Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 22, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
251121 4.3 警告 Internet WorkShop - WebGlimpse の wgarcmin.cgi におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2009-5113 2012-03-22 16:40 2012-03-19 Show GitHub Exploit DB Packet Storm
251122 5 警告 Internet WorkShop - WebGlimpse の wgarcmin.cgi におけるインストールパスを取得される脆弱性 CWE-200
情報漏えい
CVE-2009-5112 2012-03-22 16:39 2012-03-19 Show GitHub Exploit DB Packet Storm
251123 4.3 警告 OSQA - OSQA の questions/ask におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-1782 2012-03-22 16:33 2012-03-19 Show GitHub Exploit DB Packet Storm
251124 4.3 警告 Dotclear - Dotclear におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-1039 2012-03-22 16:18 2012-03-19 Show GitHub Exploit DB Packet Storm
251125 4.3 警告 Oxwall - OxWall におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-0872 2012-03-22 16:17 2012-03-19 Show GitHub Exploit DB Packet Storm
251126 4.3 警告 SocialCMS - SocialCMS の ajax/commentajax.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-1781 2012-03-22 16:15 2012-03-19 Show GitHub Exploit DB Packet Storm
251127 7.5 危険 SocialCMS - SocialCMS の search.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2012-1780 2012-03-22 16:14 2012-03-19 Show GitHub Exploit DB Packet Storm
251128 9.3 危険 マイクロソフト - Microsoft Windows のリモートデスクトッププロトコルの実装における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2012-0002 2012-03-22 13:40 2012-03-13 Show GitHub Exploit DB Packet Storm
251129 9.3 危険 VideoLAN - VideoLAN VLC media player におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2012-1776 2012-03-21 16:50 2012-03-12 Show GitHub Exploit DB Packet Storm
251130 9.3 危険 VideoLAN - VideoLAN VLC media player におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2012-1775 2012-03-21 16:50 2012-03-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 22, 2026, 4:08 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
286481 - emc cloud_tiering_appliance_software
cloud_tiering_appliance
EMC Cloud Tiering Appliance (CTA) 10 through SP1 allows remote attackers to read arbitrary files via an api/login request containing an XML external entity declaration in conjunction with an entity r… CWE-200
Information Exposure
CVE-2014-0644 2024-11-21 11:02 2014-04-17 Show GitHub Exploit DB Packet Storm
286482 - oracle fusion_middleware Unspecified vulnerability in the Oracle OpenSSO component in Oracle Fusion Middleware 8.0 Update 2 Patch 5 allows remote authenticated users to affect integrity via unknown vectors related to Admin C… NVD-CWE-noinfo
CVE-2014-0465 2024-11-21 11:02 2014-04-16 Show GitHub Exploit DB Packet Storm
286483 - oracle jdk
jre
Unspecified vulnerability in Oracle Java SE 8 allows remote attackers to affect confidentiality via unknown vectors related to Scripting, a different vulnerability than CVE-2014-0463. NVD-CWE-noinfo
CVE-2014-0464 2024-11-21 11:02 2014-04-16 Show GitHub Exploit DB Packet Storm
286484 - oracle jdk
jre
Unspecified vulnerability in Oracle Java SE 8 allows remote attackers to affect confidentiality via unknown vectors related to Scripting, a different vulnerability than CVE-2014-0464. NVD-CWE-noinfo
CVE-2014-0463 2024-11-21 11:02 2014-04-16 Show GitHub Exploit DB Packet Storm
286485 - canonical
oracle
debian
ibm
ubuntu_linux
jdk
jre
debian_linux
forms_viewer
Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to… NVD-CWE-noinfo
CVE-2014-0461 2024-11-21 11:02 2014-04-16 Show GitHub Exploit DB Packet Storm
286486 - oracle
canonical
juniper
debian
jrockit
ubuntu_linux
junos_space
jdk
jre
debian_linux
Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality and integrity via vecto… NVD-CWE-noinfo
CVE-2014-0460 2024-11-21 11:02 2014-04-16 Show GitHub Exploit DB Packet Storm
286487 - canonical
oracle
debian
ubuntu_linux
jdk
jre
debian_linux
Unspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote attackers to affect availability via unknown vectors related to 2D. NVD-CWE-noinfo
CVE-2014-0459 2024-11-21 11:02 2014-04-16 Show GitHub Exploit DB Packet Storm
286488 - canonical
oracle
debian
ubuntu_linux
jdk
jre
debian_linux
Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JAX-WS,… NVD-CWE-noinfo
CVE-2014-0458 2024-11-21 11:02 2014-04-16 Show GitHub Exploit DB Packet Storm
286489 - oracle
canonical
juniper
debian
ibm
jrockit
ubuntu_linux
junos_space
jdk
jre
debian_linux
forms_viewer
Unspecified vulnerability in Oracle Java SE 5.0u61, SE 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality, integrity, and avai… NVD-CWE-noinfo
CVE-2014-0457 2024-11-21 11:02 2014-04-16 Show GitHub Exploit DB Packet Storm
286490 - canonical
oracle
juniper
debian
ibm
ubuntu_linux
jrockit
junos_space
jdk
jre
debian_linux
forms_viewer
Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to… NVD-CWE-noinfo
CVE-2014-0456 2024-11-21 11:02 2014-04-16 Show GitHub Exploit DB Packet Storm