistion Managment における Security に関する脆弱性	CWE-noinfo 情報不足	CVE-2015-4804	2015-10-22 15:01	2015-10-20	Show	GitHub Exploit DB Packet Storm

208974	7.5	危険	オラクル	-	Oracle Industry Applications の Oracle Utilities Work and Asset Management における Add-On Applications に関する脆弱性	CWE-noinfo 情報不足	CVE-2015-4795	2015-10-22 15:00	2015-10-20	Show	GitHub Exploit DB Packet Storm

208975	4	警告	オラクル	-	Oracle E-Business Suite の Oracle Applications Framework における Diagnostics, DMZ に関する脆弱性	CWE-noinfo 情報不足	CVE-2015-4898	2015-10-22 14:53	2015-10-20	Show	GitHub Exploit DB Packet Storm

208976	6.4	警告	オラクル	-	Oracle E-Business Suite の Oracle Report Manager における Reports Security に関する脆弱性	CWE-noinfo 情報不足	CVE-2015-4886	2015-10-22 14:53	2015-10-20	Show	GitHub Exploit DB Packet Storm

208977	5	警告	オラクル	-	Oracle E-Business Suite の Oracle Application Object Library における Single Signon に関する脆弱性	CWE-noinfo 情報不足	CVE-2015-4884	2015-10-22 14:53	2015-10-20	Show	GitHub Exploit DB Packet Storm

208978	5	警告	オラクル	-	Oracle Enterprise Manager Grid Control の Enterprise Manager Base Platform における Agent Next Gen に関する脆弱性	CWE-noinfo 情報不足	CVE-2015-4875	2015-10-22 14:53	2015-10-20	Show	GitHub Exploit DB Packet Storm

208979	4.1	警告	オラクル	-	Oracle Enterprise Manager Grid Control の Enterprise Manager Base Platform における Agent Next Gen に関する脆弱性	CWE-noinfo 情報不足	CVE-2015-4874	2015-10-22 14:53	2015-10-20	Show	GitHub Exploit DB Packet Storm

208980	2.1	注意	オラクル	-	Oracle E-Business Suite の Oracle Applications Framework における Business Objects - BC4J に関する脆弱性	CWE-noinfo 情報不足	CVE-2015-4865	2015-10-22 14:53	2015-10-20	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 7, 2026, 4:13 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
297901	-		elephantdrive	elephantdrive	ElephantDrive does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attacke…	CWE-20 Improper Input Validation	CVE-2012-5818	2024-11-21 10:45	2012-11-5	Show	GitHub Exploit DB Packet Storm

297902	7.4	HIGH Network	amazon codehaus	ec2_api_tools_java_library xfire	Codehaus XFire 1.2.6 and earlier, as used in the Amazon EC2 API Tools Java library and other products, does not verify that the server hostname matches a domain name in the subject's Common Name (CN)…	CWE-295 Improper Certificate Validation	CVE-2012-5817	2024-11-21 10:45	2012-11-5	Show	GitHub Exploit DB Packet Storm

297903	-		aol	aim	AOL Instant Messenger (AIM) 1.0.1.2 does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man…	CWE-20 Improper Input Validation	CVE-2012-5816	2024-11-21 10:45	2012-11-5	Show	GitHub Exploit DB Packet Storm

297904	-		rackspace	rackspace	The Rackspace app 2.1.5 for iOS does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-…	CWE-20 Improper Input Validation	CVE-2012-5815	2024-11-21 10:45	2012-11-5	Show	GitHub Exploit DB Packet Storm

297905	-		github roderick_baier	gaug.es weberknecht	Weberknecht, as used in GitHub Gaug.es and other products, does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certif…	CWE-20 Improper Input Validation	CVE-2012-5814	2024-11-21 10:45	2012-11-5	Show	GitHub Exploit DB Packet Storm

297906	-		emorym	android_pusher	The Android_Pusher library for Android does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows …	CWE-20 Improper Input Validation	CVE-2012-5813	2024-11-21 10:45	2012-11-5	Show	GitHub Exploit DB Packet Storm

297907	-		acra	acra_library	The ACRA library for Android does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the…	CWE-20 Improper Input Validation	CVE-2012-5812	2024-11-21 10:45	2012-11-5	Show	GitHub Exploit DB Packet Storm

297908	-		breezy	breezy	The Breezy application for Android does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-…	CWE-310 Cryptographic Issues	CVE-2012-5811	2024-11-21 10:45	2012-11-5	Show	GitHub Exploit DB Packet Storm

297909	5.9	MEDIUM Network	jpmorganchase	chase_mobile	The Chase mobile banking application for Android does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, whi…	CWE-295 Improper Certificate Validation	CVE-2012-5810	2024-11-21 10:45	2012-11-5	Show	GitHub Exploit DB Packet Storm

297910	-		groupon	groupon_merchants	The Groupon Redemptions application for Android does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, whic…	CWE-310 Cryptographic Issues	CVE-2012-5809	2024-11-21 10:45	2012-11-5	Show	GitHub Exploit DB Packet Storm