Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
229071 4.3 警告 オラクル - Oracle Fusion Middleware の Oracle Application Server Single Sign-On における Redirect の処理に関する脆弱性 CWE-noinfo
情報不足
CVE-2012-3175 2012-10-19 18:09 2012-10-16 Show GitHub Exploit DB Packet Storm
229072 6.4 警告 オラクル - Oracle Fusion Middleware の Oracle Reports Developer における Servlet の処理に関する脆弱性 CWE-noinfo
情報不足
CVE-2012-3153 2012-10-19 18:09 2012-10-16 Show GitHub Exploit DB Packet Storm
229073 6.4 警告 オラクル - Oracle Fusion Middleware の Oracle Fusion Middleware における Report Server Component の処理に関する脆弱性 CWE-noinfo
情報不足
CVE-2012-3152 2012-10-19 18:07 2012-10-16 Show GitHub Exploit DB Packet Storm
229074 4.3 警告 オラクル - Oracle Fusion Middleware の Oracle Business Intelligence Enterprise Edition における Installation の処理に関する脆弱性 CWE-noinfo
情報不足
CVE-2012-1686 2012-10-19 18:06 2012-10-16 Show GitHub Exploit DB Packet Storm
229075 4.3 警告 オラクル - Oracle Fusion Middleware の Oracle Application Server Single Sign-On における Redirects の処理に関する脆弱性 CWE-noinfo
情報不足
CVE-2012-0518 2012-10-19 17:43 2012-10-16 Show GitHub Exploit DB Packet Storm
229076 3.5 注意 オラクル - Oracle Fusion Middleware の Oracle Imaging and Process Management における Web の処理に関する脆弱性 CWE-noinfo
情報不足
CVE-2012-0108 2012-10-19 17:43 2012-10-16 Show GitHub Exploit DB Packet Storm
229077 4.3 警告 オラクル - Oracle Fusion Middleware の Oracle Imaging and Process Management における Web の処理に関する脆弱性 CWE-noinfo
情報不足
CVE-2012-0107 2012-10-19 17:42 2012-10-16 Show GitHub Exploit DB Packet Storm
229078 4.9 警告 オラクル - Oracle Fusion Middleware の Oracle Imaging and Process Management における Web の処理に関する脆弱性 CWE-noinfo
情報不足
CVE-2012-0106 2012-10-19 17:42 2012-10-16 Show GitHub Exploit DB Packet Storm
229079 2.1 注意 オラクル - Oracle Fusion Middleware の Oracle Imaging and Process Management における Web の処理に関する脆弱性 CWE-noinfo
情報不足
CVE-2012-0095 2012-10-19 17:41 2012-10-16 Show GitHub Exploit DB Packet Storm
229080 4.3 警告 オラクル - Oracle Fusion Middleware の Oracle Imaging and Process Management における Web の処理に関する脆弱性 CWE-noinfo
情報不足
CVE-2012-0093 2012-10-19 17:41 2012-10-16 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 26, 2026, 4:08 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
284481 - symantec backupexec_system_recovery Unrestricted file upload vulnerability in the FileUpload class running on the Symantec LiveState Apache Tomcat server, as used by Symantec Backup Exec System Recovery Manager 7.0 and 7.0.1, allows re… CWE-20
 Improper Input Validation 
CVE-2008-0457 2018-10-16 07:00 2008-02-8 Show GitHub Exploit DB Packet Storm
284482 - webwiz web_wiz_forums
web_wiz_newspad
web_wiz_rich_text_editor
Web Wiz RTE_file_browser.asp in, as used in Web Wiz Rich Text Editor 4.0, Web Wiz Forums 9.07, and Web Wiz Newspad 1.02, does not require authentication, which allows remote attackers to list directo… CWE-287
Improper Authentication
CVE-2008-0466 2018-10-16 07:00 2008-01-29 Show GitHub Exploit DB Packet Storm
284483 - tiger_php_news_system tiger_php_news_system SQL injection vulnerability in index.php in Tiger Php News System (TPNS) 1.0b and earlier allows remote attackers to execute arbitrary SQL commands via the catid parameter in a newscat action. CWE-89
SQL Injection
CVE-2008-0469 2018-10-16 07:00 2008-01-30 Show GitHub Exploit DB Packet Storm
284484 - phpbb phpbb Cross-site request forgery (CSRF) vulnerability in privmsg.php in phpBB 2.0.22 allows remote attackers to delete private messages (PM) as arbitrary users via a deleteall action. CWE-352
 Origin Validation Error
CVE-2008-0471 2018-10-16 07:00 2008-01-30 Show GitHub Exploit DB Packet Storm
284485 - woltlab burning_board Cross-site request forgery (CSRF) vulnerability in modcp.php in Woltlab Burning Board (wBB) 2.3.6 PL2 allows remote attackers to delete threads as moderators or administrators via a thread_del action. CWE-352
 Origin Validation Error
CVE-2008-0472 2018-10-16 07:00 2008-01-30 Show GitHub Exploit DB Packet Storm
284486 - web_wiz rich_text_editor RTE_popup_save_file.asp in Web Wiz Rich Text Editor 4.0 allows remote attackers to upload (1) .html and (2) .htm files via unspecified vectors. CWE-20
 Improper Input Validation 
CVE-2008-0473 2018-10-16 07:00 2008-01-30 Show GitHub Exploit DB Packet Storm
284487 - web_wiz newspad Directory traversal vulnerability in RTE_file_browser.asp in Web Wiz NewsPad 1.02 allows remote attackers to list arbitrary directories, and .txt and .zip files, via a .....\\\ in the sub parameter. CWE-22
Path Traversal
CVE-2008-0479 2018-10-16 07:00 2008-01-30 Show GitHub Exploit DB Packet Storm
284488 - web_wiz web_wiz_forums Multiple directory traversal vulnerabilities in Web Wiz Forums 9.07 and earlier allow remote attackers to list arbitrary directories, and .txt and .zip files, via a .....\\\ in the sub parameter to (… CWE-22
Path Traversal
CVE-2008-0480 2018-10-16 07:00 2008-01-30 Show GitHub Exploit DB Packet Storm
284489 - web_wiz rich_text_editor Directory traversal vulnerability in RTE_file_browser.asp in Web Wiz Rich Text Editor 4.0 allows remote attackers to list arbitrary directories, and .txt and .zip files, via a .....\\\ in the sub par… CWE-22
Path Traversal
CVE-2008-0481 2018-10-16 07:00 2008-01-30 Show GitHub Exploit DB Packet Storm
284490 - mplayer mplayer Array index error in libmpdemux/demux_mov.c in MPlayer 1.0 rc2 and earlier might allow remote attackers to execute arbitrary code via a QuickTime MOV file with a crafted stsc atom tag. CWE-189
Numeric Errors
CVE-2008-0485 2018-10-16 07:00 2008-02-5 Show GitHub Exploit DB Packet Storm