Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 5, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
201811 8.4 重要
Local 		DELL EMC (旧 EMC Corporation) - EMC Avamar Data Store および Avamar Virtual Edition における Avamar のサーバを侵害される脆弱性 CWE-20
不適切な入力確認 		CVE-2016-0909 2016-11-16 14:46 2016-10-20 Show GitHub Exploit DB Packet Storm
201812 8.8 重要
Network 		dotCMS - dotCMS の "Site Browser > HTML pages" スクリーンにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2016-8908 2016-11-16 14:11 2016-01-5 Show GitHub Exploit DB Packet Storm
201813 8.8 重要
Network 		dotCMS - dotCMS の "Content Types > Content Types" スクリーンにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2016-8907 2016-11-16 14:11 2016-01-5 Show GitHub Exploit DB Packet Storm
201814 8.8 重要
Network 		dotCMS - dotCMS の "Site Browser > Links pages" スクリーンにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2016-8906 2016-11-16 14:10 2016-01-5 Show GitHub Exploit DB Packet Storm
201815 8.8 重要
Network 		dotCMS - dotCMS の JSONTags サーブレットにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2016-8905 2016-11-16 14:10 2016-01-5 Show GitHub Exploit DB Packet Storm
201816 8.8 重要
Network 		dotCMS - dotCMS の "Site Browser > Containers pages" スクリーンにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2016-8904 2016-11-16 14:10 2016-01-5 Show GitHub Exploit DB Packet Storm
201817 8.8 重要
Network 		dotCMS - dotCMS の "Site Browser > Templates pages" スクリーンにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2016-8903 2016-11-16 14:10 2016-01-5 Show GitHub Exploit DB Packet Storm
201818 9.8 緊急
Network 		dotCMS - dotCMS の categoriesServlet サーブレットにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2016-8902 2016-11-16 14:10 2016-01-5 Show GitHub Exploit DB Packet Storm
201819 9.8 緊急
Network 		Exponent CMS project - Exponent CMS の /framework/modules/notfound/controllers/notfoundController.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2016-9287 2016-11-16 12:38 2016-11-6 Show GitHub Exploit DB Packet Storm
201820 9.1 緊急
Network 		Novell - Novell Open Enterprise Server における許可されていないファイルアクセスを実行される脆弱性 CWE-Other
その他 		CVE-2016-5763 2016-11-16 12:30 2016-09-28 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 6, 2026, 4:18 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
291411 - cisco webex_meeting_center Cisco WebEx Meeting Center allows remote authenticated users to bypass access control and inject content from a different WebEx site via unspecified vectors, aka Bug ID CSCul36197. CWE-264
Permissions, Privileges, and Access Controls 		CVE-2013-6964 2024-11-21 11:00 2013-12-15 Show GitHub Exploit DB Packet Storm
291412 - cisco webex_training_center Cross-site scripting (XSS) vulnerability in the registration component in Cisco WebEx Training Center allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCu… CWE-79
Cross-site Scripting 		CVE-2013-6963 2024-11-21 11:00 2013-12-15 Show GitHub Exploit DB Packet Storm
291413 - cisco webex_meeting_center Cross-site scripting (XSS) vulnerability in the mobile-browser subsystem in Cisco WebEx Meeting Center allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSC… CWE-79
Cross-site Scripting 		CVE-2013-6962 2024-11-21 11:00 2013-12-15 Show GitHub Exploit DB Packet Storm
291414 - cisco webex_meeting_center Cross-site scripting (XSS) vulnerability in the Collaboration Partner Access Console (CPAC) in Cisco WebEx Meeting Center allows remote attackers to inject arbitrary web script or HTML via a crafted … CWE-79
Cross-site Scripting 		CVE-2013-6961 2024-11-21 11:00 2013-12-15 Show GitHub Exploit DB Packet Storm
291415 - cisco webex_meeting_center Multiple cross-site scripting (XSS) vulnerabilities in Cisco WebEx Meeting Center allow remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCul36248. CWE-79
Cross-site Scripting 		CVE-2013-6960 2024-11-21 11:00 2013-12-15 Show GitHub Exploit DB Packet Storm
291416 - cisco webex_sales_center Open redirect vulnerability in Cisco WebEx Sales Center allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors, aka Bug ID CSCul25557. CWE-20
 Improper Input Validation  		CVE-2013-6959 2024-11-21 11:00 2013-12-15 Show GitHub Exploit DB Packet Storm
291417 - fujitsu interstage_studio
interstage_application_server 		Buffer overflow in the Interstage HTTP Server log functionality, as used in Fujitsu Interstage Application Server 9.0.0, 9.1.0, 9.2.0, 9.3.1, and 10.0.0; and Interstage Studio 9.0.0, 9.1.0, 9.2.0, an… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2013-7105 2024-11-21 11:00 2013-12-15 Show GitHub Exploit DB Packet Storm
291418 - mcafee email_gateway McAfee Email Gateway 7.6 allows remote authenticated administrators to execute arbitrary commands by specifying them in the value attribute in a (1) Command or (2) Script XML element. NOTE: this iss… CWE-78
OS Command  		CVE-2013-7104 2024-11-21 11:00 2013-12-15 Show GitHub Exploit DB Packet Storm
291419 - mcafee email_gateway McAfee Email Gateway 7.6 allows remote authenticated administrators to execute arbitrary commands via shell metacharacters in the value attribute in a (1) TestFile XML element or the (2) hostname. N… CWE-78
OS Command  		CVE-2013-7103 2024-11-21 11:00 2013-12-15 Show GitHub Exploit DB Packet Storm
291420 - devscripts_devel_team devscripts Uscan in devscripts 2.13.5, when USCAN_EXCLUSION is enabled, allows remote attackers to delete arbitrary files via a whitespace character in a filename. CWE-20
 Improper Input Validation  		CVE-2013-7085 2024-11-21 11:00 2013-12-15 Show GitHub Exploit DB Packet Storm