Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 17, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
218021	6.8	警告	マイクロソフト	-	Microsoft Visual Studio で配布される Microsoft Debug Interface Access SDK おける任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2014-3802	2014-05-22 14:40	2014-05-14	Show	GitHub Exploit DB Packet Storm

218022	6.8	警告	Beetel	-	Beetel 450TC2 ルータのファームウェアにおけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2014-3792	2014-05-22 14:35	2014-04-30	Show	GitHub Exploit DB Packet Storm

218023	5.8	警告	Zenoss, Inc.	-	Zenoss の zport/acl_users/cookieAuthHelper/login_form におけるオープンリダイレクトの脆弱性	CWE-20 不適切な入力確認	CVE-2014-3739	2014-05-22 12:14	2014-05-14	Show	GitHub Exploit DB Packet Storm

218024	4.3	警告	Zenoss, Inc.	-	Zenoss におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2014-3738	2014-05-22 12:13	2014-05-14	Show	GitHub Exploit DB Packet Storm

218025	10	危険	ジュニパーネットワークス	-	Juniper Junos Space における任意のコマンドを実行される脆弱性	CWE-noinfo 情報不足	CVE-2014-3412	2014-05-22 11:48	2014-05-14	Show	GitHub Exploit DB Packet Storm

218026	4.3	警告	Seo Panel	-	Seo Panel におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2014-1855	2014-05-22 11:32	2014-05-14	Show	GitHub Exploit DB Packet Storm

218027	4.3	警告	日立	-	Hitachi Web Server のステータス情報表示機能におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2006-5752 CVE-2007-5809	2014-05-21 18:27	2007-10-5	Show	GitHub Exploit DB Packet Storm

218028	4.3	警告	IBM Apache Software Foundation 富士通サイバートラスト株式会社サン・マイクロシステムズターボリナックスヒューレット・パッカードオラクル日立レッドハット	-	Apache HTTP Server の mod_status モジュールにおけるクロスサイトスクリプティングの脆弱性	-	CVE-2006-5752	2014-05-21 18:26	2007-06-26	Show	GitHub Exploit DB Packet Storm

218029	2.6	注意	日立	-	Hitachi Web Server のリバースプロキシにおけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2008-2364	2014-05-21 18:24	2009-06-4	Show	GitHub Exploit DB Packet Storm

218030	5	警告	IBM Apache Software Foundation アップルサイバートラスト株式会社富士通サン・マイクロシステムズターボリナックスヒューレット・パッカードオラクル日立レッドハット	-	Apache HTTP Server の ap_proxy_http_process_response() 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2008-2364	2014-05-21 18:23	2008-06-16	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 17, 2026, 4:15 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
291381	-	cisco	unified_meetingplace	The web server in Cisco Unified MeetingPlace Application Server 7.x before 7.1MR1 Patch 2, 8.0 before 8.0MR1 Patch 1, and 8.5 before 8.5MR3 Patch 1 does not invalidate a session upon a logout action,…	NVD-CWE-noinfo	CVE-2013-1168	2024-11-21 10:49	2013-04-11	Show	GitHub Exploit DB Packet Storm

291382	-	cisco	ios_xe asr_1001 asr_1002 asr_1002-x asr_1002_fixed_router asr_1004 asr_1006 asr_1013 asr_1023_router	Cisco IOS XE 3.2 through 3.4 before 3.4.2S, and 3.5, on 1000 series Aggregation Services Routers (ASR), when bridge domain interface (BDI) is enabled, allows remote attackers to cause a denial of ser…	CWE-22 Path Traversal	CVE-2013-1167	2024-11-21 10:49	2013-04-11	Show	GitHub Exploit DB Packet Storm

291383	-	cisco	asr_1001 asr_1002 asr_1002-x asr_1002_fixed_router asr_1004 asr_1006 asr_1023_router ios_xe	Cisco IOS XE 3.2 through 3.4 before 3.4.5S, and 3.5 through 3.7 before 3.7.1S, on 1000 series Aggregation Services Routers (ASR), when VRF-aware NAT and SIP ALG are enabled, allows remote attackers t…	CWE-20 Improper Input Validation	CVE-2013-1166	2024-11-21 10:49	2013-04-11	Show	GitHub Exploit DB Packet Storm

291384	-	cisco	ios_xe asr_1001 asr_1002 asr_1002-x asr_1002_fixed_router asr_1004 asr_1006 asr_1023_router	Cisco IOS XE 2.x and 3.x before 3.4.5S, and 3.5 through 3.7 before 3.7.1S, on 1000 series Aggregation Services Routers (ASR) allows remote attackers to cause a denial of service (card reload) by send…	CWE-20 Improper Input Validation	CVE-2013-1165	2024-11-21 10:49	2013-04-11	Show	GitHub Exploit DB Packet Storm

291385	-	cisco	ios_xe asr_1001 asr_1002 asr_1002-x asr_1004 asr_1006 asr_1013	Cisco IOS XE 3.4 before 3.4.4S, 3.5, and 3.6 on 1000 series Aggregation Services Routers (ASR) does not properly implement the Cisco Multicast Leaf Recycle Elimination (MLRE) feature, which allows re…	NVD-CWE-Other	CVE-2013-1164	2024-11-21 10:49	2013-04-11	Show	GitHub Exploit DB Packet Storm

291386	-	cisco	firewall_services_module_software	The auth-proxy functionality in Cisco Firewall Services Module (FWSM) software 3.1 and 3.2 before 3.2(20.1), 4.0 before 4.0(15.2), and 4.1 before 4.1(5.1) allows remote attackers to cause a denial of…	CWE-287 Improper Authentication	CVE-2013-1155	2024-11-21 10:49	2013-04-11	Show	GitHub Exploit DB Packet Storm

291387	-	cisco	adaptive_security_appliance_software adaptive_security_appliance	Cisco Adaptive Security Appliances (ASA) devices with software 9.0 before 9.0(1.2) allow remote attackers to cause a denial of service (device reload) via a crafted field in a DNS message, aka Bug ID…	NVD-CWE-noinfo	CVE-2013-1152	2024-11-21 10:49	2013-04-11	Show	GitHub Exploit DB Packet Storm

291388	-	cisco	adaptive_security_appliance_software	Cisco Adaptive Security Appliances (ASA) devices with software 7.x before 7.2(5.10), 8.0 before 8.0(5.31), 8.1 and 8.2 before 8.2(5.38), 8.3 before 8.3(2.37), 8.4 before 8.4(5), 8.5 before 8.5(1.17),…	CWE-20 Improper Input Validation	CVE-2013-1151	2024-11-21 10:49	2013-04-11	Show	GitHub Exploit DB Packet Storm

291389	-	adobe	coldfusion	Unspecified vulnerability in Adobe ColdFusion 9.0 before Update 10, 9.0.1 before Update 9, 9.0.2 before Update 4, and 10 before Update 9 allows attackers to impersonate users via unknown vectors.	NVD-CWE-noinfo	CVE-2013-1387	2024-11-21 10:49	2013-04-10	Show	GitHub Exploit DB Packet Storm

291390	-	adobe	coldfusion	Unspecified vulnerability in Adobe ColdFusion 9.0 before Update 10, 9.0.1 before Update 9, 9.0.2 before Update 4, and 10 before Update 9 allows attackers to obtain administrator-console access via un…	NVD-CWE-noinfo	CVE-2013-1388	2024-11-21 10:49	2013-04-10	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed