Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 13, 2026, 2:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
216521	2.3	注意	オラクル	-	Oracle PeopleSoft Products の PeopleSoft Enterprise SCM Purchasing における Purchasing に関する脆弱性	CWE-noinfo 情報不足	CVE-2014-2495	2014-07-18 16:40	2014-07-15	Show	GitHub Exploit DB Packet Storm

216522	5.5	警告	オラクル	-	Oracle PeopleSoft Products の PeopleSoft Enterprise ELS Enterprise Learning Management における Enterprise Learning Mgmt に関する脆弱性	CWE-noinfo 情報不足	CVE-2014-2456	2014-07-18 16:40	2014-07-15	Show	GitHub Exploit DB Packet Storm

216523	5	警告	オラクル	-	Oracle Supply Chain Products Suite の Oracle Transportation Management における Data および Domain & Function Security に関する脆弱性	CWE-noinfo 情報不足	CVE-2014-4234	2014-07-18 16:39	2014-07-15	Show	GitHub Exploit DB Packet Storm

216524	5.5	警告	オラクル	-	Oracle Supply Chain Products Suite の Oracle Transportation Management における Data および Domain & Function Security に関する脆弱性	CWE-noinfo 情報不足	CVE-2014-4229	2014-07-18 16:38	2014-07-15	Show	GitHub Exploit DB Packet Storm

216525	4.3	警告	オラクル	-	Oracle Supply Chain Products Suite の Oracle Agile Product Collaboration における Web client に関する脆弱性	CWE-noinfo 情報不足	CVE-2014-2492	2014-07-18 16:37	2014-07-15	Show	GitHub Exploit DB Packet Storm

216526	1	注意	オラクル	-	Oracle E-Business Suite の Oracle Application Object Library における Logging に関する脆弱性	CWE-noinfo 情報不足	CVE-2014-4248	2014-07-18 16:36	2014-07-15	Show	GitHub Exploit DB Packet Storm

216527	3.5	注意	オラクル	-	Oracle E-Business Suite の Oracle iStore における脆弱性	CWE-noinfo 情報不足	CVE-2014-4235	2014-07-18 16:36	2014-07-15	Show	GitHub Exploit DB Packet Storm

216528	4.3	警告	オラクル	-	Oracle E-Business Suite の Oracle Applications Manager における脆弱性	CWE-noinfo 情報不足	CVE-2014-4213	2014-07-18 16:35	2014-07-15	Show	GitHub Exploit DB Packet Storm

216529	5.5	警告	オラクル	-	Oracle E-Business Suite の Oracle Concurrent Processing における脆弱性	CWE-noinfo 情報不足	CVE-2014-2482	2014-07-18 16:34	2014-07-15	Show	GitHub Exploit DB Packet Storm

216530	6.9	警告	オラクル	-	Oracle Virtualization の Oracle VM VirtualBox における Core に関する脆弱性	CWE-noinfo 情報不足	CVE-2014-4261	2014-07-18 16:11	2014-07-15	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 13, 2026, 5:05 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
295581	-	webglimpse	webglimpse	Multiple cross-site scripting (XSS) vulnerabilities in wgarcmin.cgi in Webglimpse 2.20.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) URL, (2) FILE, or (3) DO…	CWE-79 Cross-site Scripting	CVE-2012-1787	2024-11-21 10:37	2012-03-20	Show	GitHub Exploit DB Packet Storm

295582	-	kylegilman	video_embed_\&_thumbnail_generator	The Media Upload form in the Video Embed & Thumbnail Generator plugin before 2.0 for WordPress allows remote attackers to obtain the installation path via unknown vectors.	CWE-200 Information Exposure	CVE-2012-1786	2024-11-21 10:37	2012-03-20	Show	GitHub Exploit DB Packet Storm

295583	-	kylegilman	video_embed_\&_thumbnail_generator	kg_callffmpeg.php in the Video Embed & Thumbnail Generator plugin before 2.0 for WordPress allows remote attackers to execute arbitrary commands via unspecified vectors.	CWE-20 Improper Input Validation	CVE-2012-1785	2024-11-21 10:37	2012-03-20	Show	GitHub Exploit DB Packet Storm

295584	-	myjoblist	myjoblist	SQL injection vulnerability in MyJobList 0.1.3 allows remote attackers to execute arbitrary SQL commands via the eid parameter in a profile action to index.php.	CWE-89 SQL Injection	CVE-2012-1784	2024-11-21 10:37	2012-03-20	Show	GitHub Exploit DB Packet Storm

295585	-	saurabh_gupta	tiny_server	Tiny Server 1.1.9 and earlier allows remote attackers to cause a denial of service (crash) via a long string in a GET request without an HTTP version number.	CWE-20 Improper Input Validation	CVE-2012-1783	2024-11-21 10:37	2012-03-20	Show	GitHub Exploit DB Packet Storm

295586	-	osqa	osqa	Multiple cross-site scripting (XSS) vulnerabilities in questions/ask in OSQA 3b allow remote attackers to inject arbitrary web script or HTML via the (1) url bar or (2) picture bar.	CWE-79 Cross-site Scripting	CVE-2012-1782	2024-11-21 10:37	2012-03-20	Show	GitHub Exploit DB Packet Storm

295587	-	socialcms	socialcms	Multiple cross-site scripting (XSS) vulnerabilities in ajax/commentajax.php in SocialCMS 1.0.5 allow remote attackers to inject arbitrary web script or HTML via the (1) TREF_email_address or (2) TR_n…	CWE-79 Cross-site Scripting	CVE-2012-1781	2024-11-21 10:37	2012-03-20	Show	GitHub Exploit DB Packet Storm

295588	-	socialcms	socialcms	SQL injection vulnerability in search.php in SocialCMS 1.0.5 allows remote attackers to execute arbitrary SQL commands via the category parameter.	CWE-89 SQL Injection	CVE-2012-1780	2024-11-21 10:37	2012-03-20	Show	GitHub Exploit DB Packet Storm

295589	-	idevspot	idev-businessdirectory	Cross-site scripting (XSS) vulnerability in IDevSpot idev-BusinessDirectory 3.0 allows remote attackers to inject arbitrary web script or HTML via the SEARCH parameter to index.php.	CWE-79 Cross-site Scripting	CVE-2012-1779	2024-11-21 10:37	2012-03-20	Show	GitHub Exploit DB Packet Storm

295590	-	createvision	createvision_cms	SQL injection vulnerability in artykul_print.php in CreateVision CMS allows remote attackers to execute arbitrary SQL commands via the id parameter.	CWE-89 SQL Injection	CVE-2012-1778	2024-11-21 10:37	2012-03-20	Show	GitHub Exploit DB Packet Storm