Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
218651 6 警告 シスコシステムズ - Cisco 9900 Unified IP phones の image-upgrade 機能における権限を取得される脆弱性 CWE-20
不適切な入力確認
CVE-2013-5533 2013-10-15 13:50 2013-10-11 Show GitHub Exploit DB Packet Storm
218652 5 警告 シスコシステムズ - Cisco 9900 IP phones の Web アプリケーションインターフェースにおけるバッファオーバーフローの脆弱性 CWE-20
不適切な入力確認
CVE-2013-5532 2013-10-15 13:46 2013-10-11 Show GitHub Exploit DB Packet Storm
218653 4 警告 シスコシステムズ - Cisco Unified Communications Manager の Tomcat 管理 Web インターフェースにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2013-5528 2013-10-15 13:42 2013-10-11 Show GitHub Exploit DB Packet Storm
218654 6.8 警告 アップル - Apple iTunes などの製品で使用される WebKit における任意のコードを実行される脆弱性 CWE-399
リソース管理の問題
CVE-2013-1011 2013-10-11 20:08 2013-05-16 Show GitHub Exploit DB Packet Storm
218655 6.8 警告 アドビシステムズ - Windows 上で稼働する Adobe Reader および Acrobat における javascript: URL 内の任意の JavaScript コードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2013-5325 2013-10-11 19:34 2013-10-8 Show GitHub Exploit DB Packet Storm
218656 3.5 注意 WordPress.org - WordPress のデフォルト設定におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-5739 2013-10-11 19:29 2013-09-11 Show GitHub Exploit DB Packet Storm
218657 4.3 警告 WordPress.org - WordPress の wp-includes/functions.php におけるクロスサイトスクリプティングの脆弱性 CWE-20
不適切な入力確認
CVE-2013-5738 2013-10-11 19:28 2013-09-10 Show GitHub Exploit DB Packet Storm
218658 5.7 警告 シスコシステムズ - Cisco IOS および IOS XE の OSPF 機能におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2013-5527 2013-10-11 19:26 2013-10-10 Show GitHub Exploit DB Packet Storm
218659 7.1 危険 シスコシステムズ - Cisco 9900 Fourth-Generation IP Phone におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2013-5526 2013-10-11 19:24 2013-10-10 Show GitHub Exploit DB Packet Storm
218660 7.5 危険 Moodle - Moodle の badges/external.php における PHP オブジェクトインジェクション攻撃を実行される脆弱性 CWE-94
コード・インジェクション
CVE-2013-5674 2013-10-11 19:23 2013-09-16 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 26, 2026, 4:08 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
306561 - novell apache_http_server
netware
Cross-site scripting (XSS) vulnerability in Novell NetWare 6.5 Support Pack 5 and 6 and Novell Apache on NetWare 2.0.48 allows remote attackers to inject arbitrary web script or HTML via unspecified … NVD-CWE-Other
CVE-2006-6675 2016-12-6 11:59 2006-12-21 Show GitHub Exploit DB Packet Storm
306562 - freebsd freebsd The db interface in libc in FreeBSD 6.3, 6.4, 7.0, 7.1, and 7.2-PRERELEASE does not properly initialize memory for Berkeley DB 1.85 database structures, which allows local users to obtain sensitive i… CWE-20
 Improper Input Validation 
CVE-2009-1436 2016-11-29 04:07 2009-04-28 Show GitHub Exploit DB Packet Storm
306563 - oracle application_server Unspecified vulnerability in the Portal component in Oracle Application Server 10.1.2.3 and 10.1.4.2 allows remote attackers to affect integrity via unknown vectors, a different vulnerability than CV… NVD-CWE-noinfo
CVE-2009-3407 2016-11-29 04:07 2009-10-23 Show GitHub Exploit DB Packet Storm
306564 - oracle authentication_component
database_server
Unspecified vulnerability in the Authentication component in Oracle Database 11.1.0.6 has unknown impact and remote authenticated attack vectors, a different vulnerability than CVE-2008-2605. NVD-CWE-noinfo
CVE-2008-2604 2016-11-29 04:07 2008-07-16 Show GitHub Exploit DB Packet Storm
306565 - oracle authentication_component
database_server
Unspecified vulnerability in the Authentication component in Oracle Database 11.1.0.6 has unknown impact and remote authenticated attack vectors, a different vulnerability than CVE-2008-2604. NVD-CWE-noinfo
CVE-2008-2605 2016-11-29 04:07 2008-07-16 Show GitHub Exploit DB Packet Storm
306566 - dotnetnuke dotnetnuke ** UNVERIFIABLE ** Unspecified vulnerability in an unspecified DNN Modules module for DotNetNuke (.net nuke) allows remote attackers to gain privileges via unspecified vectors, as used in an attack … NVD-CWE-Other
CVE-2006-3601 2016-11-29 04:06 2006-07-19 Show GitHub Exploit DB Packet Storm
306567 - shadowed_portal shadowed_portal PHP remote file inclusion vulnerability in Shadowed Portal 5.599 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the root parameter in (1) footer.php and (2) header.php… NVD-CWE-Other
CVE-2006-4885 2016-11-29 04:06 2006-09-20 Show GitHub Exploit DB Packet Storm
306568 - sun java_system_web_proxy_server Buffer overflow in Sun Java System Web Proxy Server (aka Sun ONE Proxy Server) 3.6 SP6 allows remote attackers to execute arbitrary code via unknown vectors. NVD-CWE-Other
CVE-2005-1232 2016-11-29 04:06 2005-05-2 Show GitHub Exploit DB Packet Storm
306569 - gnu
gentoo
aspell
linux
Multiple stack-based buffer overflows in the word-list-compress functionality in compress.c for Aspell allow local users to execute arbitrary code via a long entry in the wordlist that is not properl… NVD-CWE-Other
CVE-2004-0548 2016-11-29 04:06 2004-08-6 Show GitHub Exploit DB Packet Storm
306570 - pablo_software_solutions baby_ftp_server Directory traversal vulnerability in Baby FTP Server 1.2, and possibly other versions before May 31, 2003 allows remote authenticated users to list arbitrary directories and possibly read files via "… NVD-CWE-Other
CVE-2003-1299 2016-11-29 04:06 2003-12-31 Show GitHub Exploit DB Packet Storm