Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 8, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
209371	2.1	注意	オラクル	-	Oracle Virtualization の Oracle VM VirtualBox における Core に関する脆弱性	CWE-noinfo 情報不足	CVE-2015-4896	2015-10-23 10:16	2015-10-20	Show	GitHub Exploit DB Packet Storm

209372	4.9	警告	オラクル	-	Oracle Virtualization の Oracle VM VirtualBox における Core に関する脆弱性	CWE-noinfo 情報不足	CVE-2015-4856	2015-10-23 10:16	2015-10-20	Show	GitHub Exploit DB Packet Storm

209373	4.9	警告	オラクル	-	Oracle Virtualization の Oracle VM VirtualBox における Core に関する脆弱性	CWE-noinfo 情報不足	CVE-2015-4813	2015-10-23 10:16	2015-10-20	Show	GitHub Exploit DB Packet Storm

209374	4.3	警告	オラクル	-	Oracle Communications Applications の Oracle Communications Convergence における Mail Proxy に関する脆弱性	CWE-noinfo 情報不足	CVE-2015-4793	2015-10-23 09:51	2015-10-20	Show	GitHub Exploit DB Packet Storm

209375	10	危険	オラクル	-	Oracle Communications Applications の複数のコンポーネントにおける PMAC に関する脆弱性	CWE-noinfo 情報不足	CVE-2015-2608	2015-10-23 09:51	2015-10-20	Show	GitHub Exploit DB Packet Storm

209376	7.5	危険	ICU project Google オラクル	-	Google Chrome で使用される International Components for Unicode の i18n/ucol.cpp の collator の実装におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2014-7940	2015-10-23 09:49	2014-11-26	Show	GitHub Exploit DB Packet Storm

209377	3.5	注意	オラクル	-	Oracle Supply Chain Products Suite の Oracle Agile PLM における Security に関する脆弱性	CWE-noinfo 情報不足	CVE-2015-4917	2015-10-23 09:39	2015-10-20	Show	GitHub Exploit DB Packet Storm

209378	3.5	注意	オラクル	-	Oracle Supply Chain Products Suite の Oracle Agile PLM における Security に関する脆弱性	CWE-noinfo 情報不足	CVE-2015-4892	2015-10-23 09:39	2015-10-20	Show	GitHub Exploit DB Packet Storm

209379	5	警告	オラクル	-	Oracle Supply Chain Products Suite の Oracle Configurator における Integration with Peoplesoft に関する脆弱性	CWE-noinfo 情報不足	CVE-2015-4848	2015-10-23 09:39	2015-10-20	Show	GitHub Exploit DB Packet Storm

209380	4.3	警告	オラクル	-	Oracle Supply Chain Products Suite の Oracle Configurator における OCI に関する脆弱性	CWE-noinfo 情報不足	CVE-2015-4847	2015-10-23 09:39	2015-10-20	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 9, 2026, 4:16 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
298091	-	quest	intrust	The Annotation Objects Extension ActiveX control in AnnotateX.dll in Quest InTrust 10.4.0.853 and earlier does not properly implement the Add method, which allows remote attackers to execute arbitrar…	NVD-CWE-Other	CVE-2012-5896	2024-11-21 10:45	2012-11-18	Show	GitHub Exploit DB Packet Storm

298092	-	irods	irods	Multiple unspecified vulnerabilities in iRODS before 3.1 have unknown impact and attack vectors.	NVD-CWE-noinfo	CVE-2012-5895	2024-11-21 10:45	2012-11-18	Show	GitHub Exploit DB Packet Storm

298093	-	havalite	cms	SQL injection vulnerability in hava_post.php in Havalite CMS 1.1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the postId parameter.	CWE-89 SQL Injection	CVE-2012-5894	2024-11-21 10:45	2012-11-18	Show	GitHub Exploit DB Packet Storm

298094	-	havalite	cms	Unrestricted file upload vulnerability in hava_upload.php in Havalite CMS 1.1.0 and earlier allows remote attackers to execute arbitrary code by uploading a file with a .php;.gif extension, then acce…	NVD-CWE-Other	CVE-2012-5893	2024-11-21 10:45	2012-11-18	Show	GitHub Exploit DB Packet Storm

298095	-	havalite	cms	Havalite CMS 1.1.0 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the configuration database via a direct requ…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2012-5892	2024-11-21 10:45	2012-11-18	Show	GitHub Exploit DB Packet Storm

298096	-	dalbum	dalbum	Multiple cross-site request forgery (CSRF) vulnerabilities in photo/pass.php in DAlbum 1.44 build 174 and earlier allow remote attackers to hijack the authentication of administrators for requests th…	CWE-352 Origin Validation Error	CVE-2012-5891	2024-11-21 10:45	2012-11-18	Show	GitHub Exploit DB Packet Storm

298097	-	stanislas_rolland	sr_feuser_register	The Front End User Registration (sr_feuser_register) extension before 2.6.2 for TYPO3 allows remote attackers to obtain user names and passwords via the (1) edit perspective or (2) autologin feature.	CWE-200 Information Exposure	CVE-2012-5890	2024-11-21 10:45	2012-11-18	Show	GitHub Exploit DB Packet Storm

298098	-	alex_kellner	powermail	Cross-site scripting (XSS) vulnerability in the powermail extension before 1.6.5 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.	CWE-79 Cross-site Scripting	CVE-2012-5889	2024-11-21 10:45	2012-11-18	Show	GitHub Exploit DB Packet Storm

298099	-	benjamin_mack	seo_basics	Cross-site scripting (XSS) vulnerability in Basic SEO Features (seo_basics) extension before 0.8.2 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.	CWE-79 Cross-site Scripting	CVE-2012-5888	2024-11-21 10:45	2012-11-18	Show	GitHub Exploit DB Packet Storm

298100	-	apache	tomcat	The HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.36, 6.x before 6.0.36, and 7.x before 7.0.30 does not properly check for stale nonce values in conjunction with …	CWE-287 Improper Authentication	CVE-2012-5887	2024-11-21 10:45	2012-11-18	Show	GitHub Exploit DB Packet Storm