Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 24, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
219701	7.5	危険	オラクル	-	Oracle Fusion Middleware の Oracle WebLogic Server における WLS Security に関する脆弱性	CWE-noinfo 情報不足	CVE-2014-2470	2014-04-18 14:54	2014-04-15	Show	GitHub Exploit DB Packet Storm

219702	4	警告	オラクル	-	Oracle Fusion Middleware の Oracle Access Manager における Webserver Plugin に関する脆弱性	CWE-noinfo 情報不足	CVE-2014-2452	2014-04-18 14:54	2014-04-15	Show	GitHub Exploit DB Packet Storm

219703	4.9	警告	オラクル	-	Oracle Fusion Middleware の Oracle OpenSSO における Admin Console に関する脆弱性	CWE-noinfo 情報不足	CVE-2014-2426	2014-04-18 14:54	2014-04-15	Show	GitHub Exploit DB Packet Storm

219704	4	警告	オラクル	-	Oracle Fusion Middleware の Oracle OpenSSO における Other に関する脆弱性	CWE-noinfo 情報不足	CVE-2014-2425	2014-04-18 14:54	2014-04-15	Show	GitHub Exploit DB Packet Storm

219705	4	警告	オラクル	-	Oracle Fusion Middleware の Oracle Event Processing における CEP システムに関する脆弱性	CWE-noinfo 情報不足	CVE-2014-2424	2014-04-18 14:54	2014-04-15	Show	GitHub Exploit DB Packet Storm

219706	5	警告	オラクル	-	Oracle Fusion Middleware の Oracle Data Integrator における Data Quality に関する脆弱性	CWE-noinfo 情報不足	CVE-2014-2418	2014-04-18 14:54	2014-04-15	Show	GitHub Exploit DB Packet Storm

219707	5	警告	オラクル	-	Oracle Fusion Middleware の Oracle Data Integrator における Data Quality に関する脆弱性	CWE-noinfo 情報不足	CVE-2014-2417	2014-04-18 14:54	2014-04-15	Show	GitHub Exploit DB Packet Storm

219708	5	警告	オラクル	-	Oracle Fusion Middleware の Oracle Data Integrator における Data Quality に関する脆弱性	CWE-noinfo 情報不足	CVE-2014-2416	2014-04-18 14:54	2014-04-15	Show	GitHub Exploit DB Packet Storm

219709	5	警告	オラクル	-	Oracle Fusion Middleware の Oracle Data Integrator における Data Quality に関する脆弱性	CWE-noinfo 情報不足	CVE-2014-2415	2014-04-18 14:54	2014-04-15	Show	GitHub Exploit DB Packet Storm

219710	6.5	警告	オラクル	-	Oracle Fusion Middleware の Oracle Identity Analytics における Security に関する脆弱性	CWE-noinfo 情報不足	CVE-2014-2411	2014-04-18 14:54	2014-04-15	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 24, 2026, 4:05 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
294471	-	mavili_guestbook_project	mavili_guestbook	Mavili Guestbook, as released in November 2007, stores guestbook.mdb under the web root with insufficient access control, which allows remote attackers to read the database via a direct request.	CWE-264 Permissions, Privileges, and Access Controls	CVE-2012-5298	2024-11-21 10:44	2012-10-5	Show	GitHub Exploit DB Packet Storm

294472	-	mavili_guestbook_project	mavili_guestbook	SQL injection vulnerability in edit.asp in Mavili Guestbook, as released in November 2007, allows remote attackers to execute arbitrary SQL commands via the id parameter.	CWE-89 SQL Injection	CVE-2012-5297	2024-11-21 10:44	2012-10-5	Show	GitHub Exploit DB Packet Storm

294473	-	mavili_guestbook_project	mavili_guestbook	Multiple cross-site scripting (XSS) vulnerabilities in Mavili Guestbook, as released in November 2007, allow remote attackers to inject arbitrary web script or HTML via the id parameter to (1) approv…	CWE-79 Cross-site Scripting	CVE-2012-5296	2024-11-21 10:44	2012-10-5	Show	GitHub Exploit DB Packet Storm

294474	-	fusetalk fusetalk.	fusetalk	Cross-site scripting (XSS) vulnerability in login.cfm in FuseTalk Forums 3.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the windowed parameter.	CWE-79 Cross-site Scripting	CVE-2012-5295	2024-11-21 10:44	2012-10-5	Show	GitHub Exploit DB Packet Storm

294475	-	mystorexpress	tienda_virtual	SQL injection vulnerability in art_detalle.php in MyStore Xpress Tienda Virtual allows remote attackers to execute arbitrary SQL commands via the id parameter.	CWE-89 SQL Injection	CVE-2012-5294	2024-11-21 10:44	2012-10-5	Show	GitHub Exploit DB Packet Storm

294476	-	redgraphic	sapid_cms	Multiple PHP remote file inclusion vulnerabilities in SAPID CMS 1.2.3 Stable allow remote attackers to execute arbitrary PHP code via a URL in the (1) GLOBALS[root_path] parameter to usr/extensions/g…	CWE-94 Code Injection	CVE-2012-5293	2024-11-21 10:44	2012-10-5	Show	GitHub Exploit DB Packet Storm

294477	-	atar2b	atar2b_cms	Multiple SQL injection vulnerabilities in Atar2b CMS 4.0.1 allow remote attackers to execute arbitrary SQL commands via the id parameter to (1) gallery_e.php, (2) pageE.php, or (3) pageH.php.	CWE-89 SQL Injection	CVE-2012-5292	2024-11-21 10:44	2012-10-5	Show	GitHub Exploit DB Packet Storm

294478	-	possesports	posse_softball_director_cms	SQL injection vulnerability in team.php in Posse Softball Director CMS allows remote attackers to execute arbitrary SQL commands via the idteam parameter.	CWE-89 SQL Injection	CVE-2012-5291	2024-11-21 10:44	2012-10-5	Show	GitHub Exploit DB Packet Storm

294479	-	wcs4web	easywebrealestate	Multiple SQL injection vulnerabilities in EasyWebRealEstate allow remote attackers to execute arbitrary SQL commands via the (1) lstid parameter to listings.php or (2) infoid parameter to index.php.	CWE-89 SQL Injection	CVE-2012-5290	2024-11-21 10:44	2012-10-5	Show	GitHub Exploit DB Packet Storm

294480	-	plogger	plogger	Multiple SQL injection vulnerabilities in Plogger 1.0 RC1 allow remote attackers to execute arbitrary SQL commands via the id parameter to (1) index.php or (2) gallery.php.	CWE-89 SQL Injection	CVE-2012-5289	2024-11-21 10:44	2012-10-5	Show	GitHub Exploit DB Packet Storm