Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 8, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
218901 4.4 警告 IBM
オラクル
- Oracle Application Server の Outside In Technology コンポーネントにおける脆弱性 CWE-noinfo
情報不足
CVE-2009-1011 2014-02-21 16:15 2009-04-15 Show GitHub Exploit DB Packet Storm
218902 4.4 警告 IBM
オラクル
- Oracle Application Server の Outside In Technology コンポーネントにおける脆弱性 CWE-noinfo
情報不足
CVE-2009-1010 2014-02-21 16:13 2009-04-15 Show GitHub Exploit DB Packet Storm
218903 4.4 警告 IBM
オラクル
- Oracle Application Server の Outside In Technology コンポーネントにおける脆弱性 CWE-noinfo
情報不足
CVE-2009-1009 2014-02-21 16:13 2009-04-15 Show GitHub Exploit DB Packet Storm
218904 4.4 警告 IBM
オラクル
- Oracle Application Server の Outside In Technology コンポーネントにおける脆弱性 CWE-noinfo
情報不足
CVE-2009-1008 2014-02-21 16:12 2009-04-15 Show GitHub Exploit DB Packet Storm
218905 10 危険 マイクロソフト
アドビシステムズ
Google
- Adobe Flash Player および Adobe AIR における ASLR 保護メカニズムを破られる脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2014-0492 2014-02-21 13:40 2014-01-14 Show GitHub Exploit DB Packet Storm
218906 10 危険 マイクロソフト
アドビシステムズ
Google
- Adobe Flash Player および Adobe AIR における不特定の保護メカニズムを回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2014-0491 2014-02-21 13:40 2014-01-14 Show GitHub Exploit DB Packet Storm
218907 3.5 注意 The phpMyAdmin Project - phpMyAdmin の import.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-1879 2014-02-21 12:26 2014-02-15 Show GitHub Exploit DB Packet Storm
218908 5.8 警告 feep.net - libtar の tar_extract_glob および tar_extract_all 関数におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2013-4420 2014-02-21 12:25 2013-12-10 Show GitHub Exploit DB Packet Storm
218909 5 警告 シスコシステムズ - Cisco Unified Communications Manager の Enterprise License Manager コンポーネントにおける ELM ファイルを読まれる脆弱性 CWE-287
不適切な認証
CVE-2014-0733 2014-02-21 11:42 2014-02-19 Show GitHub Exploit DB Packet Storm
218910 6.8 警告 シスコシステムズ - Cisco Unified Communications Manager の Call Detail Records Analysis and Reporting ページにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2014-0736 2014-02-21 11:37 2014-02-19 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 8, 2026, 4:54 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
295151 - projectforge projectforge Cross-site scripting (XSS) vulnerability in ProjectForge before 3.5.3 allows remote authenticated users to inject arbitrary web script or HTML via a validation message. CWE-79
Cross-site Scripting
CVE-2011-5269 2024-11-21 10:34 2014-01-2 Show GitHub Exploit DB Packet Storm
295152 - op5 monitor op5 Monitor and op5 Appliance before 5.5.0 do not properly manage session cookies, which allows remote attackers to have an unspecified impact via unspecified vectors. CWE-264
Permissions, Privileges, and Access Controls
CVE-2012-0264 2024-11-21 10:34 2014-01-1 Show GitHub Exploit DB Packet Storm
295153 - op5 monitor monitor/index.php in op5 Monitor and op5 Appliance before 5.5.1 allows remote authenticated users to obtain sensitive information such as database and user credentials via error messages that are tri… CWE-200
Information Exposure
CVE-2012-0263 2024-11-21 10:34 2014-01-1 Show GitHub Exploit DB Packet Storm
295154 - op5 monitor
system-op5config
op5config/welcome in system-op5config before 2.0.3 in op5 Monitor and op5 Appliance before 5.5.3 allows remote attackers to execute arbitrary commands via shell metacharacters in the password paramet… CWE-94
Code Injection
CVE-2012-0262 2024-11-21 10:34 2014-01-1 Show GitHub Exploit DB Packet Storm
295155 - op5 monitor
system-portal
license.php in system-portal before 1.6.2 in op5 Monitor and op5 Appliance before 5.5.3 allows remote attackers to execute arbitrary commands via shell metacharacters in the timestamp parameter for a… CWE-94
Code Injection
CVE-2012-0261 2024-11-21 10:34 2014-01-1 Show GitHub Exploit DB Packet Storm
295156 - duckcorp
fedoraproject
bip
fedora
connection.c in Bip before 0.8.9 does not properly close sockets, which allows remote attackers to cause a denial of service (file descriptor consumption and crash) via multiple failed SSL handshakes… CWE-310
Cryptographic Issues
CVE-2011-5268 2024-11-21 10:34 2013-12-25 Show GitHub Exploit DB Packet Storm
295157 - novell suse_cloud The server in Crowbar, as used in SUSE Cloud 1.0, uses weak permissions for the production.log file, which has unspecified impact and attack vectors. CWE-264
Permissions, Privileges, and Access Controls
CVE-2012-0434 2024-11-21 10:34 2013-12-2 Show GitHub Exploit DB Packet Storm
295158 - opensuse opensuse yast2-add-on-creator in SUSE inst-source-utils 2008.11.26 before 2008.11.26-0.9.1 and 2012.9.13 before 2012.9.13-0.8.1 allows local users to gain privileges via a crafted (1) file name or (2) directo… CWE-264
Permissions, Privileges, and Access Controls
CVE-2012-0427 2024-11-21 10:34 2013-12-2 Show GitHub Exploit DB Packet Storm
295159 - novell suse_linux_enterprise_for_sap_applications Race condition in sap_suse_cluster_connector before 1.0.0-0.8.1 in SUSE Linux Enterprise for SAP Applications 11 SP2 allows local users to have an unspecified impact via vectors related to a tmp/ dir… CWE-362
Race Condition
CVE-2012-0426 2024-11-21 10:34 2013-12-2 Show GitHub Exploit DB Packet Storm
295160 - opensuse opensuse LanItems.ycp in save_y2logs in yast2-network before 2.24.4 in SUSE YaST writes cleartext Wi-Fi credentials to the y2log log file, which allows context-dependent attackers to obtain sensitive informat… CWE-200
Information Exposure
CVE-2012-0425 2024-11-21 10:34 2013-12-2 Show GitHub Exploit DB Packet Storm