Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 30, 2026, 10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
220221	7.5	危険	オラクル	-	Oracle Fusion Middleware の Oracle WebLogic Server における WLS Security に関する脆弱性	CWE-noinfo 情報不足	CVE-2014-2470	2014-04-18 14:54	2014-04-15	Show	GitHub Exploit DB Packet Storm

220222	4	警告	オラクル	-	Oracle Fusion Middleware の Oracle Access Manager における Webserver Plugin に関する脆弱性	CWE-noinfo 情報不足	CVE-2014-2452	2014-04-18 14:54	2014-04-15	Show	GitHub Exploit DB Packet Storm

220223	4.9	警告	オラクル	-	Oracle Fusion Middleware の Oracle OpenSSO における Admin Console に関する脆弱性	CWE-noinfo 情報不足	CVE-2014-2426	2014-04-18 14:54	2014-04-15	Show	GitHub Exploit DB Packet Storm

220224	4	警告	オラクル	-	Oracle Fusion Middleware の Oracle OpenSSO における Other に関する脆弱性	CWE-noinfo 情報不足	CVE-2014-2425	2014-04-18 14:54	2014-04-15	Show	GitHub Exploit DB Packet Storm

220225	4	警告	オラクル	-	Oracle Fusion Middleware の Oracle Event Processing における CEP システムに関する脆弱性	CWE-noinfo 情報不足	CVE-2014-2424	2014-04-18 14:54	2014-04-15	Show	GitHub Exploit DB Packet Storm

220226	5	警告	オラクル	-	Oracle Fusion Middleware の Oracle Data Integrator における Data Quality に関する脆弱性	CWE-noinfo 情報不足	CVE-2014-2418	2014-04-18 14:54	2014-04-15	Show	GitHub Exploit DB Packet Storm

220227	5	警告	オラクル	-	Oracle Fusion Middleware の Oracle Data Integrator における Data Quality に関する脆弱性	CWE-noinfo 情報不足	CVE-2014-2417	2014-04-18 14:54	2014-04-15	Show	GitHub Exploit DB Packet Storm

220228	5	警告	オラクル	-	Oracle Fusion Middleware の Oracle Data Integrator における Data Quality に関する脆弱性	CWE-noinfo 情報不足	CVE-2014-2416	2014-04-18 14:54	2014-04-15	Show	GitHub Exploit DB Packet Storm

220229	5	警告	オラクル	-	Oracle Fusion Middleware の Oracle Data Integrator における Data Quality に関する脆弱性	CWE-noinfo 情報不足	CVE-2014-2415	2014-04-18 14:54	2014-04-15	Show	GitHub Exploit DB Packet Storm

220230	6.5	警告	オラクル	-	Oracle Fusion Middleware の Oracle Identity Analytics における Security に関する脆弱性	CWE-noinfo 情報不足	CVE-2014-2411	2014-04-18 14:54	2014-04-15	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 30, 2026, 4:16 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
295861	-	moodle	moodle	repository/s3/S3.php in the Amazon S3 library in Moodle through 2.2.11, 2.3.x before 2.3.9, 2.4.x before 2.4.6, and 2.5.x before 2.5.2 does not verify that the server hostname matches a domain name i…	CWE-20 Improper Input Validation	CVE-2012-6087	2024-11-21 10:45	2013-09-16	Show	GitHub Exploit DB Packet Storm

295862	-	cisco	wireless_control_system prime_network_control_system	Multiple cross-site scripting (XSS) vulnerabilities in Health Monitor Login pages in Cisco Prime Network Control System (NCS) and Wireless Control System (WCS) allow remote attackers to inject arbitr…	CWE-79 Cross-site Scripting	CVE-2012-5990	2024-11-21 10:45	2013-09-6	Show	GitHub Exploit DB Packet Storm

295863	-	cisco	identity_services_engine_software	Multiple cross-site scripting (XSS) vulnerabilities in the guest portal in Cisco Identity Services Engine (ISE) Software allow remote attackers to inject arbitrary web script or HTML via unspecified …	CWE-79 Cross-site Scripting	CVE-2012-5744	2024-11-21 10:45	2013-08-30	Show	GitHub Exploit DB Packet Storm

295864	-	videolan	vlc_media_player	The SHAddToRecentDocs function in VideoLAN VLC media player 2.0.4 and earlier might allow user-assisted attackers to cause a denial of service (crash) via a crafted file name that triggers an incorre…	CWE-189 Numeric Errors	CVE-2012-5855	2024-11-21 10:45	2013-07-11	Show	GitHub Exploit DB Packet Storm

295865	-	ibm	sterling_b2b_integrator sterling_file_gateway	IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 do not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capt…	CWE-310 Cryptographic Issues	CVE-2012-5936	2024-11-21 10:45	2013-07-3	Show	GitHub Exploit DB Packet Storm

295866	-	ibm	sterling_b2b_integrator sterling_file_gateway	Multiple SQL injection vulnerabilities in IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allow remote authenticated users to execute arbitrary SQL commands via vectors …	CWE-89 SQL Injection	CVE-2012-5766	2024-11-21 10:45	2013-07-3	Show	GitHub Exploit DB Packet Storm

295867	-	typo3	typo3	Cross-site scripting (XSS) vulnerability in the function menu API in TYPO3 4.5.x before 4.5.21, 4.6.x before 4.6.14, and 4.7.x before 4.7.6 allows remote authenticated backend users to inject arbitra…	CWE-79 Cross-site Scripting	CVE-2012-6148	2024-11-21 10:45	2013-07-2	Show	GitHub Exploit DB Packet Storm

295868	-	typo3	typo3	Cross-site scripting (XSS) vulnerability in the tree render API (TCA-Tree) in the Backend API in TYPO3 4.5.x before 4.5.21, 4.6.x before 4.6.14, and 4.7.x before 4.7.6 allows remote authenticated bac…	CWE-79 Cross-site Scripting	CVE-2012-6147	2024-11-21 10:45	2013-07-2	Show	GitHub Exploit DB Packet Storm

295869	-	typo3	typo3	Cross-site scripting (XSS) vulnerability in the Backend History module in TYPO3 4.5.x before 4.5.21, 4.6.x before 4.6.14, and 4.7.x before 4.7.6 allows remote authenticated backend users to inject ar…	CWE-79 Cross-site Scripting	CVE-2012-6145	2024-11-21 10:45	2013-07-2	Show	GitHub Exploit DB Packet Storm

295870	-	typo3	typo3	SQL injection vulnerability in the Backend History module in TYPO3 4.5.x before 4.5.21, 4.6.x before 4.6.14, and 4.7.x before 4.7.6 allows remote authenticated backend users to execute arbitrary SQL …	CWE-89 SQL Injection	CVE-2012-6144	2024-11-21 10:45	2013-07-2	Show	GitHub Exploit DB Packet Storm