Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 28, 2026, noon

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
219941 4.3 警告 オラクル - Oracle Virtualization の Oracle Secure Global Desktop における Workspace Web Application に関する脆弱性 CWE-noinfo
情報不足 		CVE-2014-2463 2014-04-17 15:20 2014-04-15 Show GitHub Exploit DB Packet Storm
219942 4.4 警告 オラクル - Oracle Virtualization の Oracle VM VirtualBox における Windows ゲスト用のグラフィックドライバに関する脆弱性 CWE-noinfo
情報不足 		CVE-2014-2441 2014-04-17 15:20 2014-04-15 Show GitHub Exploit DB Packet Storm
219943 6.4 警告 オラクル - Oracle Virtualization の Oracle Secure Global Desktop における Workspace Web Application に関する脆弱性 CWE-noinfo
情報不足 		CVE-2014-2439 2014-04-17 15:19 2014-04-15 Show GitHub Exploit DB Packet Storm
219944 6.6 警告 オラクル - Oracle Database Server の Core RDBMS における Create Session および Grant Any Object Privilege に関する脆弱性 CWE-noinfo
情報不足 		CVE-2014-2408 2014-04-17 15:01 2014-04-15 Show GitHub Exploit DB Packet Storm
219945 8.5 危険 オラクル - Oracle Database Server の Core RDBMS における Create Session などに関する脆弱性 CWE-noinfo
情報不足 		CVE-2014-2406 2014-04-17 15:01 2014-04-15 Show GitHub Exploit DB Packet Storm
219946 7.9 危険 ZyXEL - ZyXEL Wireless N300 NetUSB NBG-419N ルータのファームウェアにおける任意のコードを実行される脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2014-0356 2014-04-17 10:59 2014-04-11 Show GitHub Exploit DB Packet Storm
219947 7.9 危険 ZyXEL - ZyXEL Wireless N300 NetUSB NBG-419N ルータのファームウェアにおけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2014-0355 2014-04-17 10:58 2014-04-11 Show GitHub Exploit DB Packet Storm
219948 7.8 危険 ZyXEL - ZyXEL Wireless N300 NetUSB NBG-419N ルータのファームウェアにおける index.asp のログインアクセス権を取得される脆弱性 CWE-255
証明書・パスワード管理 		CVE-2014-0354 2014-04-17 10:57 2014-04-11 Show GitHub Exploit DB Packet Storm
219949 6.1 警告 ZyXEL - ZyXEL Wireless N300 NetUSB NBG-419N ルータのファームウェアにおける認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2014-0353 2014-04-17 10:57 2014-04-11 Show GitHub Exploit DB Packet Storm
219950 9 危険 Xangati - Xangati XSR および XNR における任意のコマンドを実行される脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2014-0359 2014-04-17 09:27 2014-04-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
296041 - emc rsa_data_protection_manager_appliance EMC RSA Data Protection Manager Appliance 2.7.x and 3.x before 3.2.1 does not properly restrict the number of authentication attempts by a user account, which makes it easier for local users to bypas… CWE-287
Improper Authentication 		CVE-2012-4613 2024-11-21 10:43 2012-11-16 Show GitHub Exploit DB Packet Storm
296042 - emc rsa_data_protection_manager_appliance
rsa_data_protection_manager_software_server 		Cross-site scripting (XSS) vulnerability in EMC RSA Data Protection Manager Appliance and Software Server 2.7.x and 3.x before 3.2.1 allows remote attackers to inject arbitrary web script or HTML via… CWE-79
Cross-site Scripting 		CVE-2012-4612 2024-11-21 10:43 2012-11-16 Show GitHub Exploit DB Packet Storm
296043 - dell openmanage_server_administrator Cross-site scripting (XSS) vulnerability in Dell OpenManage Server Administrator (OMSA) before 6.5.0.1, 7.0 before 7.0.0.1, and 7.1 before 7.1.0.1 allows remote attackers to inject arbitrary web scri… CWE-79
Cross-site Scripting 		CVE-2012-4955 2024-11-21 10:43 2012-11-15 Show GitHub Exploit DB Packet Storm
296044 - vanillaforums vanilla_forums
vanilla 		The edit-profile page in Vanilla Forums before 2.1a32 allows remote authenticated users to modify arbitrary profile settings by replacing the UserID value during a man-in-the-middle attack, related t… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2012-4954 2024-11-21 10:43 2012-11-15 Show GitHub Exploit DB Packet Storm
296045 - verifone vericentre_web_console Multiple SQL injection vulnerabilities in terminal/paramedit.aspx in VeriFone VeriCentre Web Console before 2.2 build 36 allow remote attackers to execute arbitrary SQL commands via the (1) TerminalI… CWE-89
SQL Injection 		CVE-2012-4951 2024-11-21 10:43 2012-11-15 Show GitHub Exploit DB Packet Storm
296046 - symantec antivirus
scan_engine
endpoint_protection 		The decomposer engine in Symantec Endpoint Protection (SEP) 11.0, Symantec Endpoint Protection Small Business Edition 12.0, Symantec AntiVirus Corporate Edition (SAVCE) 10.x, and Symantec Scan Engine… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2012-4953 2024-11-21 10:43 2012-11-14 Show GitHub Exploit DB Packet Storm
296047 - esri arcgis_server SQL injection vulnerability in ESRI ArcGIS 10.1 allows remote authenticated users to execute arbitrary SQL commands via the where parameter to a query URI for a REST service. CWE-89
SQL Injection 		CVE-2012-4949 2024-11-21 10:43 2012-11-14 Show GitHub Exploit DB Packet Storm
296048 - fortinet fortigate-3140b
fortigate-60c
fortigate-3040b
fortigate-300c
fortigate-600c
fortigate-5001a-sw
fortigate-3240c
fortigate-310b
fortigate-800c
fortigate-5020
fortigate-100… 		The default configuration of Fortinet Fortigate UTM appliances uses the same Certification Authority certificate and same private key across different customers' installations, which makes it easier … CWE-295
Improper Certificate Validation  		CVE-2012-4948 2024-11-21 10:43 2012-11-14 Show GitHub Exploit DB Packet Storm
296049 - ibm websphere_application_server Cross-site request forgery (CSRF) vulnerability in IBM WebSphere Application Server 6.1 before 6.1.0.45, 7.0 before 7.0.0.25, 8.0 before 8.0.0.5, and 8.5 before 8.5.0.1 allows remote attackers to hij… CWE-352
 Origin Validation Error 		CVE-2012-4853 2024-11-21 10:43 2012-11-14 Show GitHub Exploit DB Packet Storm
296050 - ibm websphere_application_server Cross-site scripting (XSS) vulnerability in IBM WebSphere Application Server 8.5 Liberty Profile before 8.5.0.1 allows remote attackers to inject arbitrary web script or HTML via a crafted URI. CWE-79
Cross-site Scripting 		CVE-2012-4851 2024-11-21 10:43 2012-11-14 Show GitHub Exploit DB Packet Storm