Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":July 1, 2026, 2:01 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
253051 7.2 危険 マイクロソフト - Microsoft Windows のカーネルモードドライバ内の win32k.sys における整数オーバーフローの脆弱性 CWE-399
リソース管理の問題
CVE-2012-1867 2012-06-15 16:36 2012-06-12 Show GitHub Exploit DB Packet Storm
253052 4.3 警告 シスコシステムズ - 複数の Cisco 製品の SIP の実装におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2011-2545 2012-06-15 16:35 2012-06-12 Show GitHub Exploit DB Packet Storm
253053 6.9 警告 マイクロソフト - Microsoft Windows の win32k.sys のスレッド生成の実装における権限昇格の脆弱性 CWE-362
競合状態
CVE-2012-1868 2012-06-15 16:35 2012-06-12 Show GitHub Exploit DB Packet Storm
253054 4.3 警告 マイクロソフト - Microsoft Internet Explorer におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-1872 2012-06-15 16:33 2012-06-12 Show GitHub Exploit DB Packet Storm
253055 4.3 警告 マイクロソフト - Microsoft Internet Explorer におけるプロセスメモリから重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2012-1873 2012-06-15 16:33 2012-06-12 Show GitHub Exploit DB Packet Storm
253056 6 警告 EFS Technology - AutoFORM PDM Archive におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-3347 2012-06-15 16:26 2012-06-13 Show GitHub Exploit DB Packet Storm
253057 9.3 危険 マイクロソフト - Microsoft Internet Explorer における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2012-1874 2012-06-15 16:26 2012-06-12 Show GitHub Exploit DB Packet Storm
253058 9.3 危険 マイクロソフト - Microsoft Internet Explorer 8 における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2012-1875 2012-06-15 16:25 2012-06-12 Show GitHub Exploit DB Packet Storm
253059 9.3 危険 マイクロソフト - Microsoft Internet Explorer における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2012-1877 2012-06-15 16:23 2012-06-12 Show GitHub Exploit DB Packet Storm
253060 9.3 危険 マイクロソフト - Microsoft Internet Explorer における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2012-1878 2012-06-15 16:22 2012-06-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:July 1, 2026, 4:27 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
245591 4.7 MEDIUM
Network
sap netweaver_java_web_container_and_http_service_engine
j2ee_engine_server_core
SAP NetWeaver Application Server Java Web Container and HTTP Service (Engine API, from 7.10 to 7.11, 7.30, 7.31, 7.40, 7.50; J2EE Engine Server Core 7.11, 7.30, 7.31, 7.40, 7.50) do not sufficiently … CWE-172
 Encoding Error
CVE-2018-2415 2024-11-21 13:03 2018-05-10 Show GitHub Exploit DB Packet Storm
245592 6.5 MEDIUM
Network
oracle access_manager
adaptive_access_manager
Vulnerability in the Oracle Access Manager component of Oracle Fusion Middleware (subcomponent: Web Server Plugin). Supported versions that are affected are 10.1.4.3.0, 11.1.2.3.0 and 12.2.1.3.0. Dif… NVD-CWE-noinfo
CVE-2018-2587 2024-11-21 13:03 2018-04-19 Show GitHub Exploit DB Packet Storm
245593 6.1 MEDIUM
Network
oracle agile_product_lifecycle_management_for_process Vulnerability in the Oracle Agile Product Lifecycle Management for Process component of Oracle Supply Chain Products Suite (subcomponent: Installation). Supported versions that are affected are 6.1.1… NVD-CWE-noinfo
CVE-2018-2572 2024-11-21 13:03 2018-04-19 Show GitHub Exploit DB Packet Storm
245594 4.2 MEDIUM
Network
oracle solaris Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: LDAP Library). Supported versions that are affected are 10 and 11.3. Difficult to exploit vulnerability allo… NVD-CWE-noinfo
CVE-2018-2563 2024-11-21 13:03 2018-04-19 Show GitHub Exploit DB Packet Storm
245595 8.8 HIGH
Network
sap disclosure_management SAP Disclosure Management 10.1 does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. CWE-862
 Missing Authorization
CVE-2018-2413 2024-11-21 13:03 2018-04-11 Show GitHub Exploit DB Packet Storm
245596 8.8 HIGH
Network
sap disclosure_management SAP Disclosure Management 10.1 does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. CWE-862
 Missing Authorization
CVE-2018-2412 2024-11-21 13:03 2018-04-11 Show GitHub Exploit DB Packet Storm
245597 5.4 MEDIUM
Network
sap business_one SAP Business One, 9.2, 9.3, browser access does not sufficiently encode user controlled inputs, which results in a Cross-Site Scripting (XSS) vulnerability. CWE-79
Cross-site Scripting
CVE-2018-2410 2024-11-21 13:03 2018-04-11 Show GitHub Exploit DB Packet Storm
245598 8.8 HIGH
Network
sap cloud_platform Improper session management when using SAP Cloud Platform 2.0 (Connectivity Service and Cloud Connector). Under certain conditions, data of some other user may be shown or modified when using an appl… CWE-384
 Session Fixation
CVE-2018-2409 2024-11-21 13:03 2018-04-11 Show GitHub Exploit DB Packet Storm
245599 7.3 HIGH
Network
sap businessobjects Improper Session Management in SAP Business Objects, 4.0, from 4.10, from 4.20, 4.30, CMC/BI Launchpad/Fiorified BI Launchpad. In case of password change for a user, all other active sessions created… CWE-384
 Session Fixation
CVE-2018-2408 2024-11-21 13:03 2018-04-11 Show GitHub Exploit DB Packet Storm
245600 5.3 MEDIUM
Local
sap crystal_reports_server Unquoted windows search path (directory/path traversal) vulnerability in Crystal Reports Server, OEM Edition (CRSE), 4.0, 4.10, 4.20, 4.30, startup path. CWE-428
 Unquoted Search Path or Element
CVE-2018-2406 2024-11-21 13:03 2018-04-11 Show GitHub Exploit DB Packet Storm