Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
215761 7.8 危険 シスコシステムズ - Cisco Wireless LAN Controller デバイスにおけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2014-0701 2014-03-7 16:04 2014-03-5 Show GitHub Exploit DB Packet Storm
215762 10 危険 シスコシステムズ - 複数の Cisco Wireless-N VPN 製品のファームウェアにおける管理アクセス権を取得される脆弱性 CWE-255
証明書・パスワード管理
CVE-2014-0683 2014-03-7 15:56 2014-03-5 Show GitHub Exploit DB Packet Storm
215763 7.5 危険 ヒューレット・パッカード - HP Security Management System における任意のコードを実行される脆弱性 CWE-noinfo
情報不足
CVE-2013-6201 2014-03-7 15:47 2013-10-21 Show GitHub Exploit DB Packet Storm
215764 5 警告 Novell - Novell ZENworks Configuration Management の PreBoot サービスにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2013-3706 2014-03-7 15:45 2013-05-30 Show GitHub Exploit DB Packet Storm
215765 6.4 警告 VideoWhisper.com - WordPress 用 VideoWhisper Live Streaming Integration プラグインにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2014-1907 2014-03-7 15:21 2014-02-27 Show GitHub Exploit DB Packet Storm
215766 4.3 警告 VideoWhisper.com - WordPress 用 VideoWhisper Live Streaming Integration プラグインにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-1906 2014-03-7 15:20 2014-02-27 Show GitHub Exploit DB Packet Storm
215767 6.5 警告 CMS Made Simple - CMS Made Simple の News モジュールにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2014-2245 2014-03-7 15:19 2014-03-1 Show GitHub Exploit DB Packet Storm
215768 1.9 注意 IBM - IBM Sametime の Connect クライアントにおける重要な情報を取得される脆弱性 CWE-255
証明書・パスワード管理
CVE-2014-0890 2014-03-7 15:12 2014-02-26 Show GitHub Exploit DB Packet Storm
215769 4 警告 IBM - IBM Tealeaf CX の Passive Capture Application の Web コンソールにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2013-6720 2014-03-7 15:12 2013-11-8 Show GitHub Exploit DB Packet Storm
215770 6 警告 IBM - IBM Tealeaf CX の Passive Capture Application の Web コンソールにおける任意のコマンドを実行される脆弱性 CWE-78
OSコマンド・インジェクション
CVE-2013-6719 2014-03-7 15:11 2013-11-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 21, 2026, 4:10 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
351 - - - xrdp is an open source RDP server. Versions through 0.10.5 have a heap-based buffer overflow in the EGFX (graphics dynamic virtual channel) implementation due to insufficient validation of client-con… New CWE-122
Heap-based Buffer Overflow
CVE-2026-35512 2026-04-18 06:16 2026-04-18 Show GitHub Exploit DB Packet Storm
352 - - - mcp-neo4j-cypher is an MCP server for executing Cypher queries against Neo4j databases. In versions prior to 0.6.0, the read_only mode enforcement can be bypassed using APOC CALL procedures, potentia… New CWE-284
Improper Access Control
CVE-2026-35402 2026-04-18 06:16 2026-04-18 Show GitHub Exploit DB Packet Storm
353 - - - xrdp is an open source RDP server. Versions through 0.10.5 have an out-of-bounds read vulnerability in the pre-authentication RDP message parsing logic. A remote, unauthenticated attacker can trigger… New CWE-125
Out-of-bounds Read
CVE-2026-33689 2026-04-18 06:16 2026-04-18 Show GitHub Exploit DB Packet Storm
354 6.3 MEDIUM
Network
- - xrdp is an open source RDP server. Versions through 0.10.5 allow an authenticated remote user to execute arbitrary commands on the server due to unsafe handling of the AlternateShell parameter in xrd… New CWE-78
OS Command 
CVE-2026-33145 2026-04-18 06:16 2026-04-18 Show GitHub Exploit DB Packet Storm
355 - - - Dolibarr is an enterprise resource planning (ERP) and customer relationship management (CRM) software package. In versions prior to 23.0.0 , the ODT to PDF conversion process in odf.php concatenates … New CWE-78
OS Command 
CVE-2026-23500 2026-04-18 06:16 2026-04-18 Show GitHub Exploit DB Packet Storm
356 7.5 HIGH
Network
- - Anviz CX2 Lite and CX7 are vulnerable to unauthenticated POST requests that modify debug settings (e.g., enabling SSH), allowing unauthorized state changes that can facilitate later compromise. New CWE-306
Missing Authentication for Critical Function
CVE-2026-40461 2026-04-18 05:16 2026-04-18 Show GitHub Exploit DB Packet Storm
357 8.1 HIGH
Adjacent
- - Anviz CrossChex Standard lacks source verification in the client/server channel, enabling TCP packet injection by an attacker on the same network to alter or disrupt application traffic. New CWE-940
 Improper Verification of Source of a Communication Channel
CVE-2026-40434 2026-04-18 05:16 2026-04-18 Show GitHub Exploit DB Packet Storm
358 9.9 CRITICAL
Network
- - Firebird is an open-source relational database management system. In versions prior to 5.0.4, 4.0.7 and 3.0.14, the external engine plugin loader concatenates a user-supplied engine name into a files… New CWE-22
CWE-73
CWE-94
CWE-427
Path Traversal
 External Control of File Name or Path
Code Injection
 Uncontrolled Search Path Element
CVE-2026-40342 2026-04-18 05:16 2026-04-18 Show GitHub Exploit DB Packet Storm
359 6.8 MEDIUM
Network
- - WeGIA is a web manager for charitable institutions. In versions prior to 3.6.10, a Stored Cross-Site Scripting (XSS) vulnerability allows an authenticated user to inject malicious JavaScript via the … New CWE-79
Cross-site Scripting
CVE-2026-40283 2026-04-18 05:16 2026-04-18 Show GitHub Exploit DB Packet Storm
360 8.8 HIGH
Network
- - Anviz CX2 Lite and CX7 are vulnerable to unverified update packages that can be uploaded. The device unpacks and executes a script resulting in unauthenticated remote code execution. New CWE-494
 Download of Code Without Integrity Check
CVE-2026-40066 2026-04-18 05:16 2026-04-18 Show GitHub Exploit DB Packet Storm