Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 9, 2026, 2:01 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
209401 2.1 注意 オラクル - Oracle E-Business Suite の Oracle Applications Framework における Business Objects - BC4J に関する脆弱性 CWE-noinfo
情報不足
CVE-2015-4865 2015-10-22 14:53 2015-10-20 Show GitHub Exploit DB Packet Storm
209402 5.8 警告 オラクル - Oracle Enterprise Manager Grid Control の Enterprise Manager Base Platform における Agent Next Gen に関する脆弱性 CWE-noinfo
情報不足
CVE-2015-4859 2015-10-22 14:53 2015-10-20 Show GitHub Exploit DB Packet Storm
209403 4.3 警告 オラクル - Oracle E-Business Suite の Oracle Application Object Library における Single Signon に関する脆弱性 CWE-noinfo
情報不足
CVE-2015-4854 2015-10-22 14:53 2015-10-20 Show GitHub Exploit DB Packet Storm
209404 6.8 警告 オラクル - Oracle E-Business Suite の Oracle iSupplier Portal における XML input に関する脆弱性 CWE-noinfo
情報不足
CVE-2015-4851 2015-10-22 14:53 2015-10-20 Show GitHub Exploit DB Packet Storm
209405 6.8 警告 オラクル - Oracle E-Business Suite の Oracle Payments における Punch-in に関する脆弱性 CWE-noinfo
情報不足
CVE-2015-4849 2015-10-22 14:53 2015-10-20 Show GitHub Exploit DB Packet Storm
209406 3.6 注意 オラクル - Oracle E-Business Suite の Oracle Applications Manager における SQL Extensions に関する脆弱性 CWE-noinfo
情報不足
CVE-2015-4846 2015-10-22 14:53 2015-10-20 Show GitHub Exploit DB Packet Storm
209407 4.3 警告 オラクル - Oracle E-Business Suite の Oracle Application Object Library における Java APIs - AOL/J に関する脆弱性 CWE-noinfo
情報不足
CVE-2015-4845 2015-10-22 14:53 2015-10-20 Show GitHub Exploit DB Packet Storm
209408 4 警告 オラクル - Oracle E-Business Suite の Oracle Applications DBA における Online patching に関する脆弱性 CWE-noinfo
情報不足
CVE-2015-4762 2015-10-22 14:53 2015-10-20 Show GitHub Exploit DB Packet Storm
209409 3.6 注意 オラクル - Oracle Enterprise Manager Grid Control の Enterprise Manager Ops Center における Ops Center に関する脆弱性 CWE-noinfo
情報不足
CVE-2015-2633 2015-10-22 14:53 2015-10-20 Show GitHub Exploit DB Packet Storm
209410 1.2 注意 オラクル - Oracle Hyperion の Hyperion Installation Technology における Essbase Rapid Deploy に関する脆弱性 CWE-noinfo
情報不足
CVE-2015-4823 2015-10-22 14:50 2015-10-20 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 9, 2026, 4:16 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
297741 - intel connman ConnMan 1.3 on Tizen continues to list the bluetooth service after offline mode has been enabled, which might allow remote attackers to obtain sensitive information via Bluetooth packets. CWE-200
Information Exposure
CVE-2012-6459 2024-11-21 10:46 2013-01-2 Show GitHub Exploit DB Packet Storm
297742 - lemonldap-ng lemonldap\ LemonLDAP::NG before 1.2.3 does not use the signature-verification capability of the Lasso library, which allows remote attackers to bypass intended access-control restrictions via crafted SAML data. CWE-264
Permissions, Privileges, and Access Controls
CVE-2012-6426 2024-11-21 10:46 2013-01-2 Show GitHub Exploit DB Packet Storm
297743 - belkin n900_wireless_router The WPA2 implementation on the Belkin N900 F9K1104v1 router establishes a WPS PIN based on 6 digits of the LAN/WLAN MAC address, which makes it easier for remote attackers to obtain access to a Wi-Fi… CWE-310
Cryptographic Issues
CVE-2012-6371 2024-11-21 10:46 2013-01-1 Show GitHub Exploit DB Packet Storm
297744 - mediawiki rssreader Cross-site scripting (XSS) vulnerability in the RSS Reader extension before 0.2.6 for MediaWiki allows remote attackers to inject arbitrary web script or HTML via a crafted feed. CWE-79
Cross-site Scripting
CVE-2012-6453 2024-11-21 10:46 2012-12-31 Show GitHub Exploit DB Packet Storm
297745 - cerberusftp ftp_server Multiple cross-site scripting (XSS) vulnerabilities in the administrative web interface in Cerberus FTP Server before 5.0.6.0 allow (1) remote attackers to inject arbitrary web script or HTML via a l… CWE-79
Cross-site Scripting
CVE-2012-6339 2024-11-21 10:46 2012-12-31 Show GitHub Exploit DB Packet Storm
297746 - samsung samsungdive The Track My Mobile feature in the SamsungDive subsystem for Android on Samsung Galaxy devices shows the activation of remote tracking, which might allow physically proximate attackers to defeat a pr… CWE-200
Information Exposure
CVE-2012-6337 2024-11-21 10:46 2012-12-31 Show GitHub Exploit DB Packet Storm
297747 - lookout lookout The Missing Device feature in Lookout allows physically proximate attackers to provide arbitrary location data via a "commonly available simple GPS location spoofer." NVD-CWE-noinfo
CVE-2012-6336 2024-11-21 10:46 2012-12-31 Show GitHub Exploit DB Packet Storm
297748 - avg avg_antivirus The Anti-theft service in AVG AntiVirus for Android allows physically proximate attackers to provide arbitrary location data via a "commonly available simple GPS location spoofer." NVD-CWE-noinfo
CVE-2012-6335 2024-11-21 10:46 2012-12-31 Show GitHub Exploit DB Packet Storm
297749 - samsung samsungdive The Track My Mobile feature in the SamsungDive subsystem for Android on Samsung Galaxy devices does not properly implement Location APIs, which allows physically proximate attackers to provide arbitr… CWE-264
Permissions, Privileges, and Access Controls
CVE-2012-6334 2024-11-21 10:46 2012-12-31 Show GitHub Exploit DB Packet Storm
297750 - 1password 1password Cross-site scripting (XSS) vulnerability in the Troubleshooting Reporting System feature in AgileBits 1Password 3.9.9 might allow remote attackers to inject arbitrary web script or HTML via a crafted… CWE-79
Cross-site Scripting
CVE-2012-6369 2024-11-21 10:46 2012-12-28 Show GitHub Exploit DB Packet Storm