Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":July 1, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
238801	6.4	警告	オラクル	-	Oracle Fusion Middleware の Oracle Fusion Middleware における Report Server Component の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2012-3152	2012-10-19 18:07	2012-10-16	Show	GitHub Exploit DB Packet Storm

238802	4.3	警告	オラクル	-	Oracle Fusion Middleware の Oracle Business Intelligence Enterprise Edition における Installation の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2012-1686	2012-10-19 18:06	2012-10-16	Show	GitHub Exploit DB Packet Storm

238803	4.3	警告	オラクル	-	Oracle Fusion Middleware の Oracle Application Server Single Sign-On における Redirects の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2012-0518	2012-10-19 17:43	2012-10-16	Show	GitHub Exploit DB Packet Storm

238804	3.5	注意	オラクル	-	Oracle Fusion Middleware の Oracle Imaging and Process Management における Web の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2012-0108	2012-10-19 17:43	2012-10-16	Show	GitHub Exploit DB Packet Storm

238805	4.3	警告	オラクル	-	Oracle Fusion Middleware の Oracle Imaging and Process Management における Web の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2012-0107	2012-10-19 17:42	2012-10-16	Show	GitHub Exploit DB Packet Storm

238806	4.9	警告	オラクル	-	Oracle Fusion Middleware の Oracle Imaging and Process Management における Web の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2012-0106	2012-10-19 17:42	2012-10-16	Show	GitHub Exploit DB Packet Storm

238807	2.1	注意	オラクル	-	Oracle Fusion Middleware の Oracle Imaging and Process Management における Web の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2012-0095	2012-10-19 17:41	2012-10-16	Show	GitHub Exploit DB Packet Storm

238808	4.3	警告	オラクル	-	Oracle Fusion Middleware の Oracle Imaging and Process Management における Web の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2012-0093	2012-10-19 17:41	2012-10-16	Show	GitHub Exploit DB Packet Storm

238809	3.5	注意	オラクル	-	Oracle Fusion Middleware の Oracle Imaging and Process Management における Web の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2012-0092	2012-10-19 17:40	2012-10-16	Show	GitHub Exploit DB Packet Storm

238810	3.5	注意	オラクル	-	Oracle Fusion Middleware の Oracle Imaging and Process Management における Web の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2012-0090	2012-10-19 17:40	2012-10-16	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:July 1, 2026, 4:27 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
285171	5.4	MEDIUM Network	netcracker	resource_management_system	Multiple cross-site scripting (XSS) vulnerabilities in NetCracker Resource Management System before 8.2 allow remote authenticated users to inject arbitrary web script or HTML via the (1) ctrl, (2) t…	CWE-79 Cross-site Scripting	CVE-2015-2207	2024-11-21 11:27	2020-02-9	Show	GitHub Exploit DB Packet Storm

285172	5.4	MEDIUM Network	synacor	zimbra_collaboration_server	Zimbra Collaboration before 8.6.0 patch5 has XSS.	CWE-79 Cross-site Scripting	CVE-2015-2249	2024-11-21 11:27	2020-01-28	Show	GitHub Exploit DB Packet Storm

285173	7.5	HIGH Network	torproject	tor	Tor before 0.2.4.26 and 0.2.5.x before 0.2.5.11 does not properly handle pending-connection resolve states during periods of high DNS load, which allows remote attackers to cause a denial of service …	CWE-20 Improper Input Validation	CVE-2015-2689	2024-11-21 11:27	2020-01-25	Show	GitHub Exploit DB Packet Storm

285174	7.5	HIGH Network	torproject	tor	buf_pullup in Tor before 0.2.4.26 and 0.2.5.x before 0.2.5.11 does not properly handle unexpected arrival times of buffers with invalid layouts, which allows remote attackers to cause a denial of ser…	CWE-755 Improper Handling of Exceptional Conditions	CVE-2015-2688	2024-11-21 11:27	2020-01-25	Show	GitHub Exploit DB Packet Storm

285175	5.5	MEDIUM Local	pcre opensuse mariadb php	pcre opensuse mariadb php	The pcre_compile2 function in PCRE before 8.37 allows context-dependent attackers to compile incorrect code and cause a denial of service (out-of-bounds read) via regular expression with a group cont…	CWE-125 Out-of-bounds Read	CVE-2015-2326	2024-11-21 11:27	2020-01-15	Show	GitHub Exploit DB Packet Storm

285176	7.8	HIGH Local	pcre opensuse mariadb php	pcre opensuse mariadb php	The compile_branch function in PCRE before 8.37 allows context-dependent attackers to compile incorrect code, cause a denial of service (out-of-bounds heap read and crash), or possibly have other uns…	CWE-125 CWE-787 Out-of-bounds Read Out-of-bounds Write	CVE-2015-2325	2024-11-21 11:27	2020-01-15	Show	GitHub Exploit DB Packet Storm

285177	6.1	MEDIUM Network	synacor	zimbra_collaboration_server	Synacor Zimbra Collaboration Server 8.x before 8.7.0 has Reflected XSS in admin console.	CWE-79 Cross-site Scripting	CVE-2015-2230	2024-11-21 11:27	2019-05-31	Show	GitHub Exploit DB Packet Storm

285178	9.1	CRITICAL Network	huawei	oceanstor_uds_firmware	Huawei OceanStor UDS devices with software before V100R002C01SPC102 might allow remote attackers to capture and change patch loading information resulting in the deletion of directory files and compr…	CWE-200 Information Exposure	CVE-2015-2254	2024-11-21 11:27	2019-03-14	Show	GitHub Exploit DB Packet Storm

285179	5.4	MEDIUM Network	10web	photo_gallery	Cross-site scripting (XSS) vulnerability in the filemanager in the Photo Gallery plugin before 1.2.13 for WordPress allows remote authenticated users with edit permission to inject arbitrary web scri…	CWE-79 Cross-site Scripting	CVE-2015-2324	2024-11-21 11:27	2018-02-20	Show	GitHub Exploit DB Packet Storm

285180	6.1	MEDIUM Network	woocommerce	woocommerce	Cross-site scripting (XSS) vulnerability in the WooCommerce plugin before 2.3.6 for WordPress allows remote attackers to inject arbitrary web script or HTML via a crafted order.	CWE-79 Cross-site Scripting	CVE-2015-2329	2024-11-21 11:27	2018-02-9	Show	GitHub Exploit DB Packet Storm