Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
229591 4.3 警告 Drupal - Drupal 用 FAQ モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-1646 2012-09-27 16:24 2012-02-22 Show GitHub Exploit DB Packet Storm
229592 4.3 警告 Ulli Horlacher - Frams' Fast File EXchange の fup におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-1293 2012-09-27 16:23 2012-09-25 Show GitHub Exploit DB Packet Storm
229593 4.3 警告 notmuchmail.org - Notmuch の emacs/notmuch-mua.el における任意のファイルを読まれる脆弱性 CWE-20
不適切な入力確認
CVE-2012-1103 2012-09-27 16:22 2012-02-3 Show GitHub Exploit DB Packet Storm
229594 4.3 警告 OSClass - OSClass におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-0974 2012-09-27 16:20 2012-01-16 Show GitHub Exploit DB Packet Storm
229595 7.5 危険 OSClass - OSClass における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2012-0973 2012-09-27 16:19 2012-01-16 Show GitHub Exploit DB Packet Storm
229596 4.3 警告 Ulli Horlacher - Frams' Fast File EXchange の fup におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-0869 2012-09-27 16:15 2011-02-15 Show GitHub Exploit DB Packet Storm
229597 2.1 注意 Adiscon - rsyslog の imfile モジュールにおける整数オーバーフローの脆弱性 CWE-189
数値処理の問題
CVE-2011-4623 2012-09-27 16:14 2011-02-17 Show GitHub Exploit DB Packet Storm
229598 7.5 危険 The phpMyAdmin Project - phpMyAdmin における任意の PHP コードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2012-5159 2012-09-27 16:13 2012-09-25 Show GitHub Exploit DB Packet Storm
229599 7.5 危険 Horde - 複数の Horde Project 製品における任意の PHP コードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2012-0209 2012-09-27 16:13 2012-02-13 Show GitHub Exploit DB Packet Storm
229600 9 危険 IBM - IBM Informix Dynamic Server におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2012-3334 2012-09-27 16:12 2012-09-25 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 23, 2026, 4 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
284271 - oracle e-business_suite Unspecified vulnerability in the Oracle Customer Intelligence component in Oracle E-Business Suite 12.0.1 has unknown impact and remote attack vectors, aka APPS01. NVD-CWE-Other
CVE-2007-3865 2018-10-16 06:31 2007-07-19 Show GitHub Exploit DB Packet Storm
284272 - oracle e-business_suite As the impact type is unspecified, it has been set to a default value of "Obtain Other Access (e.g. application account)." NVD-CWE-Other
CVE-2007-3865 2018-10-16 06:31 2007-07-19 Show GitHub Exploit DB Packet Storm
284273 - oracle e-business_suite Multiple unspecified vulnerabilities in Oracle E-Business Suite 11.5.10CU2 and 12.0.1 allow remote attackers to have an unknown impact via (a) Oracle Configurator (APPS02), (b) Oracle iExpenses (APPS… NVD-CWE-Other
CVE-2007-3866 2018-10-16 06:31 2007-07-19 Show GitHub Exploit DB Packet Storm
284274 - oracle e-business_suite As the impact type is unspecified, it has been set to a default value of "Obtain Other Access (e.g. application account)." NVD-CWE-Other
CVE-2007-3866 2018-10-16 06:31 2007-07-19 Show GitHub Exploit DB Packet Storm
284275 - oracle e-business_suite Multiple unspecified vulnerabilities in Oracle E-Business Suite 11.5.10CU2 have unknown impact and attack vectors, related to (1) APPS04, (2) APPS05, and (3) APPS06 in (a) Oracle Application Object L… NVD-CWE-Other
CVE-2007-3867 2018-10-16 06:31 2007-07-19 Show GitHub Exploit DB Packet Storm
284276 - oracle e-business_suite As the impact type is unspecified, it has been set to a default value of "Obtain Other Access (e.g. application account)." NVD-CWE-Other
CVE-2007-3867 2018-10-16 06:31 2007-07-19 Show GitHub Exploit DB Packet Storm
284277 - aspindir husrevforum SQL injection vulnerability in philboard_forum.asp in husrevforum 1.0.1 allows remote attackers to execute arbitrary SQL commands via the forumid parameter. NOTE: it was later reported that 2.0.1 is… CWE-89
SQL Injection
CVE-2007-3884 2018-10-16 06:31 2007-07-19 Show GitHub Exploit DB Packet Storm
284278 - insanely_simple_blog insanely_simple_blog Multiple cross-site scripting (XSS) vulnerabilities in Insanely Simple Blog 0.5 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the search action, possibly related t… NVD-CWE-Other
CVE-2007-3888 2018-10-16 06:31 2007-07-19 Show GitHub Exploit DB Packet Storm
284279 - insanely_simple_blog insanely_simple_blog Multiple SQL injection vulnerabilities in Insanely Simple Blog 0.5 and earlier allow remote attackers to execute arbitrary SQL commands via the current_subsection parameter to index.php and other uns… NVD-CWE-Other
CVE-2007-3889 2018-10-16 06:31 2007-07-19 Show GitHub Exploit DB Packet Storm
284280 - microsoft directx Buffer overflow in Microsoft DirectShow in Microsoft DirectX 7.0 through 10.0 allows remote attackers to execute arbitrary code via a crafted (1) WAV or (2) AVI file. CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2007-3895 2018-10-16 06:31 2007-12-12 Show GitHub Exploit DB Packet Storm