Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 18, 2026, 4:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
216141	4.3	警告	オラクル	-	Oracle E-Business Suite の Oracle Applications Framework における LOV に関する脆弱性	CWE-noinfo 情報不足	CVE-2014-6539	2014-10-17 09:53	2014-10-14	Show	GitHub Exploit DB Packet Storm

216142	4	警告	オラクル	-	Oracle E-Business Suite の Oracle Applications Framework における REST Interface に関する脆弱性	CWE-noinfo 情報不足	CVE-2014-6523	2014-10-17 09:52	2014-10-14	Show	GitHub Exploit DB Packet Storm

216143	4	警告	オラクル	-	Oracle E-Business Suite の Oracle Applications Technology における OC4J Configuration に関する脆弱性	CWE-noinfo 情報不足	CVE-2014-6479	2014-10-17 09:51	2014-10-14	Show	GitHub Exploit DB Packet Storm

216144	4.3	警告	オラクル	-	Oracle E-Business Suite の Oracle Applications Framework における LOV に関する脆弱性	CWE-noinfo 情報不足	CVE-2014-6472	2014-10-17 09:51	2014-10-14	Show	GitHub Exploit DB Packet Storm

216145	4.3	警告	オラクル	-	Oracle E-Business Suite の Oracle Applications Manager における OAM Diagnostics に関する脆弱性	CWE-noinfo 情報不足	CVE-2014-6471	2014-10-17 09:50	2014-10-14	Show	GitHub Exploit DB Packet Storm

216146	4.3	警告	オラクル	-	Oracle E-Business Suite の Oracle Applications Technology における Reports Configuration に関する脆弱性	CWE-noinfo 情報不足	CVE-2014-4285	2014-10-17 09:50	2014-10-14	Show	GitHub Exploit DB Packet Storm

216147	4.3	警告	オラクル	-	Oracle E-Business Suite の Oracle Applications Framework における Portal Integration に関する脆弱性	CWE-noinfo 情報不足	CVE-2014-4281	2014-10-17 09:49	2014-10-14	Show	GitHub Exploit DB Packet Storm

216148	7.5	危険	オラクル	-	Oracle E-Business Suite の Oracle Applications Technology Stack における Oracle Forms に関する脆弱性	CWE-noinfo 情報不足	CVE-2014-4278	2014-10-17 09:49	2014-10-14	Show	GitHub Exploit DB Packet Storm

216149	4	警告	オラクル	-	Oracle Database Server の Java VM における脆弱性	CWE-noinfo 情報不足	CVE-2014-6563	2014-10-17 09:46	2014-10-14	Show	GitHub Exploit DB Packet Storm

216150	9	危険	オラクル	-	Oracle Database Server の Java VM における脆弱性	CWE-noinfo 情報不足	CVE-2014-6560	2014-10-17 09:46	2014-10-14	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 18, 2026, 4:12 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
295321	-	breakingpointsystems	breakingpoint_storm_appliance_ctm breakingpoint_storm_appliance	The BreakingPoint Storm appliance before 3.0 requires cleartext credentials for establishing a session from a GUI administrative client, which allows remote attackers to obtain sensitive information …	CWE-20 Improper Input Validation	CVE-2012-2964	2024-11-21 10:40	2012-08-13	Show	GitHub Exploit DB Packet Storm

295322	-	breakingpointsystems	breakingpoint_storm_appliance_ctm breakingpoint_storm_appliance	The administrative interface in the embedded web server on the BreakingPoint Storm appliance before 3.0 does not require authentication for the gwt/BugReport script, which allows remote attackers to …	CWE-287 Improper Authentication	CVE-2012-2963	2024-11-21 10:40	2012-08-13	Show	GitHub Exploit DB Packet Storm

295323	-	pnp4nagios	pnp4nagios	PNP4Nagios 0.6 through 0.6.16 uses world-readable permissions for process_perfdata.cfg, which allows local users to obtain the Gearman shared secret by reading the file.	CWE-264 Permissions, Privileges, and Access Controls	CVE-2012-3457	2024-11-21 10:40	2012-08-12	Show	GitHub Exploit DB Packet Storm

295324	-	oracle	database_server	SQL injection vulnerability in Oracle Database Server 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.2, and 11.2.0.3 allows remote authenticated users to execute arbitrary SQL commands via vectors in…	CWE-89 SQL Injection	CVE-2012-3132	2024-11-21 10:40	2012-08-11	Show	GitHub Exploit DB Packet Storm

295325	-	rubyonrails	ruby_on_rails rails	Cross-site scripting (XSS) vulnerability in actionpack/lib/action_view/helpers/sanitize_helper.rb in the strip_tags helper in Ruby on Rails before 3.0.17, 3.1.x before 3.1.8, and 3.2.x before 3.2.8 a…	CWE-79 Cross-site Scripting	CVE-2012-3465	2024-11-21 10:40	2012-08-10	Show	GitHub Exploit DB Packet Storm

295326	-	rubyonrails	ruby_on_rails rails	Cross-site scripting (XSS) vulnerability in activesupport/lib/active_support/core_ext/string/output_safety.rb in Ruby on Rails before 3.0.17, 3.1.x before 3.1.8, and 3.2.x before 3.2.8 might allow re…	CWE-79 Cross-site Scripting	CVE-2012-3464	2024-11-21 10:40	2012-08-10	Show	GitHub Exploit DB Packet Storm

295327	-	rubyonrails	ruby_on_rails rails	Cross-site scripting (XSS) vulnerability in actionpack/lib/action_view/helpers/form_tag_helper.rb in Ruby on Rails 3.x before 3.0.17, 3.1.x before 3.1.8, and 3.2.x before 3.2.8 allows remote attacker…	CWE-79 Cross-site Scripting	CVE-2012-3463	2024-11-21 10:40	2012-08-10	Show	GitHub Exploit DB Packet Storm

295328	-	todd_miller redhat	sudo enterprise_linux	A certain Red Hat script for sudo 1.7.2 on Red Hat Enterprise Linux (RHEL) 5 allows local users to overwrite arbitrary files via a symlink attack on the /var/tmp/nsswitch.conf.bak temporary file.	CWE-59 Link Following	CVE-2012-3440	2024-11-21 10:40	2012-08-8	Show	GitHub Exploit DB Packet Storm

295329	-	rubyonrails	ruby_on_rails rails	The decode_credentials method in actionpack/lib/action_controller/metal/http_authentication.rb in Ruby on Rails 3.x before 3.0.16, 3.1.x before 3.1.7, and 3.2.x before 3.2.7 converts Digest Authentic…	CWE-287 Improper Authentication	CVE-2012-3424	2024-11-21 10:40	2012-08-8	Show	GitHub Exploit DB Packet Storm

295330	-	hp	arcsight_connector_appliance_firmware arcsight_connector_appliance arcsight_logger_appliance_firmware arcsight_logger_appliance	Cross-site scripting (XSS) vulnerability in the import functionality in HP ArcSight Connector appliance 6.2.0.6244.0 and ArcSight Logger appliance 5.2.0.6288.0 allows remote attackers to inject arbit…	CWE-79 Cross-site Scripting	CVE-2012-2960	2024-11-21 10:40	2012-08-8	Show	GitHub Exploit DB Packet Storm