Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 31, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
220271 4.3 警告 オラクル - Oracle Hyperion の Hyperion Common Admin における User Interface に関する脆弱性 CWE-noinfo
情報不足
CVE-2014-2454 2014-04-17 15:53 2014-04-15 Show GitHub Exploit DB Packet Storm
220272 4.3 警告 オラクル - Oracle Hyperion の Hyperion Common Admin における User Interface に関する脆弱性 CWE-noinfo
情報不足
CVE-2014-2453 2014-04-17 15:53 2014-04-15 Show GitHub Exploit DB Packet Storm
220273 4.3 警告 オラクル - Oracle iLearning における Learner Pages に関する脆弱性 CWE-noinfo
情報不足
CVE-2014-2471 2014-04-17 15:35 2014-04-15 Show GitHub Exploit DB Packet Storm
220274 9.3 危険 X.Org Foundation
オラクル
- X.Org libXfont の bitmap/bdfread.c 内の bdfReadCharacters 関数におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2013-6462 2014-04-17 15:33 2013-12-31 Show GitHub Exploit DB Packet Storm
220275 4.4 警告 オラクル - Oracle VirtualBox の VBox/GuestHost/OpenGL/util/net.c における任意のコードを実行される脆弱性 CWE-399
リソース管理の問題
CVE-2014-0981 2014-04-17 15:30 2014-02-13 Show GitHub Exploit DB Packet Storm
220276 4.9 警告 オラクル - Oracle Sun Solaris における Kernel に関する脆弱性 CWE-noinfo
情報不足
CVE-2014-0447 2014-04-17 15:26 2014-04-15 Show GitHub Exploit DB Packet Storm
220277 4.6 警告 オラクル - Oracle Sun Solaris における Print Filter Utility に関する脆弱性 CWE-noinfo
情報不足
CVE-2014-0442 2014-04-17 15:26 2014-04-15 Show GitHub Exploit DB Packet Storm
220278 4.6 警告 オラクル - Oracle Sun Solaris における脆弱性 CWE-noinfo
情報不足
CVE-2014-0421 2014-04-17 15:25 2014-04-15 Show GitHub Exploit DB Packet Storm
220279 4.3 警告 オラクル - Oracle Virtualization の Oracle Secure Global Desktop における Workspace Web Application に関する脆弱性 CWE-noinfo
情報不足
CVE-2014-2463 2014-04-17 15:20 2014-04-15 Show GitHub Exploit DB Packet Storm
220280 4.4 警告 オラクル - Oracle Virtualization の Oracle VM VirtualBox における Windows ゲスト用のグラフィックドライバに関する脆弱性 CWE-noinfo
情報不足
CVE-2014-2441 2014-04-17 15:20 2014-04-15 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 31, 2026, 4:16 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
295941 - bulbsecurity smartphone_pentest_framework Multiple SQL injection vulnerabilities in Bulb Security Smartphone Pentest Framework (SPF) before 0.1.3 allow remote attackers to execute arbitrary SQL commands via the (1) agentPhNo, (2) controlPhNo… CWE-89
SQL Injection
CVE-2012-5694 2024-11-21 10:45 2014-10-21 Show GitHub Exploit DB Packet Storm
295942 - achievo achievo Cross-site scripting (XSS) vulnerability in include.php in Achievo 1.4.5 allows remote attackers to inject arbitrary web script or HTML via the field parameter. CWE-79
Cross-site Scripting
CVE-2012-5866 2024-11-21 10:45 2014-10-21 Show GitHub Exploit DB Packet Storm
295943 - achievo achievo SQL injection vulnerability in dispatch.php in Achievo 1.4.5 allows remote authenticated users to execute arbitrary SQL commands via the activityid parameter in a stats action. CWE-89
SQL Injection
CVE-2012-5865 2024-11-21 10:45 2014-10-21 Show GitHub Exploit DB Packet Storm
295944 - dotproject dotproject Multiple SQL injection vulnerabilities in dotProject before 2.1.7 allow remote authenticated administrators to execute arbitrary SQL commands via the (1) search_string or (2) where parameter in a con… CWE-352
CWE-89
 Origin Validation Error
SQL Injection
CVE-2012-5701 2024-11-21 10:45 2014-10-21 Show GitHub Exploit DB Packet Storm
295945 - bcron_project bcron_exec bcron-exec in bcron before 0.10 does not close file descriptors associated with temporary files when running a cron job, which allows local users to modify job files and send spam messages by accessi… CWE-264
Permissions, Privileges, and Access Controls
CVE-2012-6110 2024-11-21 10:45 2014-09-30 Show GitHub Exploit DB Packet Storm
295946 - apache apache_axis2\/c Apache Axis2/C does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attack… CWE-310
Cryptographic Issues
CVE-2012-6107 2024-11-21 10:45 2014-09-30 Show GitHub Exploit DB Packet Storm
295947 - babygekko baby_gekko Multiple cross-site scripting (XSS) vulnerabilities in Baby Gekko before 1.2.2f allow remote attackers to inject arbitrary web script or HTML via the (1) id parameter to admin/index.php or the (2) us… CWE-79
Cross-site Scripting
CVE-2012-5700 2024-11-21 10:45 2014-09-23 Show GitHub Exploit DB Packet Storm
295948 - apache commons-httpclient http/conn/ssl/AbstractVerifier.java in Apache Commons HttpClient before 4.2.3 does not properly verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltNa… CWE-20
 Improper Input Validation 
CVE-2012-6153 2024-11-21 10:45 2014-09-5 Show GitHub Exploit DB Packet Storm
295949 - zpanelcp zpanel SQL injection vulnerability in ZPanel 10.0.1 and earlier allows remote attackers to execute arbitrary SQL commands via the inEmailAddress parameter in an UpdateClient action in the manage_clients mod… CWE-89
SQL Injection
CVE-2012-5685 2024-11-21 10:45 2014-08-14 Show GitHub Exploit DB Packet Storm
295950 - zpanelcp zpanel Cross-site scripting (XSS) vulnerability in ZPanel 10.0.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the inFullname parameter in an UpdateAccountSettings action in… CWE-79
Cross-site Scripting
CVE-2012-5684 2024-11-21 10:45 2014-08-14 Show GitHub Exploit DB Packet Storm