Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
229071	4.3	警告	オラクル	-	Oracle Fusion Middleware の Oracle Application Server Single Sign-On における Redirect の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2012-3175	2012-10-19 18:09	2012-10-16	Show	GitHub Exploit DB Packet Storm

229072	6.4	警告	オラクル	-	Oracle Fusion Middleware の Oracle Reports Developer における Servlet の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2012-3153	2012-10-19 18:09	2012-10-16	Show	GitHub Exploit DB Packet Storm

229073	6.4	警告	オラクル	-	Oracle Fusion Middleware の Oracle Fusion Middleware における Report Server Component の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2012-3152	2012-10-19 18:07	2012-10-16	Show	GitHub Exploit DB Packet Storm

229074	4.3	警告	オラクル	-	Oracle Fusion Middleware の Oracle Business Intelligence Enterprise Edition における Installation の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2012-1686	2012-10-19 18:06	2012-10-16	Show	GitHub Exploit DB Packet Storm

229075	4.3	警告	オラクル	-	Oracle Fusion Middleware の Oracle Application Server Single Sign-On における Redirects の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2012-0518	2012-10-19 17:43	2012-10-16	Show	GitHub Exploit DB Packet Storm

229076	3.5	注意	オラクル	-	Oracle Fusion Middleware の Oracle Imaging and Process Management における Web の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2012-0108	2012-10-19 17:43	2012-10-16	Show	GitHub Exploit DB Packet Storm

229077	4.3	警告	オラクル	-	Oracle Fusion Middleware の Oracle Imaging and Process Management における Web の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2012-0107	2012-10-19 17:42	2012-10-16	Show	GitHub Exploit DB Packet Storm

229078	4.9	警告	オラクル	-	Oracle Fusion Middleware の Oracle Imaging and Process Management における Web の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2012-0106	2012-10-19 17:42	2012-10-16	Show	GitHub Exploit DB Packet Storm

229079	2.1	注意	オラクル	-	Oracle Fusion Middleware の Oracle Imaging and Process Management における Web の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2012-0095	2012-10-19 17:41	2012-10-16	Show	GitHub Exploit DB Packet Storm

229080	4.3	警告	オラクル	-	Oracle Fusion Middleware の Oracle Imaging and Process Management における Web の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2012-0093	2012-10-19 17:41	2012-10-16	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:April 25, 2026, 4:08 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
298491	-	elxis	elxis_cms	Session fixation vulnerability in Elxis CMS 2008.1 revision 2204 allows remote attackers to hijack web sessions by setting the PHPSESSID parameter.	CWE-287 Improper Authentication	CVE-2008-4649	2017-08-8 10:32	2008-10-22	Show	GitHub Exploit DB Packet Storm

298492	-	jetbox	jetbox_cms	Multiple SQL injection vulnerabilities in Jetbox CMS 2.1 allow remote authenticated users to execute arbitrary SQL commands via the (1) orderby parameter to admin/cms/images.php and the (2) nav_id pa…	CWE-89 SQL Injection	CVE-2008-4651	2017-08-8 10:32	2008-10-22	Show	GitHub Exploit DB Packet Storm

298493	-	typo3	m1_intern	SQL injection vulnerability in the M1 Intern (m1_intern) 1.0.0 extension for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.	CWE-89 SQL Injection	CVE-2008-4660	2017-08-8 10:32	2008-10-22	Show	GitHub Exploit DB Packet Storm

298494	-	kumacchi	ks_cgi_access_log	Cross-site scripting (XSS) vulnerability in analysis.cgi 1.44, as used in K's CGI Access Log Kaiseki (1) jcode.pl and (2) Jcode.pm, allows remote attackers to inject arbitrary web script or HTML via …	CWE-79 Cross-site Scripting	CVE-2008-4663	2017-08-8 10:32	2008-10-22	Show	GitHub Exploit DB Packet Storm

298495	-	qvod	qvod_player	Heap-based buffer overflow in QvodInsert.QvodCtrl.1 ActiveX control (QvodInsert.dll) in QVOD Player before 2.1.5 build 0053 allows remote attackers to execute arbitrary code via a long URL property. …	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2008-4664	2017-08-8 10:32	2008-10-22	Show	GitHub Exploit DB Packet Storm

298496	-	qvod	qvod_player	Version 2.1.5 of QVOD Player does not exist. The correct version is 2.5.1.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2008-4664	2017-08-8 10:32	2008-10-22	Show	GitHub Exploit DB Packet Storm

298497	-	dan_fletcher	recipe_script	Cross-site scripting (XSS) vulnerability in search.php in Dan Fletcher Recipe Script allows remote attackers to inject arbitrary web script or HTML via the keyword parameter. NOTE: the provenance of…	CWE-79 Cross-site Scripting	CVE-2008-4669	2017-08-8 10:32	2008-10-22	Show	GitHub Exploit DB Packet Storm

298498	-	ed_putal	clickbank_portal	Cross-site scripting (XSS) vulnerability in search.php in Ed Pudol Clickbank Portal allows remote attackers to inject arbitrary web script or HTML via the search box. NOTE: the provenance of this in…	CWE-79 Cross-site Scripting	CVE-2008-4670	2017-08-8 10:32	2008-10-22	Show	GitHub Exploit DB Packet Storm

298499	-	wordpress	wordpress_mu	Cross-site scripting (XSS) vulnerability in wp-admin/wp-blogs.php in Wordpress MU (WPMU) before 2.6 allows remote attackers to inject arbitrary web script or HTML via the (1) s and (2) ip_address par…	CWE-79 Cross-site Scripting	CVE-2008-4671	2017-08-8 10:32	2008-10-22	Show	GitHub Exploit DB Packet Storm

298500	-	goodlyrics	lyrics_script	Cross-site scripting (XSS) vulnerability in search_results.php in buymyscripts Lyrics Script allows remote attackers to inject arbitrary web script or HTML via the k parameter. NOTE: the provenance …	CWE-79 Cross-site Scripting	CVE-2008-4672	2017-08-8 10:32	2008-10-22	Show	GitHub Exploit DB Packet Storm