Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 27, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
217731 7.5 危険 The Cacti Group - Cacti の graph settings スクリプトにおける任意のコマンドを実行される脆弱性 CWE-89
SQLインジェクション 		CVE-2014-5262 2014-08-25 15:33 2014-06-28 Show GitHub Exploit DB Packet Storm
217732 7.5 危険 The Cacti Group - Cacti の graph settings スクリプトにおける任意のコマンドを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2014-5261 2014-08-25 15:33 2014-06-28 Show GitHub Exploit DB Packet Storm
217733 5.8 警告 Esri - ESRI ArcGIS for Server におけるオープンリダイレクトの脆弱性 CWE-Other
その他 		CVE-2014-5122 2014-08-25 15:06 2014-08-15 Show GitHub Exploit DB Packet Storm
217734 4.3 警告 Esri - ESRI ArcGIS for Server におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2014-5121 2014-08-25 15:06 2014-08-15 Show GitHub Exploit DB Packet Storm
217735 7.5 危険 Free Reprintables - Free Reprintables ArticleFR における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2014-5097 2014-08-25 14:55 2014-08-20 Show GitHub Exploit DB Packet Storm
217736 7.5 危険 BSS Company - Bank Soft Systems RBS BS-Client における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2014-4197 2014-08-25 14:55 2014-07-1 Show GitHub Exploit DB Packet Storm
217737 5 警告 shopizer-ecommerce - Shopizer の com/salesmanager/central/profile/ProfileAction.java におけるパスワードを推測される脆弱性 CWE-287
不適切な認証 		CVE-2014-5385 2014-08-25 14:55 2014-07-10 Show GitHub Exploit DB Packet Storm
217738 3.5 注意 The phpMyAdmin Project - phpMyAdmin のビュー操作ページにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2014-5274 2014-08-25 14:54 2014-08-17 Show GitHub Exploit DB Packet Storm
217739 3.5 注意 The phpMyAdmin Project - phpMyAdmin におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2014-5273 2014-08-25 14:54 2014-08-17 Show GitHub Exploit DB Packet Storm
217740 4.3 警告 Ben Gillbanks - 複数の製品で使用される TimThumb の timthumb.php の displayError 関数におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-5303 2014-08-25 13:39 2010-09-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 27, 2026, 4:52 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
291101 - cisco prime_central_for_hosted_collaboration_solution The web framework in Cisco Prime Central for Hosted Collaboration Solution (HCS) Assurance provides different responses to requests for arbitrary pathnames depending on whether the pathname exists, w… CWE-200
Information Exposure 		CVE-2013-3398 2024-11-21 10:53 2013-06-27 Show GitHub Exploit DB Packet Storm
291102 - cisco unified_communications_manager Cross-site request forgery (CSRF) vulnerability in the Unified Serviceability component in Cisco Unified Communications Manager (CUCM) allows remote attackers to hijack the authentication of arbitrar… CWE-352
 Origin Validation Error 		CVE-2013-3397 2024-11-21 10:53 2013-06-27 Show GitHub Exploit DB Packet Storm
291103 - cisco content_security_management_appliance Cross-site scripting (XSS) vulnerability in the web framework in Cisco Content Security Management on Security Management Appliance (SMA) devices allows remote attackers to inject arbitrary web scrip… CWE-79
Cross-site Scripting 		CVE-2013-3396 2024-11-21 10:53 2013-06-27 Show GitHub Exploit DB Packet Storm
291104 - cisco jabber
virtualization_experience_media_engine 		The Precision Video Engine component in Cisco Jabber for Windows and Cisco Virtualization Experience Media Engine allows remote attackers to cause a denial of service (process crash and call disconne… CWE-20
 Improper Input Validation  		CVE-2013-3393 2024-11-21 10:53 2013-06-27 Show GitHub Exploit DB Packet Storm
291105 - cisco adaptive_security_appliance The Next-Generation Firewall (aka NGFW, formerly CX Context-Aware Security) module 9.x before 9.1.1.9 and 9.1.2.x before 9.1.2.12 for Cisco Adaptive Security Appliances (ASA) devices allows remote at… CWE-20
 Improper Input Validation  		CVE-2013-3382 2024-11-21 10:53 2013-06-27 Show GitHub Exploit DB Packet Storm
291106 - cisco webex_social Multiple cross-site request forgery (CSRF) vulnerabilities in Cisco WebEx Social allow remote attackers to hijack the authentication of arbitrary users via unspecified vectors, aka Bug IDs CSCuh10405… CWE-352
 Origin Validation Error 		CVE-2013-3392 2024-11-21 10:53 2013-06-22 Show GitHub Exploit DB Packet Storm
291107 - wordpress wp_maintenance_mode_plugin Cross-site request forgery (CSRF) vulnerability in the WP Maintenance Mode plugin before 1.8.8 for WordPress allows remote attackers to hijack the authentication of arbitrary users for requests that … CWE-352
 Origin Validation Error 		CVE-2013-3250 2024-11-21 10:53 2013-06-22 Show GitHub Exploit DB Packet Storm
291108 - cisco telepresence_tc_software The firewall subsystem in Cisco TelePresence TC Software before 4.2 does not properly implement rules that grant access to hosts, which allows remote attackers to obtain shell access with root privil… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2013-3379 2024-11-21 10:53 2013-06-21 Show GitHub Exploit DB Packet Storm
291109 - cisco telepresence_te_software
telepresence_tc_software 		Cisco TelePresence TC Software before 6.1 and TE Software before 4.1.3 allow remote attackers to cause a denial of service (temporary device hang) via crafted SIP packets, aka Bug ID CSCuf89557. CWE-20
 Improper Input Validation  		CVE-2013-3378 2024-11-21 10:53 2013-06-21 Show GitHub Exploit DB Packet Storm
291110 - cisco telepresence_tc_software
ip_video_phone_e20
telepresence_codec_c40
telepresence_codec_c60
telepresence_codec_c90
telepresence_ex60
telepresence_ex90
telepresence_mx200
telepre… 		Cisco TelePresence TC Software before 5.1.7 and TE Software before 4.1.3 allow remote attackers to cause a denial of service (device reload) via crafted SIP packets, aka Bug ID CSCue01743. CWE-399
 Resource Management Errors 		CVE-2013-3377 2024-11-21 10:53 2013-06-21 Show GitHub Exploit DB Packet Storm