Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 20, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
216401 3.6 注意 オラクル - Oracle Database Server の JDBC における脆弱性 CWE-noinfo
情報不足 		CVE-2014-4289 2014-10-17 09:46 2014-10-14 Show GitHub Exploit DB Packet Storm
216402 2.6 注意 オラクル - Oracle Database Server の Core RDBMS における脆弱性 CWE-noinfo
情報不足 		CVE-2014-2478 2014-10-17 09:46 2014-10-14 Show GitHub Exploit DB Packet Storm
216403 5.8 警告 オラクル - Oracle PeopleSoft Products の PeopleSoft Enterprise PeopleTools における SECURITY に関する脆弱性 CWE-noinfo
情報不足 		CVE-2014-6535 2014-10-16 16:38 2014-10-14 Show GitHub Exploit DB Packet Storm
216404 4 警告 オラクル - Oracle PeopleSoft Products の PeopleSoft Enterprise HRMS における Talent Acquisition Manager - Security に関する脆弱性 CWE-noinfo
情報不足 		CVE-2014-6486 2014-10-16 16:37 2014-10-14 Show GitHub Exploit DB Packet Storm
216405 4 警告 オラクル - Oracle PeopleSoft Products の PeopleSoft Enterprise PeopleTools における Updates Change Assistant に関する脆弱性 CWE-noinfo
情報不足 		CVE-2014-6482 2014-10-16 16:37 2014-10-14 Show GitHub Exploit DB Packet Storm
216406 3.5 注意 オラクル - Oracle PeopleSoft Products の PeopleSoft Enterprise PeopleTools における Security に関する脆弱性 CWE-noinfo
情報不足 		CVE-2014-6475 2014-10-16 16:37 2014-10-14 Show GitHub Exploit DB Packet Storm
216407 4.9 警告 オラクル - Oracle PeopleSoft Products の PeopleSoft Enterprise PeopleTools における QUERY に関する脆弱性 CWE-noinfo
情報不足 		CVE-2014-6460 2014-10-16 16:36 2014-10-14 Show GitHub Exploit DB Packet Storm
216408 9.3 危険 オラクル - Oracle Java SE および JavaFX における JavaFX に関する脆弱性 CWE-noinfo
情報不足 		CVE-2014-6485 2014-10-16 16:28 2014-10-14 Show GitHub Exploit DB Packet Storm
216409 5.5 警告 オラクル - Oracle Fusion Middleware の Oracle Access Manager における Admin Console に関する脆弱性 CWE-noinfo
情報不足 		CVE-2014-6554 2014-10-16 15:41 2014-10-14 Show GitHub Exploit DB Packet Storm
216410 6.4 警告 オラクル - Oracle Fusion Middleware の Oracle Access Manager における Admin Console に関する脆弱性 CWE-noinfo
情報不足 		CVE-2014-6553 2014-10-16 15:41 2014-10-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 20, 2026, 4:14 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
296051 - w1.fi hostapd hostapd 0.7.3, and possibly other versions before 1.0, uses 0644 permissions for /etc/hostapd/hostapd.conf, which might allow local users to obtain sensitive information such as credentials. CWE-264
Permissions, Privileges, and Access Controls 		CVE-2012-2389 2024-11-21 10:39 2012-06-22 Show GitHub Exploit DB Packet Storm
296052 - cisco anyconnect_secure_mobility_client A certain Java applet in the VPN downloader implementation in the WebLaunch feature in Cisco AnyConnect Secure Mobility Client 3.x before 3.0 MR7 on 64-bit Linux platforms does not properly restrict … CWE-20
 Improper Input Validation  		CVE-2012-2496 2024-11-21 10:39 2012-06-21 Show GitHub Exploit DB Packet Storm
296053 - cisco secure_desktop
anyconnect_secure_mobility_client 		The HostScan downloader implementation in Cisco AnyConnect Secure Mobility Client 3.x before 3.0 MR8 and Cisco Secure Desktop before 3.6.6020 does not compare the timestamp of offered software to the… CWE-20
 Improper Input Validation  		CVE-2012-2495 2024-11-21 10:39 2012-06-21 Show GitHub Exploit DB Packet Storm
296054 - cisco anyconnect_secure_mobility_client The VPN downloader implementation in the WebLaunch feature in Cisco AnyConnect Secure Mobility Client 2.x before 2.5 MR6 and 3.x before 3.0 MR8 does not compare the timestamp of offered software to t… CWE-20
 Improper Input Validation  		CVE-2012-2494 2024-11-21 10:39 2012-06-21 Show GitHub Exploit DB Packet Storm
296055 - cisco anyconnect_secure_mobility_client The VPN downloader implementation in the WebLaunch feature in Cisco AnyConnect Secure Mobility Client 2.x before 2.5 MR6 on Windows, and 2.x before 2.5 MR6 and 3.x before 3.0 MR8 on Mac OS X and Linu… CWE-20
 Improper Input Validation  		CVE-2012-2493 2024-11-21 10:39 2012-06-21 Show GitHub Exploit DB Packet Storm
296056 - checkpoint remote_access_clients
endpoint_security
endpoint_connect
endpoint_security_vpn 		Untrusted search path vulnerability in TrGUI.exe in the Endpoint Connect (aka EPC) GUI in Check Point Endpoint Security R73.x and E80.x on the VPN blade platform, Endpoint Security VPN R75, Endpoint … NVD-CWE-Other
CVE-2012-2753 2024-11-21 10:39 2012-06-20 Show GitHub Exploit DB Packet Storm
296057 - wap2 smallpict Cross-site scripting (XSS) vulnerability in SmallPICT.cgi in SmallPICT before 2.7 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. CWE-79
Cross-site Scripting 		CVE-2012-2638 2024-11-21 10:39 2012-06-20 Show GitHub Exploit DB Packet Storm
296058 - kent-web web_patio Cross-site scripting (XSS) vulnerability in KENT-WEB WEB PATIO 4.04 and earlier might allow remote attackers to inject arbitrary web script or HTML via a crafted cookie. CWE-79
Cross-site Scripting 		CVE-2012-2637 2024-11-21 10:39 2012-06-20 Show GitHub Exploit DB Packet Storm
296059 - kent-web web_patio Cross-site scripting (XSS) vulnerability in KENT-WEB WEB PATIO 4.04 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. CWE-79
Cross-site Scripting 		CVE-2012-2636 2024-11-21 10:39 2012-06-20 Show GitHub Exploit DB Packet Storm
296060 - redhat libvirt libvirt, possibly before 0.9.12, does not properly assign USB devices to virtual machines when multiple devices have the same vendor and product ID, which might cause the wrong device to be associate… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2012-2693 2024-11-21 10:39 2012-06-17 Show GitHub Exploit DB Packet Storm