Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 9, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
218881	6.8	警告	マイクロソフト IBM オラクル	-	Oracle Fusion Middleware の Oracle Outside In Technology における Outside In Filters の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2013-0418	2014-02-21 18:28	2013-01-15	Show	GitHub Exploit DB Packet Storm

218882	6.8	警告	マイクロソフト IBM オラクル	-	Oracle Fusion Middleware の Oracle Outside In Technology における Outside In Filters の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2013-0393	2014-02-21 18:27	2013-01-15	Show	GitHub Exploit DB Packet Storm

218883	7.5	危険	IBM オラクル	-	Oracle Outside In Technology における Outside In Image Export SDK の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2012-0557	2014-02-21 18:27	2012-04-17	Show	GitHub Exploit DB Packet Storm

218884	2.1	注意	マイクロソフト IBM オラクル	-	Oracle Fusion Middleware の Oracle Outside In Technology における Outside In HTML Export SDK の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2012-3217	2014-02-21 18:26	2012-10-16	Show	GitHub Exploit DB Packet Storm

218885	7.5	危険	IBM オラクル	-	Oracle Outside In Technology における Outside In Image Export SDK の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2012-0556	2014-02-21 18:25	2012-04-17	Show	GitHub Exploit DB Packet Storm

218886	7.5	危険	IBM オラクル	-	Oracle Outside In Technology における Outside In Image Export SDK の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2012-0555	2014-02-21 18:23	2012-04-17	Show	GitHub Exploit DB Packet Storm

218887	2.1	注意	マイクロソフト IBM オラクル	-	Oracle Fusion Middleware の Oracle Outside In Technology における Outside In Filters の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2012-3214	2014-02-21 18:22	2012-10-16	Show	GitHub Exploit DB Packet Storm

218888	7.5	危険	IBM オラクル	-	Oracle Outside In Technology における Outside In Image Export SDK の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2012-0554	2014-02-21 18:21	2012-04-17	Show	GitHub Exploit DB Packet Storm

218889	2.1	注意	マイクロソフトシマンテック IBM オラクル	-	Oracle Fusion Middleware の Oracle Outside In Technology における脆弱性	CWE-noinfo 情報不足	CVE-2012-3110	2014-02-21 18:20	2012-07-17	Show	GitHub Exploit DB Packet Storm

218890	4.4	警告	シマンテック IBM オラクル	-	Oracle Outside In に任意のコードが実行される脆弱性	CWE-noinfo 情報不足	CVE-2012-0110	2014-02-21 18:18	2012-01-19	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 10, 2026, 4:58 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
293301	-	ushahidi	ushahidi_platform	Multiple SQL injection vulnerabilities in the edit functions in (1) application/controllers/admin/reports.php and (2) application/controllers/members/reports.php in the Ushahidi Platform before 2.5 a…	CWE-89 SQL Injection	CVE-2012-3471	2024-11-21 10:40	2012-08-13	Show	GitHub Exploit DB Packet Storm

293302	-	ushahidi	ushahidi_platform	Multiple SQL injection vulnerabilities in application/libraries/api/MY_Countries_Api_Object.php in the Ushahidi Platform before 2.5 allow remote attackers to execute arbitrary SQL commands via vector…	CWE-89 SQL Injection	CVE-2012-3470	2024-11-21 10:40	2012-08-13	Show	GitHub Exploit DB Packet Storm

293303	-	ushahidi	ushahidi_platform	Multiple SQL injection vulnerabilities in the Ushahidi Platform before 2.5 allow remote attackers to execute arbitrary SQL commands via vectors related to (1) the messages admin functionality in appl…	CWE-89 SQL Injection	CVE-2012-3469	2024-11-21 10:40	2012-08-13	Show	GitHub Exploit DB Packet Storm

293304	-	ushahidi	ushahidi_platform	Multiple SQL injection vulnerabilities in the Ushahidi Platform before 2.5 allow remote attackers to execute arbitrary SQL commands via vectors related to (1) the verify function in application/contr…	CWE-89 SQL Injection	CVE-2012-3468	2024-11-21 10:40	2012-08-13	Show	GitHub Exploit DB Packet Storm

293305	-	caucho	resin	Caucho Quercus, as distributed in Resin before 4.0.29, allows remote attackers to bypass intended restrictions on filename extensions for created files via a %00 sequence in a pathname within an HTTP…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2012-2969	2024-11-21 10:40	2012-08-13	Show	GitHub Exploit DB Packet Storm

293306	-	caucho	resin	Directory traversal vulnerability in Caucho Quercus, as distributed in Resin before 4.0.29, allows remote attackers to create files in arbitrary directories via a .. (dot dot) in a pathname within an…	CWE-22 Path Traversal	CVE-2012-2968	2024-11-21 10:40	2012-08-13	Show	GitHub Exploit DB Packet Storm

293307	-	caucho	resin	Caucho Quercus, as distributed in Resin before 4.0.29, does not properly implement the == (equals sign equals sign) operator for comparisons, which has unspecified impact and context-dependent attack…	NVD-CWE-Other	CVE-2012-2967	2024-11-21 10:40	2012-08-13	Show	GitHub Exploit DB Packet Storm

293308	-	caucho	resin	Caucho Quercus, as distributed in Resin before 4.0.29, overwrites entries in the SERVER superglobal array on the basis of POST parameters, which has unspecified impact and remote attack vectors.	NVD-CWE-Other	CVE-2012-2966	2024-11-21 10:40	2012-08-13	Show	GitHub Exploit DB Packet Storm

293309	-	caucho	resin	Caucho Quercus, as distributed in Resin before 4.0.29, does not properly handle unspecified characters in the names of variables, which has unknown impact and remote attack vectors, related to an "HT…	CWE-20 Improper Input Validation	CVE-2012-2965	2024-11-21 10:40	2012-08-13	Show	GitHub Exploit DB Packet Storm

293310	-	breakingpointsystems	breakingpoint_storm_appliance_ctm breakingpoint_storm_appliance	The BreakingPoint Storm appliance before 3.0 requires cleartext credentials for establishing a session from a GUI administrative client, which allows remote attackers to obtain sensitive information …	CWE-20 Improper Input Validation	CVE-2012-2964	2024-11-21 10:40	2012-08-13	Show	GitHub Exploit DB Packet Storm