Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 8, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
209351 4 警告 オラクル - Oracle MySQL の MySQL Server における Server : Types に関する脆弱性 CWE-noinfo
情報不足
CVE-2015-4730 2015-10-23 17:08 2015-10-20 Show GitHub Exploit DB Packet Storm
209352 5 警告 オラクル - Oracle Java SE および JavaFX における JavaFX に関する脆弱性 CWE-noinfo
情報不足
CVE-2015-4916 2015-10-23 14:36 2015-10-20 Show GitHub Exploit DB Packet Storm
209353 5 警告 オラクル - Oracle Java SE および JavaFX における JavaFX に関する脆弱性 CWE-noinfo
情報不足
CVE-2015-4908 2015-10-23 14:36 2015-10-20 Show GitHub Exploit DB Packet Storm
209354 5 警告 オラクル - Oracle Java SE および JavaFX における JavaFX に関する脆弱性 CWE-noinfo
情報不足
CVE-2015-4906 2015-10-23 14:36 2015-10-20 Show GitHub Exploit DB Packet Storm
209355 9.3 危険 オラクル - Oracle Java SE における JavaFX に関する脆弱性 CWE-noinfo
情報不足
CVE-2015-4901 2015-10-23 14:36 2015-10-20 Show GitHub Exploit DB Packet Storm
209356 6.9 警告 オラクル - Oracle Java SE における Deployment に関する脆弱性 CWE-noinfo
情報不足
CVE-2015-4810 2015-10-23 14:36 2015-10-20 Show GitHub Exploit DB Packet Storm
209357 5 警告 The Open Group
オラクル
- Unix システムにおけるサービス運用妨害 (DoS) の脆弱性 - CVE-1999-0377 2015-10-23 10:21 1999-09-25 Show GitHub Exploit DB Packet Storm
209358 10 危険 オラクル - Oracle Sun Systems Products Suite の Integrated Lights Out Manager における System Management に関する脆弱性 CWE-noinfo
情報不足
CVE-2015-4915 2015-10-23 10:19 2015-10-20 Show GitHub Exploit DB Packet Storm
209359 4.6 警告 オラクル - Oracle Sun Solaris における Solaris Kernel Zones に関する脆弱性 CWE-noinfo
情報不足
CVE-2015-4907 2015-10-23 10:19 2015-10-20 Show GitHub Exploit DB Packet Storm
209360 4.6 警告 オラクル - Oracle Sun Solaris における NSCD に関する脆弱性 CWE-noinfo
情報不足
CVE-2015-4891 2015-10-23 10:19 2015-10-20 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 8, 2026, 4:09 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
297661 - xmlsoft
opensuse
libxslt
opensuse
libxslt before 1.1.28 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via an (1) empty match attribute in a XSL key to the xsltAddKey function in keys.c or (… NVD-CWE-Other
CVE-2012-6139 2024-11-21 10:45 2013-04-13 Show GitHub Exploit DB Packet Storm
297662 - ibm sterling_file_gateway
gentran_integration_suite
sterling_integrator
sterling_b2b_integrator
Unspecified vulnerability in the CLA2 server in IBM Gentran Integration Suite 4.3, Sterling Integrator 5.0 and 5.1, and Sterling B2B Integrator 5.2, as used in IBM Sterling File Gateway 1.1 through 2… NVD-CWE-noinfo
CVE-2012-5937 2024-11-21 10:45 2013-04-13 Show GitHub Exploit DB Packet Storm
297663 - redhat openstack_folsom
openstack_essex
Red Hat OpenStack Essex and Folsom creates the /var/log/puppet directory with world-readable permissions, which allows local users to obtain sensitive information such as Puppet log files. CWE-264
Permissions, Privileges, and Access Controls
CVE-2012-6120 2024-11-21 10:45 2013-04-11 Show GitHub Exploit DB Packet Storm
297664 - omniauth-oauth2_project omniauth-oauth2 Cross-site request forgery (CSRF) vulnerability in the omniauth-oauth2 gem 1.1.1 and earlier for Ruby allows remote attackers to hijack the authentication of users for requests that modify session st… CWE-352
 Origin Validation Error
CVE-2012-6134 2024-11-21 10:45 2013-04-10 Show GitHub Exploit DB Packet Storm
297665 - fedorahosted cronie File descriptor leak in cronie 1.4.8, when running in certain environments, might allow local users to read restricted files, as demonstrated by reading /etc/crontab. CWE-200
Information Exposure
CVE-2012-6097 2024-11-21 10:45 2013-04-10 Show GitHub Exploit DB Packet Storm
297666 - redhat
gluster
storage_native_client
storage_server
storage_management_console
glusterfs
The GlusterFS functionality in Red Hat Storage Management Console 2.0, Native Client, and Server 2.0 allows local users to overwrite arbitrary files via a symlink attack on multiple temporary files c… CWE-264
Permissions, Privileges, and Access Controls
CVE-2012-5635 2024-11-21 10:45 2013-04-10 Show GitHub Exploit DB Packet Storm
297667 - transmissionbt
fedoraproject
canonical
transmission
fedora
ubuntu_linux
Stack-based buffer overflow in utp.cpp in libutp, as used in Transmission before 2.74 and possibly other products, allows remote attackers to cause a denial of service (crash) and possibly execute ar… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2012-6129 2024-11-21 10:45 2013-04-3 Show GitHub Exploit DB Packet Storm
297668 - redhat
candlepinproject
subscription_asset_manager
candlepin
Candlepin before 0.7.24, as used in Red Hat Subscription Asset Manager before 1.2.1, does not properly check manifest signatures, which allows local users to modify manifests. CWE-264
Permissions, Privileges, and Access Controls
CVE-2012-6119 2024-11-21 10:45 2013-04-3 Show GitHub Exploit DB Packet Storm
297669 - mcafee mcafee_virtual_technician
epo_mcafee_virtual_technician
An ActiveX control in McHealthCheck.dll in McAfee Virtual Technician (MVT) and ePO-MVT 6.5.0.2101 and earlier allows remote attackers to modify or create arbitrary files via a full pathname argument … CWE-264
Permissions, Privileges, and Access Controls
CVE-2012-5879 2024-11-21 10:45 2013-03-29 Show GitHub Exploit DB Packet Storm
297670 - ibm lotus_inotes Cross-site scripting (XSS) vulnerability in IBM iNotes 8.5.x before 8.5.3 FP4 allows user-assisted remote attackers to inject arbitrary web script or HTML via vectors involving mail, aka SPR JDOE8ZZS… CWE-79
Cross-site Scripting
CVE-2012-5943 2024-11-21 10:45 2013-03-27 Show GitHub Exploit DB Packet Storm