Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 29, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
251151	5.5	警告	オラクル	-	Oracle PeopleSoft および JDEdwards Suite の PeopleSoft Enterprise CRM - Order Capture コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-3532	2012-03-27 18:42	2010-10-14	Show	GitHub Exploit DB Packet Storm

251152	5.5	警告	オラクル	-	Oracle PeopleSoft および JDEdwards Suite の PeopleSoft Enterprise FMS ESA - RM コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-3531	2012-03-27 18:42	2010-10-14	Show	GitHub Exploit DB Packet Storm

251153	5.5	警告	オラクル	-	Oracle PeopleSoft および JDEdwards Suite の PeopleSoft Enterprise HCM - HR コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-3530	2012-03-27 18:42	2010-10-14	Show	GitHub Exploit DB Packet Storm

251154	5.5	警告	オラクル	-	Oracle PeopleSoft および JDEdwards Suite の PeopleSoft Enterprise FMS - Cash Management コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-3529	2012-03-27 18:42	2010-10-14	Show	GitHub Exploit DB Packet Storm

251155	4	警告	オラクル	-	Oracle PeopleSoft および JDEdwards Suite の PeopleSoft Enterprise CRM -共通コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-3528	2012-03-27 18:42	2010-10-14	Show	GitHub Exploit DB Packet Storm

251156	5.5	警告	オラクル	-	Oracle PeopleSoft および JDEdwards Suite の PeopleSoft Enterprise FMS - AM コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-3527	2012-03-27 18:42	2010-10-14	Show	GitHub Exploit DB Packet Storm

251157	5.5	警告	オラクル	-	Oracle PeopleSoft および JDEdwards Suite の PeopleSoft Enterprise SCM - PO コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-3526	2012-03-27 18:42	2010-10-14	Show	GitHub Exploit DB Packet Storm

251158	5.5	警告	オラクル	-	Oracle PeopleSoft および JDEdwards Suite の PeopleSoft Enterprise FMS コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-3525	2012-03-27 18:42	2010-10-14	Show	GitHub Exploit DB Packet Storm

251159	10	危険	オラクル	-	Oracle Fusion Middleware の Oracle WebLogic Server コンポーネントにおける Node Manager の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2010-3510	2012-03-27 18:42	2011-01-19	Show	GitHub Exploit DB Packet Storm

251160	3	注意	オラクル	-	Oracle Sun Products Suite の Oracle Explorer (Sun Explorer) コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-3506	2012-03-27 18:42	2010-10-13	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 29, 2026, 4:16 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
281351	-	pligg	pligg_cms	Multiple SQL injection vulnerabilities in recover.php in Pligg CMS 2.0.1 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) id or (2) n parameter.	CWE-89 SQL Injection	CVE-2014-9096	2024-11-21 11:20	2014-11-27	Show	GitHub Exploit DB Packet Storm

281352	-	raritan	power_iq	Multiple SQL injection vulnerabilities in Raritan Power IQ 4.1.0 and 4.2.1 allow remote attackers to execute arbitrary SQL commands via the (1) sort or (2) dir parameter to license/records.	CWE-89 SQL Injection	CVE-2014-9095	2024-11-21 11:20	2014-11-27	Show	GitHub Exploit DB Packet Storm

281353	-	digitalzoomstudio	video_gallery	Multiple cross-site scripting (XSS) vulnerabilities in deploy/designer/preview.php in the Digital Zoom Studio (DZS) Video Gallery plugin for WordPress allow remote attackers to inject arbitrary web s…	CWE-79 Cross-site Scripting	CVE-2014-9094	2024-11-21 11:20	2014-11-27	Show	GitHub Exploit DB Packet Storm

281354	-	libreoffice fedoraproject canonical debian	libreoffice fedora ubuntu_linux debian_linux	LibreOffice before 4.3.5 allows remote attackers to cause a denial of service (invalid write operation and crash) and possibly execute arbitrary code via a crafted RTF file.	CWE-20 Improper Input Validation	CVE-2014-9093	2024-11-21 11:20	2014-11-27	Show	GitHub Exploit DB Packet Storm

281355	-	flac	libflac	Heap-based buffer overflow in stream_decoder.c in libFLAC before 1.3.1 allows remote attackers to execute arbitrary code via a crafted .flac file.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2014-9028	2024-11-21 11:20	2014-11-27	Show	GitHub Exploit DB Packet Storm

281356	-	flac	libflac	Stack-based buffer overflow in stream_decoder.c in libFLAC before 1.3.1 allows remote attackers to execute arbitrary code via a crafted .flac file.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2014-8962	2024-11-21 11:20	2014-11-27	Show	GitHub Exploit DB Packet Storm

281357	-	debian mageia_project wordpress	debian_linux mageia wordpress	wp-login.php in WordPress before 3.7.5, 3.8.x before 3.8.5, 3.9.x before 3.9.3, and 4.x before 4.0.1 might allow remote attackers to reset passwords by leveraging access to an e-mail account that rec…	CWE-254 7PK - Security Features	CVE-2014-9039	2024-11-21 11:20	2014-11-26	Show	GitHub Exploit DB Packet Storm

281358	-	wordpress	wordpress	wp-includes/http.php in WordPress before 3.7.5, 3.8.x before 3.8.5, 3.9.x before 3.9.3, and 4.x before 4.0.1 allows remote attackers to conduct server-side request forgery (SSRF) attacks by referring…	CWE-20 Improper Input Validation	CVE-2014-9038	2024-11-21 11:20	2014-11-26	Show	GitHub Exploit DB Packet Storm

281359	-	mageia_project wordpress debian	mageia wordpress debian_linux	WordPress before 3.7.5, 3.8.x before 3.8.5, 3.9.x before 3.9.3, and 4.x before 4.0.1 might allow remote attackers to obtain access to an account idle since 2008 by leveraging an improper PHP dynamic …	CWE-310 Cryptographic Issues	CVE-2014-9037	2024-11-21 11:20	2014-11-26	Show	GitHub Exploit DB Packet Storm

281360	-	wordpress debian	wordpress debian_linux	Cross-site scripting (XSS) vulnerability in WordPress before 3.7.5, 3.8.x before 3.8.5, 3.9.x before 3.9.3, and 4.x before 4.0.1 allows remote attackers to inject arbitrary web script or HTML via a c…	CWE-79 Cross-site Scripting	CVE-2014-9036	2024-11-21 11:20	2014-11-26	Show	GitHub Exploit DB Packet Storm