Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 25, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
216891	3.6	注意	オラクル	-	Oracle Supply Chain Products Suite の Agile PLM における ITEM に関する脆弱性	CWE-noinfo 情報不足	CVE-2014-6543	2014-10-17 10:56	2014-10-14	Show	GitHub Exploit DB Packet Storm

216892	3.5	注意	オラクル	-	Oracle Supply Chain Products Suite の Agile PLM における Security に関する脆弱性	CWE-noinfo 情報不足	CVE-2014-6536	2014-10-17 10:55	2014-10-14	Show	GitHub Exploit DB Packet Storm

216893	6.8	警告	オラクル	-	Oracle Supply Chain Products Suite の Oracle Transportation Management における Security に関する脆弱性	CWE-noinfo 情報不足	CVE-2014-6533	2014-10-17 10:55	2014-10-14	Show	GitHub Exploit DB Packet Storm

216894	5	警告	オラクル	-	Oracle Supply Chain Products Suite の Oracle Transportation Management における Security に関する脆弱性	CWE-noinfo 情報不足	CVE-2014-6498	2014-10-17 10:54	2014-10-14	Show	GitHub Exploit DB Packet Storm

216895	4.9	警告	オラクル	-	Oracle Supply Chain Products Suite の Agile PLM における Roles & Privileges に関する脆弱性	CWE-noinfo 情報不足	CVE-2014-6461	2014-10-17 10:54	2014-10-14	Show	GitHub Exploit DB Packet Storm

216896	6.3	警告	オラクル	-	Oracle Communications Applications の Oracle Communications Session Border Controller における Lawful Intercept に関する脆弱性	CWE-noinfo 情報不足	CVE-2014-6465	2014-10-17 10:10	2014-10-14	Show	GitHub Exploit DB Packet Storm

216897	4.3	警告	オラクル	-	Oracle E-Business Suite の Oracle Payments における Separate Remittance Advice に関する脆弱性	CWE-noinfo 情報不足	CVE-2014-6561	2014-10-17 09:54	2014-10-14	Show	GitHub Exploit DB Packet Storm

216898	4.3	警告	オラクル	-	Oracle E-Business Suite の Oracle Applications Object Library における iHelp に関する脆弱性	CWE-noinfo 情報不足	CVE-2014-6550	2014-10-17 09:53	2014-10-14	Show	GitHub Exploit DB Packet Storm

216899	4.3	警告	オラクル	-	Oracle E-Business Suite の Oracle Applications Framework における LOV に関する脆弱性	CWE-noinfo 情報不足	CVE-2014-6539	2014-10-17 09:53	2014-10-14	Show	GitHub Exploit DB Packet Storm

216900	4	警告	オラクル	-	Oracle E-Business Suite の Oracle Applications Framework における REST Interface に関する脆弱性	CWE-noinfo 情報不足	CVE-2014-6523	2014-10-17 09:52	2014-10-14	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 25, 2026, 4:01 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
296711	-	emc	avamar avamar_plugin	EMC Avamar Client 4.x, 5.x, and 6.x on HP-UX and Mac OS X, and the EMC Avamar plugin 4.x, 5.x, and 6.x for Oracle, uses world-writable permissions for cache directories, which allows local users to g…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2012-2291	2024-11-21 10:38	2013-01-22	Show	GitHub Exploit DB Packet Storm

296712	-	redhat squirrelmail	enterprise_linux squirrelmail	functions/imap_general.php in SquirrelMail, as used in Red Hat Enterprise Linux (RHEL) 4 and 5, does not properly handle 8-bit characters in passwords, which allows remote attackers to cause a denial…	CWE-399 Resource Management Errors	CVE-2012-2124	2024-11-21 10:38	2013-01-18	Show	GitHub Exploit DB Packet Storm

296713	-	pizzashack	rssh	Incomplete blacklist vulnerability in rssh before 2.3.4, when the rsync protocol is enabled, allows local users to bypass intended restricted shell access via the --rsh command line option.	NVD-CWE-Other	CVE-2012-2252	2024-11-21 10:38	2013-01-11	Show	GitHub Exploit DB Packet Storm

296714	-	pizzashack	rssh	rssh 2.3.2, as used by Debian, Fedora, and others, when the rsync protocol is enabled, allows local users to bypass intended restricted shell access via a (1) "-e" or (2) "--" command line option.	CWE-20 Improper Input Validation	CVE-2012-2251	2024-11-21 10:38	2013-01-11	Show	GitHub Exploit DB Packet Storm

296715	-	apache	cxf	Apache CXF 2.4.5 through 2.4.7, 2.5.1 through 2.5.3, and 2.6.x before 2.6.1, does not properly enforce child policies of a WS-SecurityPolicy 1.1 SupportingToken policy on the client side, which allow…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2012-2378	2024-11-21 10:38	2013-01-5	Show	GitHub Exploit DB Packet Storm

296716	-	apache	cxf	Apache CXF 2.4.x before 2.4.8, 2.5.x before 2.5.4, and 2.6.x before 2.6.1, when a Supporting Token specifies a child WS-SecurityPolicy 1.1 or 1.2 policy, does not properly ensure that an XML element …	NVD-CWE-noinfo	CVE-2012-2379	2024-11-21 10:38	2013-01-3	Show	GitHub Exploit DB Packet Storm

296717	-	mahara	mahara	Cross-site scripting (XSS) vulnerability in group/members.php in Mahara 1.5.x before 1.5.7 and 1.6.x before 1.6.2 allows remote attackers to inject arbitrary web script or HTML via the query paramete…	CWE-79 Cross-site Scripting	CVE-2012-2253	2024-11-21 10:38	2012-11-25	Show	GitHub Exploit DB Packet Storm

296718	-	mahara	mahara	Cross-site scripting (XSS) vulnerability in Mahara 1.4.x before 1.4.5 and 1.5.x before 1.5.4 allows remote attackers to inject arbitrary web script or HTML via vectors related to artefact/file/ and a…	CWE-79 Cross-site Scripting	CVE-2012-2247	2024-11-21 10:38	2012-11-25	Show	GitHub Exploit DB Packet Storm

296719	-	mahara	mahara	Mahara 1.4.x before 1.4.5 and 1.5.x before 1.5.4 allows remote attackers to conduct clickjacking attacks to delete arbitrary users and bypass CSRF protection via account/delete.php.	CWE-20 Improper Input Validation	CVE-2012-2246	2024-11-21 10:38	2012-11-25	Show	GitHub Exploit DB Packet Storm

296720	-	mahara	mahara	Mahara 1.4.x before 1.4.5 and 1.5.x before 1.5.4 allows remote authenticated administrators to execute arbitrary programs by modifying the path to clamav. NOTE: this can be exploited without authent…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2012-2244	2024-11-21 10:38	2012-11-25	Show	GitHub Exploit DB Packet Storm