Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 28, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
220161 4.3 警告 オラクル - Oracle Hyperion の Hyperion Common Admin における User Interface に関する脆弱性 CWE-noinfo
情報不足 		CVE-2014-2454 2014-04-17 15:53 2014-04-15 Show GitHub Exploit DB Packet Storm
220162 4.3 警告 オラクル - Oracle Hyperion の Hyperion Common Admin における User Interface に関する脆弱性 CWE-noinfo
情報不足 		CVE-2014-2453 2014-04-17 15:53 2014-04-15 Show GitHub Exploit DB Packet Storm
220163 4.3 警告 オラクル - Oracle iLearning における Learner Pages に関する脆弱性 CWE-noinfo
情報不足 		CVE-2014-2471 2014-04-17 15:35 2014-04-15 Show GitHub Exploit DB Packet Storm
220164 9.3 危険 X.Org Foundation
オラクル		 - X.Org libXfont の bitmap/bdfread.c 内の bdfReadCharacters 関数におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2013-6462 2014-04-17 15:33 2013-12-31 Show GitHub Exploit DB Packet Storm
220165 4.4 警告 オラクル - Oracle VirtualBox の VBox/GuestHost/OpenGL/util/net.c における任意のコードを実行される脆弱性 CWE-399
リソース管理の問題 		CVE-2014-0981 2014-04-17 15:30 2014-02-13 Show GitHub Exploit DB Packet Storm
220166 4.9 警告 オラクル - Oracle Sun Solaris における Kernel に関する脆弱性 CWE-noinfo
情報不足 		CVE-2014-0447 2014-04-17 15:26 2014-04-15 Show GitHub Exploit DB Packet Storm
220167 4.6 警告 オラクル - Oracle Sun Solaris における Print Filter Utility に関する脆弱性 CWE-noinfo
情報不足 		CVE-2014-0442 2014-04-17 15:26 2014-04-15 Show GitHub Exploit DB Packet Storm
220168 4.6 警告 オラクル - Oracle Sun Solaris における脆弱性 CWE-noinfo
情報不足 		CVE-2014-0421 2014-04-17 15:25 2014-04-15 Show GitHub Exploit DB Packet Storm
220169 4.3 警告 オラクル - Oracle Virtualization の Oracle Secure Global Desktop における Workspace Web Application に関する脆弱性 CWE-noinfo
情報不足 		CVE-2014-2463 2014-04-17 15:20 2014-04-15 Show GitHub Exploit DB Packet Storm
220170 4.4 警告 オラクル - Oracle Virtualization の Oracle VM VirtualBox における Windows ゲスト用のグラフィックドライバに関する脆弱性 CWE-noinfo
情報不足 		CVE-2014-2441 2014-04-17 15:20 2014-04-15 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 29, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
295891 - citrix xenapp The XML Service interface in Citrix XenApp 6.5 and 6.5 Feature Pack 1 allows remote attackers to execute arbitrary code via unspecified vectors. NVD-CWE-noinfo
CVE-2012-5161 2024-11-21 10:44 2012-12-27 Show GitHub Exploit DB Packet Storm
295892 - catalin_florian_radut zeropoint Cross-site scripting (XSS) vulnerability in the Zero Point module 6.x-1.x before 6.x-1.18 and 7.x-1.x before 7.x-1.4 for Drupal allows remote attackers to inject arbitrary web script or HTML via the … CWE-79
Cross-site Scripting 		CVE-2012-5591 2024-11-21 10:44 2012-12-27 Show GitHub Exploit DB Packet Storm
295893 - scripthead webmail_plus SQL injection vulnerability in the Webmail Plus module for Drupal allows remote attackers to execute arbitrary SQL commands via unspecified vectors. CWE-89
SQL Injection 		CVE-2012-5590 2024-11-21 10:44 2012-12-27 Show GitHub Exploit DB Packet Storm
295894 - netgenius multilink The MultiLink module 6.x-2.x before 6.x-2.7 and 7.x-2.x before 7.x-2.7 for Drupal does not properly check node permissions when generating an in-content link, which allows remote authenticated users … CWE-200
Information Exposure 		CVE-2012-5589 2024-11-21 10:44 2012-12-27 Show GitHub Exploit DB Packet Storm
295895 - epiqo email The Email Field module 6.x-1.x before 6.x-1.3 for Drupal, when using a field permission module and the field contact field formatter is set to the full or teaser display mode, does not properly check… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2012-5588 2024-11-21 10:44 2012-12-27 Show GitHub Exploit DB Packet Storm
295896 - epiqo email Cross-site scripting (XSS) vulnerability in the Email Field module 6.x-1.x before 6.x-1.3 for Drupal allows remote attackers to inject arbitrary web script or HTML via the mailto link. CWE-79
Cross-site Scripting 		CVE-2012-5587 2024-11-21 10:44 2012-12-27 Show GitHub Exploit DB Packet Storm
295897 - marc_ingram services The Services module 6.x-3.x before 6.x-3.3 and 7.x-3.x before 7.x-3.3 for Drupal allows remote authenticated users with the "access user profiles" permission to access arbitrary users' emails via vec… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2012-5586 2024-11-21 10:44 2012-12-27 Show GitHub Exploit DB Packet Storm
295898 - mixpanel_project mixpanel Cross-site scripting (XSS) vulnerability in the Mixpanel module 6.x-1.x before 6.x-1.1 in Drupal allows remote authenticated users with the "access administration pages" permission to inject arbitrar… CWE-79
Cross-site Scripting 		CVE-2012-5585 2024-11-21 10:44 2012-12-27 Show GitHub Exploit DB Packet Storm
295899 - m2osw tableofcontents The Table of Contents module 6.x-3.x before 6.x-3.8 for Drupal does not properly check node permissions, which allows remote attackers to read a node's headers by accessing a table of contents block. CWE-264
Permissions, Privileges, and Access Controls 		CVE-2012-5584 2024-11-21 10:44 2012-12-27 Show GitHub Exploit DB Packet Storm
295900 - naver loctouch The Loctouch application 3.4.6 and earlier for Android allows attackers to obtain sensitive information about logged locations via a crafted application that leverages read permission for system log … CWE-200
Information Exposure 		CVE-2012-5183 2024-11-21 10:44 2012-12-27 Show GitHub Exploit DB Packet Storm