Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 28, 2026, 4:09 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
217911 6 警告 Django Software Foundation - Django の contrib.auth.middleware.RemoteUserMiddleware のミドルウェアにおける Web セッションをハイジャックされる脆弱性 CWE-287
不適切な認証
CVE-2014-0482 2014-08-28 13:47 2014-08-20 Show GitHub Exploit DB Packet Storm
217912 4.3 警告 Django Software Foundation - Django のファイルアップロード処理システムのデフォルト設定におけるサービス運用妨害 (DoS) の脆弱性 CWE-16
環境設定
CVE-2014-0481 2014-08-28 13:46 2014-08-20 Show GitHub Exploit DB Packet Storm
217913 5.8 警告 Django Software Foundation - Django の core.urlresolvers.reverse 関数におけるフィッシング攻撃を実行される脆弱性 CWE-20
不適切な入力確認
CVE-2014-0480 2014-08-28 13:46 2014-08-20 Show GitHub Exploit DB Packet Storm
217914 2.1 注意 QNAP Systems - 複数の QNAP 製品のファームウェアにおけるユーザ名およびハッシュ化されたパスワードを取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2014-5457 2014-08-27 17:50 2014-07-11 Show GitHub Exploit DB Packet Storm
217915 4.6 警告 シスコシステムズ - Cisco ASR 9000 デバイス上で稼動する Cisco IOS XR におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2014-3335 2014-08-27 17:14 2014-08-25 Show GitHub Exploit DB Packet Storm
217916 7.5 危険 php-sqrl project - php-sqrl の sqrl_verify.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2014-5458 2014-08-27 16:34 2014-08-17 Show GitHub Exploit DB Packet Storm
217917 4.9 警告 IBM - IBM Emptoris Sourcing Portfolio および Emptoris Spend Analysis におけるフィッシング攻撃を実行される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2014-4790 2014-08-27 16:25 2014-08-12 Show GitHub Exploit DB Packet Storm
217918 6 警告 IBM - 複数の IBM Emptoris 製品におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2014-3040 2014-08-27 16:24 2014-08-12 Show GitHub Exploit DB Packet Storm
217919 3.5 注意 IBM - IBM Emptoris Sourcing Portfolio におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-3033 2014-08-27 16:24 2014-08-12 Show GitHub Exploit DB Packet Storm
217920 2.6 注意 サン・マイクロシステムズ
Linux
IBM
ヒューレット・パッカード
- 複数の OS 上で稼動する IBM Tivoli Storage Manager for Space Management のバックアップ/アーカイブ・クライアントにおけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2013-6335 2014-08-27 16:23 2013-10-31 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
297241 - oracle e-business_suite Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.3 allows local users to affect confidentiality, related to MDS loading. NVD-CWE-noinfo
CVE-2012-3162 2024-11-21 10:40 2012-10-17 Show GitHub Exploit DB Packet Storm
297242 - oracle supply_chain_products_suite Unspecified vulnerability in the Oracle Agile PLM Framework component in Oracle Supply Chain Products Suite 9.3.1.1 allows remote attackers to affect integrity via unknown vectors related to Web Clie… NVD-CWE-noinfo
CVE-2012-3161 2024-11-21 10:40 2012-10-17 Show GitHub Exploit DB Packet Storm
297243 - oracle
canonical
debian
mariadb
redhat
mysql
ubuntu_linux
debian_linux
mariadb
enterprise_linux_desktop
enterprise_linux_server
enterprise_linux_workstation
enterprise_linux_eus
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.65 and earlier, and 5.5.27 and earlier, allows local users to affect confidentiality via unknown vectors related to Server … NVD-CWE-noinfo
CVE-2012-3160 2024-11-21 10:40 2012-10-17 Show GitHub Exploit DB Packet Storm
297244 - oracle
mariadb
debian
canonical
redhat
mysql
mariadb
debian_linux
ubuntu_linux
enterprise_linux_desktop
enterprise_linux_server
enterprise_linux_workstation
enterprise_linux_eus
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.64 and earlier, and 5.5.26 and earlier, allows remote attackers to affect confidentiality, integrity, and availability via … NVD-CWE-noinfo
CVE-2012-3158 2024-11-21 10:40 2012-10-17 Show GitHub Exploit DB Packet Storm
297245 - oracle financial_services_software Unspecified vulnerability in the Oracle FLEXCUBE Direct Banking component in Oracle Financial Services Software 5.0.2, 5.0.5, 5.1.0, 5.2.0, 5.3.0 through 5.3.4, 6.0.1, 6.2.0, and 12 allows remote aut… NVD-CWE-noinfo
CVE-2012-3157 2024-11-21 10:40 2012-10-17 Show GitHub Exploit DB Packet Storm
297246 - oracle mysql Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.25 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server. NVD-CWE-noinfo
CVE-2012-3156 2024-11-21 10:40 2012-10-17 Show GitHub Exploit DB Packet Storm
297247 - sun
oracle
java_system_application_server
glassfish_server
Unspecified vulnerability in the CORBA ORB component in Sun GlassFish Enterprise Server 2.1.1, Oracle GlassFish Server 3.0.1 and 3.1.2, and Sun Java System Application Server 8.1 and 8.2 allows remot… NVD-CWE-noinfo
CVE-2012-3155 2024-11-21 10:40 2012-10-17 Show GitHub Exploit DB Packet Storm
297248 - oracle supply_chain_products_suite Unspecified vulnerability in the Oracle Agile PLM Framework component in Oracle Supply Chain Products Suite 9.3.1.0 allows remote authenticated users to affect confidentiality, related to ATTACH. NVD-CWE-noinfo
CVE-2012-3154 2024-11-21 10:40 2012-10-17 Show GitHub Exploit DB Packet Storm
297249 - oracle database_server Unspecified vulnerability in the Core RDBMS component in Oracle Database Server 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.2, and 11.2.0.3, when running on Unix and Linux platforms, allows local users to a… NVD-CWE-noinfo
CVE-2012-3151 2024-11-21 10:40 2012-10-17 Show GitHub Exploit DB Packet Storm
297250 - oracle
mariadb
debian
canonical
redhat
mysql
mariadb
debian_linux
ubuntu_linux
enterprise_linux_desktop
enterprise_linux_server
enterprise_linux_workstation
enterprise_linux_eus
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.64 and earlier, and 5.5.26 and earlier, allows remote authenticated users to affect availability via unknown vectors relate… NVD-CWE-noinfo
CVE-2012-3150 2024-11-21 10:40 2012-10-17 Show GitHub Exploit DB Packet Storm