Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 7, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
249711 4 警告 オラクル - Oracle FLEXCUBE Direct Banking における Core-Base の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2012-1707 2012-05-9 15:53 2012-04-17 Show GitHub Exploit DB Packet Storm
249712 4.7 警告 オラクル - Oracle FLEXCUBE Direct Banking におけるロギングの処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2012-1706 2012-05-9 15:43 2012-04-17 Show GitHub Exploit DB Packet Storm
249713 4.9 警告 オラクル - Oracle FLEXCUBE Universal Banking における Core の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2012-0573 2012-05-9 15:34 2012-04-17 Show GitHub Exploit DB Packet Storm
249714 5.5 警告 オラクル - Oracle FLEXCUBE Universal Banking における Core の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2012-0567 2012-05-9 15:28 2012-04-17 Show GitHub Exploit DB Packet Storm
249715 6.8 警告 オラクル - Oracle FLEXCUBE Universal Banking における Core の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2012-0575 2012-05-9 15:23 2012-04-17 Show GitHub Exploit DB Packet Storm
249716 4.3 警告 オラクル - Oracle Supply Chain Products Suite の Oracle Agile PLM for Process における Supplier Portal の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2012-0566 2012-05-9 15:09 2012-04-17 Show GitHub Exploit DB Packet Storm
249717 4.3 警告 オラクル - Oracle Supply Chain Products Suite の Oracle Agile PLM for Process における SCRM - Company プロファイルの処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2012-0581 2012-05-9 15:08 2012-04-17 Show GitHub Exploit DB Packet Storm
249718 5 警告 オラクル - Oracle Supply Chain Products Suite の Oracle Agile PLM for Process における Supplier Portal の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2012-0580 2012-05-9 15:06 2012-04-17 Show GitHub Exploit DB Packet Storm
249719 5.5 警告 オラクル - Oracle Supply Chain Products Suite の Oracle Agile PLM for Process におけるインストールの処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2012-0565 2012-05-9 15:04 2012-04-17 Show GitHub Exploit DB Packet Storm
249720 7.5 危険 オラクル - Oracle AutoVue の AutoVue Office における脆弱性 CWE-noinfo
情報不足 		CVE-2012-0549 2012-05-9 15:00 2012-04-17 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 7, 2026, 4:13 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
196141 8.8 HIGH
Network 		video-embed-box_project video-embed-box The id GET parameter of one of the Video Embed WordPress plugin through 1.0's page (available via forced browsing) is not sanitised, validated or escaped before being used in a SQL statement, allowin… - CVE-2021-24337 2024-11-21 14:52 2021-06-7 Show GitHub Exploit DB Packet Storm
196142 7.2 HIGH
Network 		zavedil flightlog The FlightLog WordPress plugin through 3.0.2 does not sanitise, validate or escape various POST parameters before using them a SQL statement, leading to SQL injections exploitable by editor and admin… - CVE-2021-24336 2024-11-21 14:52 2021-06-7 Show GitHub Exploit DB Packet Storm
196143 8.8 HIGH
Network 		fortinet fortiai_firmware An improper input validation in FortiAI v1.4.0 and earlier may allow an authenticated user to gain system shell access via a malicious payload in the "diagnose" command. CWE-78
OS Command  		CVE-2021-24023 2024-11-21 14:52 2021-06-4 Show GitHub Exploit DB Packet Storm
196144 4.5 MEDIUM
Adjacent 		mcafee database_security Cleartext Transmission of Sensitive Information vulnerability in the administrator interface of McAfee Database Security (DBSec) prior to 4.8.2 allows an administrator to view the unencrypted passwor… CWE-319
Cleartext Transmission of Sensitive Information 		CVE-2021-23896 2024-11-21 14:52 2021-06-2 Show GitHub Exploit DB Packet Storm
196145 7.3 HIGH
Network 		fortinet fortios An improper following of a certificate's chain of trust vulnerability in FortiGate versions 6.4.0 to 6.4.4 may allow an LDAP user to connect to SSLVPN with any certificate that is signed by a trusted… CWE-295
Improper Certificate Validation  		CVE-2021-24012 2024-11-21 14:52 2021-06-2 Show GitHub Exploit DB Packet Storm
196146 8.0 HIGH
Adjacent 		mcafee database_security Deserialization of untrusted data vulnerability in McAfee Database Security (DBSec) prior to 4.8.2 allows a remote authenticated attacker to create a reverse shell with administrator privileges on th… CWE-502
 Deserialization of Untrusted Data 		CVE-2021-23895 2024-11-21 14:52 2021-06-2 Show GitHub Exploit DB Packet Storm
196147 8.8 HIGH
Adjacent 		mcafee database_security Deserialization of untrusted data vulnerability in McAfee Database Security (DBSec) prior to 4.8.2 allows a remote unauthenticated attacker to create a reverse shell with administrator privileges on … CWE-502
 Deserialization of Untrusted Data 		CVE-2021-23894 2024-11-21 14:52 2021-06-2 Show GitHub Exploit DB Packet Storm
196148 6.1 MEDIUM
Network 		smartdatasoft car_repair_services_\&_auto_mechanic The Car Repair Services & Auto Mechanic WordPress theme before 4.0 did not properly sanitise its serviceestimatekey search parameter before outputting it back in the page, leading to a reflected Cros… - CVE-2021-24335 2024-11-21 14:52 2021-06-1 Show GitHub Exploit DB Packet Storm
196149 5.4 MEDIUM
Network 		connekthq instant_images_-_one_click_unsplash_uploads The Instant Images – One Click Unsplash Uploads WordPress plugin before 4.4.0.1 did not properly validate and sanitise its unsplash_download_w and unsplash_download_h parameter settings (/wp-admin/up… - CVE-2021-24334 2024-11-21 14:52 2021-06-1 Show GitHub Exploit DB Packet Storm
196150 6.5 MEDIUM
Network 		content_copy_protection_\&_prevent_image_save_project content_copy_protection_\&_prevent_image_save The Content Copy Protection & Prevent Image Save WordPress plugin through 1.3 does not check for CSRF when saving its settings, not perform any validation and sanitisation on them, allowing attackers… CWE-352
CWE-79
 Origin Validation Error
Cross-site Scripting 		CVE-2021-24333 2024-11-21 14:52 2021-06-1 Show GitHub Exploit DB Packet Storm