Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 21, 2026, 6:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
217921 4.3 警告 オラクル - Oracle Siebel CRM の Siebel UI Framework における Portal Framework に関する脆弱性 CWE-noinfo
情報不足 		CVE-2014-2491 2014-07-18 11:01 2014-07-15 Show GitHub Exploit DB Packet Storm
217922 1.4 注意 オラクル - Oracle Siebel CRM の Siebel Core - EAI における Integration Business Services に関する脆弱性 CWE-noinfo
情報不足 		CVE-2014-2485 2014-07-18 11:01 2014-07-15 Show GitHub Exploit DB Packet Storm
217923 4.3 警告 shopizer-ecommerce - Shopizer におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2014-4965 2014-07-17 17:41 2014-07-10 Show GitHub Exploit DB Packet Storm
217924 6.8 警告 shopizer-ecommerce - Shopizer におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2014-4964 2014-07-17 17:40 2014-07-10 Show GitHub Exploit DB Packet Storm
217925 6.8 警告 shopizer-ecommerce - Shopizer における任意のユーザのアカウント設定を変更される脆弱性 CWE-noinfo
情報不足 		CVE-2014-4963 2014-07-17 17:39 2014-07-10 Show GitHub Exploit DB Packet Storm
217926 6.4 警告 shopizer-ecommerce - Shopizer におけるショッピングカートの総コストを減らされる脆弱性 CWE-189
数値処理の問題 		CVE-2014-4962 2014-07-17 17:39 2014-07-10 Show GitHub Exploit DB Packet Storm
217927 8.5 危険 ヒューレット・パッカード - HP Intelligent Management Center および Branch Intelligent Management System における重要な情報を取得される脆弱性 CWE-noinfo
情報不足 		CVE-2014-2622 2014-07-17 16:46 2014-07-14 Show GitHub Exploit DB Packet Storm
217928 7.8 危険 ヒューレット・パッカード - HP Intelligent Management Center および Branch Intelligent Management System における重要な情報を取得される脆弱性 CWE-noinfo
情報不足 		CVE-2014-2621 2014-07-17 16:45 2014-07-14 Show GitHub Exploit DB Packet Storm
217929 7.8 危険 ヒューレット・パッカード - HP Intelligent Management Center および Branch Intelligent Management System における重要な情報を取得される脆弱性 CWE-noinfo
情報不足 		CVE-2014-2620 2014-07-17 16:45 2014-07-14 Show GitHub Exploit DB Packet Storm
217930 7.8 危険 ヒューレット・パッカード - HP Intelligent Management Center および Branch Intelligent Management System における重要な情報を取得される脆弱性 CWE-noinfo
情報不足 		CVE-2014-2619 2014-07-17 16:45 2014-07-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 21, 2026, 4:10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
296931 - mediafront mediafront Multiple cross-site scripting (XSS) vulnerabilities in the "stand alone PHP application for the OSM Player," as used in the MediaFront module 6.x-1.x before 6.x-1.5 and 7.x-1.x before 7.x-1.5 for Dru… CWE-79
Cross-site Scripting 		CVE-2012-1647 2024-11-21 10:37 2012-08-29 Show GitHub Exploit DB Packet Storm
296932 - wimleers cdn The CDN module 6.x-2.2 and 7.x-2.2 for Drupal, when running in Origin Pull mode with the "Far Future expiration" option enabled, allows remote attackers to read arbitrary PHP files via unspecified ve… CWE-200
Information Exposure 		CVE-2012-1645 2024-11-21 10:37 2012-08-29 Show GitHub Exploit DB Packet Storm
296933 - gizra og_vocab The Organic Groups (OG) Vocabulary module 6.x-1.x before 6.x-1.2 for Drupal allows remote authenticated users with certain administrator permissions to modify the vocabularies of other groups via uns… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2012-1644 2024-11-21 10:37 2012-08-29 Show GitHub Exploit DB Packet Storm
296934 - jason_savino fp The Faster Permissions module 7.x-2.x before 7.x-1.2 for Drupal does not check the "administer permissions" permission, which allows remote attackers to modify access permissions via unspecified vect… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2012-1643 2024-11-21 10:37 2012-08-29 Show GitHub Exploit DB Packet Storm
296935 - yaml-fuer-drupal linkchecker includes/linkchecker.pages.inc in the Link checker module 6.x-2.x before 6.x-2.5 for Drupal does not properly enforce access permissions on broken links, which allows remote attackers to obtain sensi… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2012-1642 2024-11-21 10:37 2012-08-29 Show GitHub Exploit DB Packet Storm
296936 - danielb finder The finder_import function in the Finder module 6.x-1.x before 6.x-1.26, 7.x-1.x, and 7.x-2.x before 7.x-2.0-alpha8 for Drupal allows remote authenticated users with the administer finder permission … CWE-264
Permissions, Privileges, and Access Controls 		CVE-2012-1641 2024-11-21 10:37 2012-08-29 Show GitHub Exploit DB Packet Storm
296937 - rik_de_boer revisioning The hook_node_access function in the revisioning module 7.x-1.x before 7.x-1.3 for Drupal checks the permissions of the current user even when it is called to check permissions of other users, which … CWE-264
Permissions, Privileges, and Access Controls 		CVE-2012-1635 2024-11-21 10:37 2012-08-29 Show GitHub Exploit DB Packet Storm
296938 - debian cifs-utils mount.cifs in cifs-utils 2.6 allows local users to determine the existence of arbitrary files or directories via the file path in the second argument, which reveals their existence in an error messag… CWE-200
Information Exposure 		CVE-2012-1586 2024-11-21 10:37 2012-08-28 Show GitHub Exploit DB Packet Storm
296939 - ez ezjscore Cross-site scripting (XSS) vulnerability in the textEncode function in classes/ezjscajaxcontent.php in eZ JS Core in eZ Publish before 1.5 allows remote attackers to inject arbitrary web script or HT… CWE-79
Cross-site Scripting 		CVE-2012-1597 2024-11-21 10:37 2012-08-17 Show GitHub Exploit DB Packet Storm
296940 - openstack nova OpenStack Compute (Nova) Essex before 2011.3 allows remote authenticated users to cause a denial of service (Nova-API log file and disk consumption) via a long server name. CWE-399
 Resource Management Errors 		CVE-2012-1585 2024-11-21 10:37 2012-08-17 Show GitHub Exploit DB Packet Storm