Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 12, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
252441 9.3 危険 サイバートラスト株式会社
Mozilla Foundation
レッドハット
オラクル		 - 複数の Mozilla 製品の nsTextFrameUtils::TransformText 関数におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2010-3166 2011-05-17 08:50 2010-09-7 Show GitHub Exploit DB Packet Storm
252442 4 警告 オラクル - OpenSSO Enterprise および Sun Java System Access Manager における脆弱性 CWE-noinfo
情報不足 		CVE-2011-0847 2011-05-16 11:38 2011-04-19 Show GitHub Exploit DB Packet Storm
252443 5 警告 オラクル - Oracle Sun Java System Access Manager Policy Agent における脆弱性 CWE-noinfo
情報不足 		CVE-2011-0846 2011-05-16 11:37 2011-04-19 Show GitHub Exploit DB Packet Storm
252444 4.3 警告 オラクル - OpenSSO Enterprise および Sun Java System Access Manager における脆弱性 CWE-noinfo
情報不足 		CVE-2011-0844 2011-05-16 11:36 2011-04-19 Show GitHub Exploit DB Packet Storm
252445 4.3 警告 オラクル - Oracle Siebel CRM の Siebel CRM Core コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2011-0843 2011-05-16 11:35 2011-04-19 Show GitHub Exploit DB Packet Storm
252446 7.8 危険 オラクル - Oracle Solaris 11 Express における TCP/IP の脆弱性 CWE-noinfo
情報不足 		CVE-2011-0841 2011-05-16 11:34 2011-04-19 Show GitHub Exploit DB Packet Storm
252447 4 警告 オラクル - Oracle PeopleSoft Enterprise PeopleTools における脆弱性 CWE-noinfo
情報不足 		CVE-2011-0840 2011-05-16 11:33 2011-04-19 Show GitHub Exploit DB Packet Storm
252448 4.3 警告 オラクル - Oracle Supply Chain Products Suite の Agile Technology Platform コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2011-0837 2011-05-16 11:32 2011-04-19 Show GitHub Exploit DB Packet Storm
252449 3.5 注意 オラクル - Oracle JD Edwards EnterpriseOne Tools および OneWorld Tools における脆弱性 CWE-noinfo
情報不足 		CVE-2011-0836 2011-05-16 11:31 2011-04-19 Show GitHub Exploit DB Packet Storm
252450 4.3 警告 オラクル - Oracle Siebel CRM の Siebel CRM Core コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2011-0834 2011-05-16 11:27 2011-04-19 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 12, 2026, 5:06 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
282311 8.8 HIGH
Network 		x2engine x2crm Unrestricted file upload vulnerability in the ProfileController::actionUploadPhoto method in protected/controllers/ProfileController.php in X2Engine X2CRM before 4.0 allows remote attackers to execut… CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2014-2664 2024-11-21 11:06 2017-10-18 Show GitHub Exploit DB Packet Storm
282312 6.1 MEDIUM
Network 		oliver_project oliver Multiple cross-site scripting (XSS) vulnerabilities in Oliver (formerly Webshare) 1.3.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to the (1) login pa… CWE-79
Cross-site Scripting 		CVE-2014-2710 2024-11-21 11:06 2017-04-13 Show GitHub Exploit DB Packet Storm
282313 - php_font_lib_project php_font_lib Cross-site scripting (XSS) vulnerability in www/make_subset.php in PHP Font Lib before 0.3.1 allows remote attackers to inject arbitrary web script or HTML via the name parameter. CWE-79
Cross-site Scripting 		CVE-2014-2570 2024-11-21 11:06 2015-09-1 Show GitHub Exploit DB Packet Storm
282314 - check_mk_project check_mk Check_MK before 1.2.2p3 and 1.2.3x before 1.2.3i5 allows remote authenticated users to delete arbitrary files via a request to an unspecified link, related to "Insecure Direct Object References." NOT… CWE-20
 Improper Input Validation  		CVE-2014-2332 2024-11-21 11:06 2015-09-1 Show GitHub Exploit DB Packet Storm
282315 - check_mk_project check_mk Check_MK 1.2.2p2, 1.2.2p3, and 1.2.3i5 allows remote authenticated users to execute arbitrary Python code via a crafted rules.mk file in a snapshot. NOTE: this can be exploited by remote attackers b… CWE-94
Code Injection 		CVE-2014-2331 2024-11-21 11:06 2015-09-1 Show GitHub Exploit DB Packet Storm
282316 - check_mk_project check_mk Multiple cross-site request forgery (CSRF) vulnerabilities in the Multisite GUI in Check_MK before 1.2.5i2 allow remote attackers to hijack the authentication of users for requests that (1) upload ar… CWE-352
 Origin Validation Error 		CVE-2014-2330 2024-11-21 11:06 2015-09-1 Show GitHub Exploit DB Packet Storm
282317 - check_mk_project check_mk Multiple cross-site scripting (XSS) vulnerabilities in Check_MK before 1.2.2p3 and 1.2.3x before 1.2.3i5 allow remote authenticated users to inject arbitrary web script or HTML via the (1) agent stri… CWE-79
Cross-site Scripting 		CVE-2014-2329 2024-11-21 11:06 2015-09-1 Show GitHub Exploit DB Packet Storm
282318 - ge intelligent_platforms_proficy_hmi\/scada_cimplicity The (1) CimView and (2) CimEdit components in GE Proficy HMI/SCADA-CIMPLICITY 8.2 and earlier allow remote attackers to gain privileges via a crafted CIMPLICITY screen (aka .CIM) file. CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2014-2355 2024-11-21 11:06 2015-01-17 Show GitHub Exploit DB Packet Storm
282319 - quick_page\/post_redirect_project quick_page\/post_redirect Cross-site request forgery (CSRF) vulnerability in the Quick Page/Post Redirect plugin before 5.0.5 for WordPress allows remote attackers to hijack the authentication of administrators for requests t… CWE-352
 Origin Validation Error 		CVE-2014-2598 2024-11-21 11:06 2015-01-6 Show GitHub Exploit DB Packet Storm
282320 - ekahau real-time_location_system_controller
activator
b4_staff_badge_tag_firmware 		Ekahau B4 staff badge tag 5.7 with firmware 1.4.52, Real-Time Location System (RTLS) Controller 6.0.5-FINAL, and Activator 3 reuses the RC4 cipher stream, which makes it easier for remote attackers t… CWE-310
Cryptographic Issues 		CVE-2014-2716 2024-11-21 11:06 2014-12-20 Show GitHub Exploit DB Packet Storm