Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 23, 2025, 6:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
201491 5.5 警告 オラクル - Oracle Identity Manager における User Config Management の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2012-0532 2012-05-9 17:45 2012-04-17 Show GitHub Exploit DB Packet Storm
201492 7.5 危険 オラクル - Oracle WebCenter Forms Recognition における Designer の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2012-1709 2012-05-9 17:40 2012-04-17 Show GitHub Exploit DB Packet Storm
201493 10 危険 サン・マイクロシステムズ
オラクル		 - Oracle JRockit および JDK/JRE における脆弱性 CWE-noinfo
情報不足 		CVE-2012-1695 2012-05-9 17:19 2012-04-17 Show GitHub Exploit DB Packet Storm
201494 4 警告 オラクル - Oracle の Siebel Clinical における Web UI の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2012-1674 2012-05-9 16:46 2012-04-17 Show GitHub Exploit DB Packet Storm
201495 4 警告 オラクル - Oracle の Siebel Clinical における Web UI の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2012-0582 2012-05-9 16:42 2012-04-17 Show GitHub Exploit DB Packet Storm
201496 4.3 警告 オラクル - Oracle の Primavera P6 Enterprise Project Portfolio Management における脆弱性 CWE-noinfo
情報不足 		CVE-2012-0558 2012-05-9 16:28 2012-04-17 Show GitHub Exploit DB Packet Storm
201497 3.5 注意 オラクル - Oracle FLEXCUBE Universal Banking における Core の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2012-0579 2012-05-9 16:23 2012-04-17 Show GitHub Exploit DB Packet Storm
201498 3.5 注意 オラクル - Oracle FLEXCUBE Universal Banking における Core の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2012-0577 2012-05-9 16:22 2012-04-17 Show GitHub Exploit DB Packet Storm
201499 3.5 注意 オラクル - Oracle FLEXCUBE Universal Banking における Core の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2012-0544 2012-05-9 16:22 2012-04-17 Show GitHub Exploit DB Packet Storm
201500 3.5 注意 オラクル - Oracle FLEXCUBE Direct Banking における Virtual Banking の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2012-1676 2012-05-9 16:21 2012-04-17 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 23, 2025, 5:11 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
851 - - - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Typomedia Foundation WordPress Custom Sidebar allows Blind SQL Injection.This issue affects WordP… CWE-89
SQL Injection 		CVE-2025-23912 2025-01-17 06:15 2025-01-17 Show GitHub Exploit DB Packet Storm
852 - - - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Solidres Team Solidres – Hotel booking plugin allows SQL Injection.This issue affects Solidres – … CWE-89
SQL Injection 		CVE-2025-23911 2025-01-17 06:15 2025-01-17 Show GitHub Exploit DB Packet Storm
853 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Common Ninja Compare Ninja allows Stored XSS.This issue affects Compare Ninja: from n/a through 2… CWE-79
Cross-site Scripting 		CVE-2025-23909 2025-01-17 06:15 2025-01-17 Show GitHub Exploit DB Packet Storm
854 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Rami Yushuvaev Pastebin allows Stored XSS.This issue affects Pastebin: from n/a through 1.5. CWE-79
Cross-site Scripting 		CVE-2025-23908 2025-01-17 06:15 2025-01-17 Show GitHub Exploit DB Packet Storm
855 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in closed SOCIAL.NINJA allows Stored XSS. This issue affects SOCIAL.NINJA: from n/a through 0.2. CWE-79
Cross-site Scripting 		CVE-2025-23907 2025-01-17 06:15 2025-01-17 Show GitHub Exploit DB Packet Storm
856 - - - Cross-Site Request Forgery (CSRF) vulnerability in Taras Dashkevych Error Notification allows Cross Site Request Forgery.This issue affects Error Notification: from n/a through 0.2.7. CWE-352
 Origin Validation Error 		CVE-2025-23902 2025-01-17 06:15 2025-01-17 Show GitHub Exploit DB Packet Storm
857 - - - Cross-Site Request Forgery (CSRF) vulnerability in Oliver Schaal GravatarLocalCache allows Cross Site Request Forgery.This issue affects GravatarLocalCache: from n/a through 1.1.2. CWE-352
 Origin Validation Error 		CVE-2025-23901 2025-01-17 06:15 2025-01-17 Show GitHub Exploit DB Packet Storm
858 - - - Cross-Site Request Forgery (CSRF) vulnerability in Genkisan Genki Announcement allows Cross Site Request Forgery.This issue affects Genki Announcement: from n/a through 1.4.1. CWE-352
 Origin Validation Error 		CVE-2025-23900 2025-01-17 06:15 2025-01-17 Show GitHub Exploit DB Packet Storm
859 - - - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in BnB Select Ltd Bookalet allows Stored XSS.This issue affects Bookalet: from n/a through 1.0.3. CWE-79
Cross-site Scripting 		CVE-2025-23899 2025-01-17 06:15 2025-01-17 Show GitHub Exploit DB Packet Storm
860 - - - Cross-Site Request Forgery (CSRF) vulnerability in Ivo Brett – ApplyMetrics Apply with LinkedIn buttons allows Stored XSS.This issue affects Apply with LinkedIn buttons: from n/a through 2.3. CWE-352
 Origin Validation Error 		CVE-2025-23898 2025-01-17 06:15 2025-01-17 Show GitHub Exploit DB Packet Storm