Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
229111	3.5	注意	オラクル	-	Oracle E-Business Suite の Oracle Marketing における Publish Item の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2012-3164	2012-10-19 15:45	2012-10-16	Show	GitHub Exploit DB Packet Storm

229112	1.7	注意	オラクル	-	Oracle E-Business Suite の Oracle Applications Framework における MDS ローディングの処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2012-3162	2012-10-19 15:44	2012-10-16	Show	GitHub Exploit DB Packet Storm

229113	3.5	注意	オラクル	-	Oracle E-Business Suite の Oracle Field Service における Wireless/WAP アップロードの処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2012-3148	2012-10-19 15:42	2012-10-16	Show	GitHub Exploit DB Packet Storm

229114	4.3	警告	オラクル	-	Oracle E-Business Suite の Oracle Application Object Library における Signon の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2012-3139	2012-10-19 15:41	2012-10-16	Show	GitHub Exploit DB Packet Storm

229115	4.3	警告	オラクル	-	Oracle E-Business Suite の Oracle iStore における Web インターフェースの処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2012-3138	2012-10-19 15:41	2012-10-16	Show	GitHub Exploit DB Packet Storm

229116	4	警告	オラクル	-	Oracle PeopleSoft Products の PeopleSoft Enterprise Campus Solutions における Self-Service の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2012-3201	2012-10-19 15:25	2012-10-16	Show	GitHub Exploit DB Packet Storm

229117	4	警告	オラクル	-	Oracle PeopleSoft Products の PeopleSoft Enterprise PeopleTools における Query の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2012-3198	2012-10-19 15:24	2012-10-16	Show	GitHub Exploit DB Packet Storm

229118	4	警告	オラクル	-	Oracle PeopleSoft Products の PeopleSoft Enterprise PeopleTools における Portal の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2012-3195	2012-10-19 15:22	2012-10-16	Show	GitHub Exploit DB Packet Storm

229119	2.1	注意	オラクル	-	Oracle PeopleSoft Products の PeopleSoft Enterprise PeopleTools における Data Mover の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2012-3191	2012-10-19 15:20	2012-10-16	Show	GitHub Exploit DB Packet Storm

229120	3.5	注意	オラクル	-	Oracle PeopleSoft Products の PeopleSoft Enterprise PeopleTools における PIA Core Technology の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2012-3188	2012-10-19 15:19	2012-10-16	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:April 24, 2026, 4 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
212091	5.3	MEDIUM Network	schneider-electric	telvent_rtu_firmware	Schneider Electric Telvent Sage 2300 RTUs with firmware before C3413-500-S01, and LANDAC II-2, Sage 1410, Sage 1430, Sage 1450, Sage 2400, and Sage 3030M RTUs with firmware before C3414-500-S02J2, al…	CWE-200 Information Exposure	CVE-2015-6485	2024-11-21 11:35	2016-03-12	Show	GitHub Exploit DB Packet Storm

212092	7.5	HIGH Network	wolfssl	wolfssl	wolfSSL (formerly CyaSSL) before 3.6.8 allows remote attackers to cause a denial of service (resource consumption or traffic amplification) via a crafted DTLS cookie in a ClientHello message.	CWE-399 Resource Management Errors	CVE-2015-6925	2024-11-21 11:35	2016-01-23	Show	GitHub Exploit DB Packet Storm

212093	7.3	HIGH Network	php	php	The SoapClient __call method in ext/soap/soap.c in PHP before 5.4.45, 5.5.x before 5.5.29, and 5.6.x before 5.6.13 does not properly manage headers, which allows remote attackers to execute arbitrary…	NVD-CWE-Other	CVE-2015-6836	2024-11-21 11:35	2016-01-19	Show	GitHub Exploit DB Packet Storm

212094	7.5	HIGH Network	php	php	Directory traversal vulnerability in the PharData class in PHP before 5.4.44, 5.5.x before 5.5.28, and 5.6.x before 5.6.12 allows remote attackers to write to arbitrary files via a .. (dot dot) in a …	CWE-22 Path Traversal	CVE-2015-6833	2024-11-21 11:35	2016-01-19	Show	GitHub Exploit DB Packet Storm

212095	7.3	HIGH Network	php	php	Use-after-free vulnerability in the SPL unserialize implementation in ext/spl/spl_array.c in PHP before 5.4.44, 5.5.x before 5.5.28, and 5.6.x before 5.6.12 allows remote attackers to execute arbitra…	NVD-CWE-Other	CVE-2015-6832	2024-11-21 11:35	2016-01-19	Show	GitHub Exploit DB Packet Storm

212096	7.3	HIGH Network	php debian	php debian_linux	Multiple use-after-free vulnerabilities in SPL in PHP before 5.4.44, 5.5.x before 5.5.28, and 5.6.x before 5.6.12 allow remote attackers to execute arbitrary code via vectors involving (1) ArrayObjec…	CWE-416 Use After Free	CVE-2015-6831	2024-11-21 11:35	2016-01-19	Show	GitHub Exploit DB Packet Storm

212097	7.3	HIGH Network	php	php	The php_str_replace_in_subject function in ext/standard/string.c in PHP 7.x before 7.0.0 allows remote attackers to execute arbitrary code via a crafted value in the third argument to the str_ireplac…	NVD-CWE-noinfo	CVE-2015-6527	2024-11-21 11:35	2016-01-19	Show	GitHub Exploit DB Packet Storm

212098	6.3	MEDIUM Network	hp	arcsight_logger	HPE ArcSight Logger before 6.1P1 allows remote authenticated users to execute arbitrary code via unspecified input to the (1) Intellicus or (2) client-certificate upload component.	CWE-20 Improper Input Validation	CVE-2015-6864	2024-11-21 11:35	2016-01-16	Show	GitHub Exploit DB Packet Storm

212099	7.3	HIGH Network	hp	arcsight_logger	HPE ArcSight Logger before 6.1P1 allows remote attackers to execute arbitrary code via unspecified input to the (1) Intellicus or (2) client-certificate upload component.	CWE-20 Improper Input Validation	CVE-2015-6863	2024-11-21 11:35	2016-01-16	Show	GitHub Exploit DB Packet Storm

212100	8.1	HIGH Network	advantech	webaccess	Advantech WebAccess before 8.1 allows remote attackers to execute arbitrary code via vectors involving a browser plugin.	NVD-CWE-noinfo	CVE-2015-6467	2024-11-21 11:35	2016-01-15	Show	GitHub Exploit DB Packet Storm