Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
229071 4.3 警告 オラクル - Oracle Fusion Middleware の Oracle Application Server Single Sign-On における Redirect の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2012-3175 2012-10-19 18:09 2012-10-16 Show GitHub Exploit DB Packet Storm
229072 6.4 警告 オラクル - Oracle Fusion Middleware の Oracle Reports Developer における Servlet の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2012-3153 2012-10-19 18:09 2012-10-16 Show GitHub Exploit DB Packet Storm
229073 6.4 警告 オラクル - Oracle Fusion Middleware の Oracle Fusion Middleware における Report Server Component の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2012-3152 2012-10-19 18:07 2012-10-16 Show GitHub Exploit DB Packet Storm
229074 4.3 警告 オラクル - Oracle Fusion Middleware の Oracle Business Intelligence Enterprise Edition における Installation の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2012-1686 2012-10-19 18:06 2012-10-16 Show GitHub Exploit DB Packet Storm
229075 4.3 警告 オラクル - Oracle Fusion Middleware の Oracle Application Server Single Sign-On における Redirects の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2012-0518 2012-10-19 17:43 2012-10-16 Show GitHub Exploit DB Packet Storm
229076 3.5 注意 オラクル - Oracle Fusion Middleware の Oracle Imaging and Process Management における Web の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2012-0108 2012-10-19 17:43 2012-10-16 Show GitHub Exploit DB Packet Storm
229077 4.3 警告 オラクル - Oracle Fusion Middleware の Oracle Imaging and Process Management における Web の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2012-0107 2012-10-19 17:42 2012-10-16 Show GitHub Exploit DB Packet Storm
229078 4.9 警告 オラクル - Oracle Fusion Middleware の Oracle Imaging and Process Management における Web の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2012-0106 2012-10-19 17:42 2012-10-16 Show GitHub Exploit DB Packet Storm
229079 2.1 注意 オラクル - Oracle Fusion Middleware の Oracle Imaging and Process Management における Web の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2012-0095 2012-10-19 17:41 2012-10-16 Show GitHub Exploit DB Packet Storm
229080 4.3 警告 オラクル - Oracle Fusion Middleware の Oracle Imaging and Process Management における Web の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2012-0093 2012-10-19 17:41 2012-10-16 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 24, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
212311 - xiph vorbis-tools Buffer overflow in the aiff_open function in oggenc/audio.c in vorbis-tools 1.4.0 and earlier allows remote attackers to cause a denial of service (crash) via a crafted AIFF file. CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2015-6749 2024-11-21 11:35 2015-09-22 Show GitHub Exploit DB Packet Storm
212312 - symantec web_gateway Multiple SQL injection vulnerabilities in a PHP script in the management console on Symantec Web Gateway (SWG) appliances with software before 5.2.2 DB 5.0.0.1277 allow remote authenticated users to … CWE-89
SQL Injection 		CVE-2015-6548 2024-11-21 11:35 2015-09-21 Show GitHub Exploit DB Packet Storm
212313 - symantec web_gateway The management console on Symantec Web Gateway (SWG) appliances with software before 5.2.2 DB 5.0.0.1277 allows remote authenticated users to execute arbitrary commands at boot time via unspecified v… CWE-77
Command Injection 		CVE-2015-6547 2024-11-21 11:35 2015-09-21 Show GitHub Exploit DB Packet Storm
212314 - vmware vcenter_server VMware vCenter Server 5.5 before u3 and 6.0 before u1 does not verify X.509 certificates from TLS LDAP servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive informat… CWE-310
Cryptographic Issues 		CVE-2015-6932 2024-11-21 11:35 2015-09-19 Show GitHub Exploit DB Packet Storm
212315 - 3s-smart codesys_gateway_server Multiple heap-based buffer overflows in 3S-Smart CODESYS Gateway Server before 2.3.9.34 allow remote attackers to execute arbitrary code via opcode (1) 0x3ef or (2) 0x3f0. CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2015-6460 2024-11-21 11:35 2015-09-19 Show GitHub Exploit DB Packet Storm
212316 - ge mds_pulsenet Absolute path traversal vulnerability in the download feature in FileDownloadServlet in GE Digital Energy MDS PulseNET and MDS PulseNET Enterprise before 3.1.5 allows remote attackers to read or dele… CWE-22
Path Traversal 		CVE-2015-6459 2024-11-21 11:35 2015-09-19 Show GitHub Exploit DB Packet Storm
212317 - ge mds_pulsenet GE Digital Energy MDS PulseNET and MDS PulseNET Enterprise before 3.1.5 have hardcoded credentials for a support account, which allows remote attackers to obtain administrative access, and consequent… NVD-CWE-Other
CVE-2015-6456 2024-11-21 11:35 2015-09-19 Show GitHub Exploit DB Packet Storm
212318 - joomla joomla\! Cross-site scripting (XSS) vulnerability in the login module in Joomla! 3.4.x before 3.4.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. CWE-79
Cross-site Scripting 		CVE-2015-6939 2024-11-21 11:35 2015-09-19 Show GitHub Exploit DB Packet Storm
212319 - citrix netscaler_gateway_firmware
netscaler_application_delivery_controller_firmware 		Cross-site scripting (XSS) vulnerability in the Administrative Web Interface in Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway before 10.1 Build 132.8, 10.5 before Build… CWE-79
Cross-site Scripting 		CVE-2015-6672 2024-11-21 11:35 2015-09-18 Show GitHub Exploit DB Packet Storm
212320 - teiko farol SQL injection vulnerability in the web application in Farol allows remote attackers to execute arbitrary SQL commands via the email parameter to tkmonitor/estrutura/login/Login.actions.php. CWE-89
SQL Injection 		CVE-2015-6962 2024-11-21 11:35 2015-09-18 Show GitHub Exploit DB Packet Storm