Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 18, 2026, 2:16 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
251351 4.3 警告 オラクル - Oracle Fusion Middleware の Oracle WebCenter Content コンポーネントにおける脆弱性 CWE-noinfo
情報不足
CVE-2012-0085 2012-01-20 15:39 2012-01-17 Show GitHub Exploit DB Packet Storm
251352 5 警告 オラクル - Oracle Fusion Middleware の Oracle Web Services Manager コンポーネントにおける脆弱性 CWE-noinfo
情報不足
CVE-2011-3569 2012-01-20 15:25 2012-01-17 Show GitHub Exploit DB Packet Storm
251353 5 警告 オラクル - Oracle Fusion Middleware の Oracle Web Services Manager コンポーネントにおける脆弱性 CWE-noinfo
情報不足
CVE-2011-3531 2012-01-20 15:22 2012-01-17 Show GitHub Exploit DB Packet Storm
251354 5.5 警告 オラクル - Oracle Fusion Middleware の Oracle Web Services Manager コンポーネントにおける脆弱性 CWE-noinfo
情報不足
CVE-2011-3568 2012-01-20 15:17 2012-01-17 Show GitHub Exploit DB Packet Storm
251355 6.4 警告 オラクル - Oracle Fusion Middleware における Search の処理に関する脆弱性 CWE-noinfo
情報不足
CVE-2012-0083 2012-01-20 15:09 2012-01-17 Show GitHub Exploit DB Packet Storm
251356 5 警告 オラクル - Oracle Fusion Middleware の Oracle WebLogic Server コンポーネントにおける脆弱性 CWE-noinfo
情報不足
CVE-2011-3566 2012-01-20 12:12 2012-01-17 Show GitHub Exploit DB Packet Storm
251357 2.6 注意 オラクル - Oracle WebLogic Server におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-0077 2012-01-20 12:09 2012-01-20 Show GitHub Exploit DB Packet Storm
251358 5 警告 osCommerce - osCommerce におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2005-2330 2012-01-20 12:08 2012-01-20 Show GitHub Exploit DB Packet Storm
251359 4.3 警告 osCommerce - osCommerce 日本語版におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-0311 2012-01-20 12:08 2012-01-20 Show GitHub Exploit DB Packet Storm
251360 2.7 注意 オラクル - Oracle PeopleSoft Products の PeopleSoft Enterprise PeopleTools コンポーネントにおける脆弱性 CWE-noinfo
情報不足
CVE-2012-0091 2012-01-20 11:36 2012-01-17 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 18, 2026, 4:12 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
309301 7.8 HIGH
Local
apple macos
ipados
iphone_os
visionos
The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.7.1, macOS Sequoia 15, iOS 17.7 and iPadOS 17.7, macOS Sonoma 14.7, visionOS 2, iOS 18 and iPadOS 18. Processing … CWE-787
 Out-of-bounds Write
CVE-2024-44126 2024-10-31 06:35 2024-10-29 Show GitHub Exploit DB Packet Storm
309302 - - - PbootCMS 3.2.8 is vulnerable to URL Redirect. - CVE-2024-42930 2024-10-31 06:35 2024-10-29 Show GitHub Exploit DB Packet Storm
309303 - - - An issue in pyload-ng v0.5.0b3.dev85 running under python3.11 or below allows attackers to execute arbitrary code via a crafted HTTP request. - CVE-2024-39205 2024-10-31 06:35 2024-10-29 Show GitHub Exploit DB Packet Storm
309304 - - - SchedMD Slurm before 24.05.4 has Incorrect Authorization. A mistake in authentication handling in stepmgr could permit an attacker to execute processes under other users' jobs. This is limited to job… - CVE-2024-48936 2024-10-31 06:35 2024-10-28 Show GitHub Exploit DB Packet Storm
309305 - - - ispdbservice.cpp in KDE Kmail before 6.2.0 allows man-in-the-middle attackers to trigger use of an attacker-controlled mail server because cleartext HTTP is used for a URL such as http://autoconfig.e… - CVE-2024-50624 2024-10-31 06:35 2024-10-28 Show GitHub Exploit DB Packet Storm
309306 8.8 HIGH
Network
google chrome Insufficient data validation in V8 API in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to potentially exploit heap corruption via a crafted Chrome Extension. (Chromium security seve… NVD-CWE-noinfo
CVE-2024-7974 2024-10-31 06:35 2024-08-22 Show GitHub Exploit DB Packet Storm
309307 6.5 MEDIUM
Network
mozilla firefox
firefox_esr
Calling `PK11_Encrypt()` in NSS using CKM_CHACHA20 and the same buffer for input and output can result in plaintext on an Intel Sandy Bridge processor. In Firefox this only affects the QUIC header pr… NVD-CWE-noinfo
CVE-2024-7531 2024-10-31 06:35 2024-08-6 Show GitHub Exploit DB Packet Storm
309308 8.8 HIGH
Network
zimbra collaboration An issue was discovered in Zimbra Collaboration (ZCS) 10.1.x before 10.1.1, 10.0.x before 10.0.9, 9.0.0 before Patch 41, and 8.8.15 before Patch 46. It allows authenticated users to exploit Server-Si… CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2024-45518 2024-10-31 06:23 2024-10-23 Show GitHub Exploit DB Packet Storm
309309 7.8 HIGH
Local
ysoft safeq A Local Privilege Escalation issue was discovered in Y Soft SAFEQ 6 Build 53. The SafeQ JMX service running on port 9696 is vulnerable to JMX MLet attacks. Because the service did not enforce authent… CWE-306
Missing Authentication for Critical Function
CVE-2022-23862 2024-10-31 06:21 2024-10-23 Show GitHub Exploit DB Packet Storm
309310 9.8 CRITICAL
Network
riskengine radar A vulnerability was found in wfh45678 Radar up to 1.0.8 and classified as critical. This issue affects some unknown processing of the component Interface Handler. The manipulation with the input /../… CWE-639
 Authorization Bypass Through User-Controlled Key
CVE-2024-10121 2024-10-31 06:21 2024-10-19 Show GitHub Exploit DB Packet Storm