Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 18, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
216191	4.3	警告	オラクル	-	Oracle Fusion Middleware の Oracle Access Manager における Admin Console に関する脆弱性	CWE-noinfo 情報不足	CVE-2014-6462	2014-10-16 15:37	2014-10-14	Show	GitHub Exploit DB Packet Storm

216192	4.3	警告	オラクル	-	Oracle JD Edwards Products の JD Edwards EnterpriseOne Tools における Installation SEC に関する脆弱性	CWE-noinfo 情報不足	CVE-2014-6516	2014-10-16 14:59	2014-10-14	Show	GitHub Exploit DB Packet Storm

216193	1.9	注意	オラクル	-	Oracle Virtualization の Oracle VM VirtualBox における Graphics driver for Windows guests に関する脆弱性	CWE-noinfo 情報不足	CVE-2014-6540	2014-10-16 14:18	2014-10-14	Show	GitHub Exploit DB Packet Storm

216194	5	警告	オラクル	-	Oracle Virtualization の Oracle Secure Global Desktop における SGD Proxy Server に関する脆弱性	CWE-noinfo 情報不足	CVE-2014-6459	2014-10-16 14:17	2014-10-14	Show	GitHub Exploit DB Packet Storm

216195	5	警告	オラクル	-	Oracle Virtualization の Oracle Secure Global Desktop における SGD Proxy Server に関する脆弱性	CWE-noinfo 情報不足	CVE-2014-2476	2014-10-16 14:16	2014-10-14	Show	GitHub Exploit DB Packet Storm

216196	5	警告	オラクル	-	Oracle Virtualization の Oracle Secure Global Desktop における SGD Proxy Server に関する脆弱性	CWE-noinfo 情報不足	CVE-2014-2475	2014-10-16 14:16	2014-10-14	Show	GitHub Exploit DB Packet Storm

216197	5	警告	オラクル	-	Oracle Virtualization の Oracle Secure Global Desktop における SGD Proxy Server に関する脆弱性	CWE-noinfo 情報不足	CVE-2014-2474	2014-10-16 14:15	2014-10-14	Show	GitHub Exploit DB Packet Storm

216198	5	警告	オラクル	-	Oracle Virtualization の Oracle Secure Global Desktop における SGD Proxy Server および SGD SSL Daemon に関する脆弱性	CWE-noinfo 情報不足	CVE-2014-2473	2014-10-16 14:14	2014-10-14	Show	GitHub Exploit DB Packet Storm

216199	5	警告	オラクル	-	Oracle Virtualization の Oracle Secure Global Desktop における SGD Proxy Server に関する脆弱性	CWE-noinfo 情報不足	CVE-2014-2472	2014-10-16 14:13	2014-10-14	Show	GitHub Exploit DB Packet Storm

216200	7.8	危険	トライポッドワークス株式会社	-	GIGAPOD におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2014-5329	2014-10-16 12:05	2014-10-16	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 18, 2026, 4:12 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
294201	6.5	MEDIUM Network	trilexnet debian	letodms debian_linux	letodms 3.3.6 has CSRF via change password	CWE-352 Origin Validation Error	CVE-2012-4385	2024-11-21 10:42	2019-11-14	Show	GitHub Exploit DB Packet Storm

294202	6.1	MEDIUM Network	trilexnet debian	letodms debian_linux	letodms has multiple XSS issues: Reflected XSS in Login Page, Stored XSS in Document Owner/User name, Stored XSS in Calendar	CWE-79 Cross-site Scripting	CVE-2012-4384	2024-11-21 10:42	2019-11-14	Show	GitHub Exploit DB Packet Storm

294203	9.8	CRITICAL Network	apache	hadoop	Apache Hadoop before 0.23.4, 1.x before 1.0.4, and 2.x before 2.0.2 generate token passwords using a 20-bit secret when Kerberos security features are enabled, which makes it easier for context-depen…	CWE-327 Use of a Broken or Risky Cryptographic Algorithm	CVE-2012-4449	2024-11-21 10:42	2017-10-31	Show	GitHub Exploit DB Packet Storm

294204	6.1	MEDIUM Network	mediawiki	mediawiki	Multiple cross-site scripting (XSS) vulnerabilities in MediaWiki before 1.18.5 and 1.19.x before 1.19.2, when unspecified JavaScript gadgets are used, allow remote attackers to inject arbitrary web s…	CWE-79 Cross-site Scripting	CVE-2012-4378	2024-11-21 10:42	2017-10-27	Show	GitHub Exploit DB Packet Storm

294205	6.1	MEDIUM Network	mediawiki	mediawiki	Cross-site scripting (XSS) vulnerability in MediaWiki before 1.18.5 and 1.19.x before 1.19.2 allows remote attackers to inject arbitrary web script or HTML via a File: link to a nonexistent image.	CWE-79 Cross-site Scripting	CVE-2012-4377	2024-11-21 10:42	2017-10-27	Show	GitHub Exploit DB Packet Storm

294206	4.9	MEDIUM Network	mediawiki	mediawiki	MediaWiki before 1.18.5, and 1.19.x before 1.19.2 does not properly protect user block metadata, which allows remote administrators to read a user block reason via a reblock attempt.	CWE-200 Information Exposure	CVE-2012-4382	2024-11-21 10:42	2017-10-20	Show	GitHub Exploit DB Packet Storm

294207	7.5	HIGH Network	mediawiki	mediawiki	MediaWiki before 1.18.5, and 1.19.x before 1.19.2 allows remote attackers to bypass GlobalBlocking extension IP address blocking and create an account via unspecified vectors.	CWE-284 Improper Access Control	CVE-2012-4380	2024-11-21 10:42	2017-10-20	Show	GitHub Exploit DB Packet Storm

294208	6.5	MEDIUM Network	mediawiki	mediawiki	MediaWiki before 1.18.5, and 1.19.x before 1.19.2 does not send a restrictive X-Frame-Options HTTP header, which allows remote attackers to conduct clickjacking attacks via an embedded API response i…	CWE-284 Improper Access Control	CVE-2012-4379	2024-11-21 10:42	2017-10-20	Show	GitHub Exploit DB Packet Storm

294209	-		group-office	groupoffice	SQL injection vulnerability in modules/calendar/json.php in Group-Office community before 4.0.90 allows remote authenticated users to execute arbitrary SQL commands via the sort parameter.	CWE-89 SQL Injection	CVE-2012-4240	2024-11-21 10:42	2014-09-11	Show	GitHub Exploit DB Packet Storm

294210	-		phorum	phorum	Cross-site scripting (XSS) vulnerability in the group moderation screen in the control center (control.php) in Phorum before 5.2.19 allows remote attackers to inject arbitrary web script or HTML via …	CWE-79 Cross-site Scripting	CVE-2012-4234	2024-11-21 10:42	2014-09-4	Show	GitHub Exploit DB Packet Storm