Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 17, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
220951	5	警告	オラクル	-	Oracle Fusion Middleware の Oracle WebLogic Server における WebLogic Server JVM に関する脆弱性	CWE-noinfo 情報不足	CVE-2014-4253	2014-07-18 18:41	2014-07-15	Show	GitHub Exploit DB Packet Storm

220952	5.1	警告	オラクル	-	Oracle PeopleSoft Products の PeopleSoft Enterprise FIN Install における Install に関する脆弱性	CWE-noinfo 情報不足	CVE-2014-4226	2014-07-18 16:42	2014-07-15	Show	GitHub Exploit DB Packet Storm

220953	3.5	注意	オラクル	-	Oracle PeopleSoft Products の PeopleSoft Enterprise PT PeopleTools における PIA Core Technology に関する脆弱性	CWE-noinfo 情報不足	CVE-2014-4204	2014-07-18 16:42	2014-07-15	Show	GitHub Exploit DB Packet Storm

220954	5.5	警告	オラクル	-	Oracle PeopleSoft Products の PeopleSoft Enterprise PT PeopleTools における Test Framework に関する脆弱性	CWE-noinfo 情報不足	CVE-2014-2496	2014-07-18 16:41	2014-07-15	Show	GitHub Exploit DB Packet Storm

220955	2.3	注意	オラクル	-	Oracle PeopleSoft Products の PeopleSoft Enterprise SCM Purchasing における Purchasing に関する脆弱性	CWE-noinfo 情報不足	CVE-2014-2495	2014-07-18 16:40	2014-07-15	Show	GitHub Exploit DB Packet Storm

220956	5.5	警告	オラクル	-	Oracle PeopleSoft Products の PeopleSoft Enterprise ELS Enterprise Learning Management における Enterprise Learning Mgmt に関する脆弱性	CWE-noinfo 情報不足	CVE-2014-2456	2014-07-18 16:40	2014-07-15	Show	GitHub Exploit DB Packet Storm

220957	5	警告	オラクル	-	Oracle Supply Chain Products Suite の Oracle Transportation Management における Data および Domain & Function Security に関する脆弱性	CWE-noinfo 情報不足	CVE-2014-4234	2014-07-18 16:39	2014-07-15	Show	GitHub Exploit DB Packet Storm

220958	5.5	警告	オラクル	-	Oracle Supply Chain Products Suite の Oracle Transportation Management における Data および Domain & Function Security に関する脆弱性	CWE-noinfo 情報不足	CVE-2014-4229	2014-07-18 16:38	2014-07-15	Show	GitHub Exploit DB Packet Storm

220959	4.3	警告	オラクル	-	Oracle Supply Chain Products Suite の Oracle Agile Product Collaboration における Web client に関する脆弱性	CWE-noinfo 情報不足	CVE-2014-2492	2014-07-18 16:37	2014-07-15	Show	GitHub Exploit DB Packet Storm

220960	1	注意	オラクル	-	Oracle E-Business Suite の Oracle Application Object Library における Logging に関する脆弱性	CWE-noinfo 情報不足	CVE-2014-4248	2014-07-18 16:36	2014-07-15	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 17, 2026, 4:19 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
295891	-	moodle	moodle	Moodle through 2.2.11, 2.3.x before 2.3.9, 2.4.x before 2.4.6, and 2.5.x before 2.5.2 does not prevent use of '\0' characters in query strings, which might allow remote attackers to conduct SQL injec…	CWE-89 SQL Injection	CVE-2013-4313	2024-11-21 10:55	2013-09-16	Show	GitHub Exploit DB Packet Storm

295892	-	xen	xen	The xenlight library (libxl) in Xen 4.0.x through 4.2.x, when IOMMU is disabled, provides access to a busmastering-capable PCI passthrough device before the IOMMU setup is complete, which allows loca…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2013-4329	2024-11-21 10:55	2013-09-13	Show	GitHub Exploit DB Packet Storm

295893	-	liquidthreads_project	liquidthreads	Cross-site scripting (XSS) vulnerability in pages/TalkpageHistoryView.php in the LiquidThreads (LQT) extension 2.x and possibly 3.x for MediaWiki 1.19.x before 1.19.8, 1.20.x before 1.20.7, and 1.21.…	CWE-79 Cross-site Scripting	CVE-2013-4308	2024-11-21 10:55	2013-09-12	Show	GitHub Exploit DB Packet Storm

295894	-	mediawiki	mediawiki	Multiple cross-site scripting (XSS) vulnerabilities in repo/includes/EntityView.php in the Wikibase extension for MediaWiki 1.19.x before 1.19.8, 1.20.x before 1.20.7, and 1.21.x before 1.21.2 allow …	CWE-79 Cross-site Scripting	CVE-2013-4307	2024-11-21 10:55	2013-09-12	Show	GitHub Exploit DB Packet Storm

295895	-	wordpress	wordpress	wp-admin/includes/post.php in WordPress before 3.6.1 allows remote authenticated users to spoof the authorship of a post by leveraging the Author role and providing a modified user_ID parameter.	CWE-264 Permissions, Privileges, and Access Controls	CVE-2013-4340	2024-11-21 10:55	2013-09-12	Show	GitHub Exploit DB Packet Storm

295896	-	wordpress	wordpress	WordPress before 3.6.1 does not properly validate URLs before use in an HTTP redirect, which allows remote attackers to bypass intended redirection restrictions via a crafted string.	CWE-20 Improper Input Validation	CVE-2013-4339	2024-11-21 10:55	2013-09-12	Show	GitHub Exploit DB Packet Storm

295897	-	wordpress	wordpress	wp-includes/functions.php in WordPress before 3.6.1 does not properly determine whether data has been serialized, which allows remote attackers to execute arbitrary code by triggering erroneous PHP u…	CWE-94 Code Injection	CVE-2013-4338	2024-11-21 10:55	2013-09-12	Show	GitHub Exploit DB Packet Storm

295898	-	imagemagick	imagemagick	The ReadGIFImage function in coders/gif.c in ImageMagick before 6.7.8-8 allows remote attackers to cause a denial of service (memory corruption and application crash) via a crafted comment in a GIF i…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2013-4298	2024-11-21 10:55	2013-09-11	Show	GitHub Exploit DB Packet Storm

295899	-	fedoraproject	389_directory_server	ns-slapd in 389 Directory Server before 1.3.0.8 allows remote attackers to cause a denial of service (server crash) via a crafted Distinguished Name (DN) in a MOD operation request.	CWE-20 Improper Input Validation	CVE-2013-4283	2024-11-21 10:55	2013-09-11	Show	GitHub Exploit DB Packet Storm

295900	-	libtiff debian	libtiff debian_linux	Heap-based buffer overflow in the readgifimage function in the gif2tiff tool in libtiff 4.0.3 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary c…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2013-4243	2024-11-21 10:55	2013-09-11	Show	GitHub Exploit DB Packet Storm