Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 13, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
251551 5 警告 オラクル - Oracle WebLogic Server における Web Services の処理に関する脆弱性 CWE-noinfo
情報不足
CVE-2011-2320 2011-10-26 16:29 2011-10-18 Show GitHub Exploit DB Packet Storm
251552 4.3 警告 オラクル - Oracle WebLogic Server における JMS の処理に関する脆弱性 CWE-noinfo
情報不足
CVE-2011-2319 2011-10-26 16:28 2011-10-18 Show GitHub Exploit DB Packet Storm
251553 1.5 注意 オラクル - Oracle WebLogic Server における WLS Security の処理に関する脆弱性 CWE-noinfo
情報不足
CVE-2011-2318 2011-10-26 16:27 2011-10-18 Show GitHub Exploit DB Packet Storm
251554 4.3 警告 オラクル - Oracle Fusion Middleware の Oracle Containers for J2EE コンポーネントにおける脆弱性 CWE-noinfo
情報不足
CVE-2011-2314 2011-10-26 16:26 2011-10-18 Show GitHub Exploit DB Packet Storm
251555 6.8 警告 オラクル - Oracle Fusion Middleware の Oracle WebLogic Portal コンポーネントにおける脆弱性 CWE-noinfo
情報不足
CVE-2011-2255 2011-10-26 16:25 2011-10-18 Show GitHub Exploit DB Packet Storm
251556 3.5 注意 オラクル - Oracle Fusion Middleware の Oracle Web Services Manager コンポーネントにおける脆弱性 CWE-noinfo
情報不足
CVE-2011-2237 2011-10-26 16:24 2011-10-18 Show GitHub Exploit DB Packet Storm
251557 2.1 注意 アップル - Apple Mac OS X のオープンディレクトリにおけるパスワードデータを閲覧される脆弱性 CWE-255
証明書・パスワード管理
CVE-2011-3435 2011-10-26 09:47 2011-10-14 Show GitHub Exploit DB Packet Storm
251558 6.8 警告 アップル - Apple Mac OS X の libsecurity における任意のコードを実行される脆弱性 CWE-20
不適切な入力確認
CVE-2011-3227 2011-10-26 09:46 2011-10-14 Show GitHub Exploit DB Packet Storm
251559 6.8 警告 アップル - Apple Mac OS X のオープンディレクトリにおけるパスワード要求を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2011-3226 2011-10-26 09:45 2011-10-14 Show GitHub Exploit DB Packet Storm
251560 5 警告 アップル - Apple Mac OS X の SMB ファイルサーバコンポーネントにおける閲覧制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2011-3225 2011-10-26 09:44 2011-10-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 14, 2026, 4 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
277531 - debian
mantisbt
debian_linux
mantisbt
The string_insert_href function in MantisBT 1.2.0a1 through 1.2.x before 1.2.18 does not properly validate the URL protocol, which allows remote attackers to conduct cross-site scripting (XSS) attack… CWE-79
Cross-site Scripting
CVE-2014-9272 2024-11-21 11:20 2015-01-10 Show GitHub Exploit DB Packet Storm
277532 5.4 MEDIUM
Network
debian
mantisbt
debian_linux
mantisbt
Cross-site scripting (XSS) vulnerability in file_download.php in MantisBT before 1.2.18 allows remote authenticated users to inject arbitrary web script or HTML via a Flash file with an image extensi… CWE-79
Cross-site Scripting
CVE-2014-9271 2024-11-21 11:20 2015-01-10 Show GitHub Exploit DB Packet Storm
277533 - mantisbt
debian
mantisbt
debian_linux
Cross-site scripting (XSS) vulnerability in helper_api.php in MantisBT 1.1.0a1 through 1.2.x before 1.2.18, when Extended project browser is enabled, allows remote attackers to inject arbitrary web s… CWE-79
Cross-site Scripting
CVE-2014-9269 2024-11-21 11:20 2015-01-10 Show GitHub Exploit DB Packet Storm
277534 - deliciousdays cformsii Unrestricted file upload vulnerability in lib_nonajax.php in the CformsII plugin 14.7 and earlier for WordPress allows remote attackers to execute arbitrary code by uploading a file with an executabl… NVD-CWE-Other
CVE-2014-9473 2024-11-21 11:20 2015-01-8 Show GitHub Exploit DB Packet Storm
277535 - strongswan
opensuse
canonical
fedoraproject
debian
strongswan
opensuse
ubuntu_linux
fedora
debian_linux
strongSwan 4.5.x through 5.2.x before 5.2.1 allows remote attackers to cause a denial of service (invalid pointer dereference) via a crafted IKEv2 Key Exchange (KE) message with Diffie-Hellman (DH) g… CWE-19
 Data Processing Errors
CVE-2014-9221 2024-11-21 11:20 2015-01-8 Show GitHub Exploit DB Packet Storm
277536 - open-xchange open-xchange_appsuite Cross-site scripting (XSS) vulnerability in the backend in Open-Xchange (OX) AppSuite before 7.4.2-rev40, 7.6.0 before 7.6.0-rev32, and 7.6.1 before 7.6.1-rev11 allows remote attackers to inject arbi… CWE-79
Cross-site Scripting
CVE-2014-8993 2024-11-21 11:20 2015-01-8 Show GitHub Exploit DB Packet Storm
277537 - sonatype nexus Directory traversal vulnerability in Sonatype Nexus OSS and Pro before 2.11.1-01 allows remote attackers to read or write to arbitrary files via unspecified vectors. CWE-22
Path Traversal
CVE-2014-9389 2024-11-21 11:20 2015-01-6 Show GitHub Exploit DB Packet Storm
277538 - mediawiki mediawiki The wfMangleFlashPolicy function in OutputHandler.php in MediaWiki before 1.19.22, 1.20.x through 1.22.x before 1.22.14, and 1.23.x before 1.23.7 allows remote attackers to conduct PHP object injecti… CWE-77
Command Injection
CVE-2014-9277 2024-11-21 11:20 2015-01-5 Show GitHub Exploit DB Packet Storm
277539 - mediawiki mediawiki Cross-site request forgery (CSRF) vulnerability in the Special:ExpandedTemplates page in MediaWiki before 1.19.22, 1.20.x through 1.22.x before 1.22.14, and 1.23.x before 1.23.7, when $wgRawHTML is s… CWE-352
 Origin Validation Error
CVE-2014-9276 2024-11-21 11:20 2015-01-5 Show GitHub Exploit DB Packet Storm
277540 - microweber microweber SQL injection vulnerability in Category.php in Microweber CMS 0.95 before 20141209 allows remote attackers to execute arbitrary SQL commands via the category parameter when displaying a category, rel… CWE-89
SQL Injection
CVE-2014-9464 2024-11-21 11:20 2015-01-4 Show GitHub Exploit DB Packet Storm