Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 21, 2026, 6:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
217881 2.3 注意 オラクル - Oracle PeopleSoft Products の PeopleSoft Enterprise SCM Purchasing における Purchasing に関する脆弱性 CWE-noinfo
情報不足 		CVE-2014-2495 2014-07-18 16:40 2014-07-15 Show GitHub Exploit DB Packet Storm
217882 5.5 警告 オラクル - Oracle PeopleSoft Products の PeopleSoft Enterprise ELS Enterprise Learning Management における Enterprise Learning Mgmt に関する脆弱性 CWE-noinfo
情報不足 		CVE-2014-2456 2014-07-18 16:40 2014-07-15 Show GitHub Exploit DB Packet Storm
217883 5 警告 オラクル - Oracle Supply Chain Products Suite の Oracle Transportation Management における Data および Domain & Function Security に関する脆弱性 CWE-noinfo
情報不足 		CVE-2014-4234 2014-07-18 16:39 2014-07-15 Show GitHub Exploit DB Packet Storm
217884 5.5 警告 オラクル - Oracle Supply Chain Products Suite の Oracle Transportation Management における Data および Domain & Function Security に関する脆弱性 CWE-noinfo
情報不足 		CVE-2014-4229 2014-07-18 16:38 2014-07-15 Show GitHub Exploit DB Packet Storm
217885 4.3 警告 オラクル - Oracle Supply Chain Products Suite の Oracle Agile Product Collaboration における Web client に関する脆弱性 CWE-noinfo
情報不足 		CVE-2014-2492 2014-07-18 16:37 2014-07-15 Show GitHub Exploit DB Packet Storm
217886 1 注意 オラクル - Oracle E-Business Suite の Oracle Application Object Library における Logging に関する脆弱性 CWE-noinfo
情報不足 		CVE-2014-4248 2014-07-18 16:36 2014-07-15 Show GitHub Exploit DB Packet Storm
217887 3.5 注意 オラクル - Oracle E-Business Suite の Oracle iStore における脆弱性 CWE-noinfo
情報不足 		CVE-2014-4235 2014-07-18 16:36 2014-07-15 Show GitHub Exploit DB Packet Storm
217888 4.3 警告 オラクル - Oracle E-Business Suite の Oracle Applications Manager における脆弱性 CWE-noinfo
情報不足 		CVE-2014-4213 2014-07-18 16:35 2014-07-15 Show GitHub Exploit DB Packet Storm
217889 5.5 警告 オラクル - Oracle E-Business Suite の Oracle Concurrent Processing における脆弱性 CWE-noinfo
情報不足 		CVE-2014-2482 2014-07-18 16:34 2014-07-15 Show GitHub Exploit DB Packet Storm
217890 6.9 警告 オラクル - Oracle Virtualization の Oracle VM VirtualBox における Core に関する脆弱性 CWE-noinfo
情報不足 		CVE-2014-4261 2014-07-18 16:11 2014-07-15 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 21, 2026, 4:10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
296931 - mediafront mediafront Multiple cross-site scripting (XSS) vulnerabilities in the "stand alone PHP application for the OSM Player," as used in the MediaFront module 6.x-1.x before 6.x-1.5 and 7.x-1.x before 7.x-1.5 for Dru… CWE-79
Cross-site Scripting 		CVE-2012-1647 2024-11-21 10:37 2012-08-29 Show GitHub Exploit DB Packet Storm
296932 - wimleers cdn The CDN module 6.x-2.2 and 7.x-2.2 for Drupal, when running in Origin Pull mode with the "Far Future expiration" option enabled, allows remote attackers to read arbitrary PHP files via unspecified ve… CWE-200
Information Exposure 		CVE-2012-1645 2024-11-21 10:37 2012-08-29 Show GitHub Exploit DB Packet Storm
296933 - gizra og_vocab The Organic Groups (OG) Vocabulary module 6.x-1.x before 6.x-1.2 for Drupal allows remote authenticated users with certain administrator permissions to modify the vocabularies of other groups via uns… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2012-1644 2024-11-21 10:37 2012-08-29 Show GitHub Exploit DB Packet Storm
296934 - jason_savino fp The Faster Permissions module 7.x-2.x before 7.x-1.2 for Drupal does not check the "administer permissions" permission, which allows remote attackers to modify access permissions via unspecified vect… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2012-1643 2024-11-21 10:37 2012-08-29 Show GitHub Exploit DB Packet Storm
296935 - yaml-fuer-drupal linkchecker includes/linkchecker.pages.inc in the Link checker module 6.x-2.x before 6.x-2.5 for Drupal does not properly enforce access permissions on broken links, which allows remote attackers to obtain sensi… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2012-1642 2024-11-21 10:37 2012-08-29 Show GitHub Exploit DB Packet Storm
296936 - danielb finder The finder_import function in the Finder module 6.x-1.x before 6.x-1.26, 7.x-1.x, and 7.x-2.x before 7.x-2.0-alpha8 for Drupal allows remote authenticated users with the administer finder permission … CWE-264
Permissions, Privileges, and Access Controls 		CVE-2012-1641 2024-11-21 10:37 2012-08-29 Show GitHub Exploit DB Packet Storm
296937 - rik_de_boer revisioning The hook_node_access function in the revisioning module 7.x-1.x before 7.x-1.3 for Drupal checks the permissions of the current user even when it is called to check permissions of other users, which … CWE-264
Permissions, Privileges, and Access Controls 		CVE-2012-1635 2024-11-21 10:37 2012-08-29 Show GitHub Exploit DB Packet Storm
296938 - debian cifs-utils mount.cifs in cifs-utils 2.6 allows local users to determine the existence of arbitrary files or directories via the file path in the second argument, which reveals their existence in an error messag… CWE-200
Information Exposure 		CVE-2012-1586 2024-11-21 10:37 2012-08-28 Show GitHub Exploit DB Packet Storm
296939 - ez ezjscore Cross-site scripting (XSS) vulnerability in the textEncode function in classes/ezjscajaxcontent.php in eZ JS Core in eZ Publish before 1.5 allows remote attackers to inject arbitrary web script or HT… CWE-79
Cross-site Scripting 		CVE-2012-1597 2024-11-21 10:37 2012-08-17 Show GitHub Exploit DB Packet Storm
296940 - openstack nova OpenStack Compute (Nova) Essex before 2011.3 allows remote authenticated users to cause a denial of service (Nova-API log file and disk consumption) via a long server name. CWE-399
 Resource Management Errors 		CVE-2012-1585 2024-11-21 10:37 2012-08-17 Show GitHub Exploit DB Packet Storm