Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
218901	7.5	危険	Rodrigo Coimbra	-	WordPress 用 NOSpam PTI プラグインの wp-comments-post.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2013-5917	2013-09-25 11:57	2013-09-20	Show	GitHub Exploit DB Packet Storm

218902	5	警告	シスコシステムズ	-	Cisco MediaSense の Web インターフェイスにおける重要なクエリ文字列または Cookie の情報を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2013-5502	2013-09-25 11:53	2013-09-23	Show	GitHub Exploit DB Packet Storm

218903	7.8	危険	シスコシステムズ	-	Cisco Prime Data Center Network Manager における任意のテキストファイルを読まれる脆弱性	CWE-200 情報漏えい	CVE-2013-5490	2013-09-25 11:52	2013-09-18	Show	GitHub Exploit DB Packet Storm

218904	7.8	危険	シスコシステムズ	-	Cisco Prime Data Center Network Manager の DCNM-SAN サーバにおける任意のファイルを読まれる脆弱性	CWE-200 情報漏えい	CVE-2013-5487	2013-09-25 11:51	2013-09-18	Show	GitHub Exploit DB Packet Storm

218905	7.8	危険	シスコシステムズ	-	Cisco Prime Central for Hosted Collaboration Solution Assurance の Web フレームワークにおけるユーザ名およびパスワードを取得される脆弱性	CWE-287 不適切な認証	CVE-2013-3473	2013-09-25 11:49	2013-09-18	Show	GitHub Exploit DB Packet Storm

218906	6.8	警告	シスコシステムズ	-	Cisco Unified Computing System の Cisco Management Controller における権限を取得される脆弱性	CWE-20 不適切な入力確認	CVE-2012-4082	2013-09-25 11:45	2013-09-19	Show	GitHub Exploit DB Packet Storm

218907	4.6	警告	シスコシステムズ	-	Cisco Unified Computing System の Cisco Management Controller におけるサービス運用妨害 (DoS) の脆弱性	CWE-119 バッファエラー	CVE-2012-4081	2013-09-25 11:42	2013-09-18	Show	GitHub Exploit DB Packet Storm

218908	4.3	警告	シスコシステムズ	-	Cisco MediaSense の oraservice ページにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-5501	2013-09-25 11:39	2013-09-20	Show	GitHub Exploit DB Packet Storm

218909	4.3	警告	シスコシステムズ	-	Cisco MediaSense の oraadmin サービスページにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-5500	2013-09-25 11:37	2013-09-20	Show	GitHub Exploit DB Packet Storm

218910	6.8	警告	シスコシステムズ	-	Mac OS X 上で稼働する Cisco AnyConnect Secure Mobility Client における権限を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2013-1130	2013-09-25 11:33	2013-09-19	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:April 26, 2026, 4:08 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
277831	-	eric_allman	sendmail	Sendmail WIZ command enabled, allowing root access.	NVD-CWE-Other	CVE-1999-0145	2019-06-12 05:29	1993-09-30	Show	GitHub Exploit DB Packet Storm

277832	-	f5	big-ip_protocol_security_module big-ip_application_security_manager big-ip_protocol_security_manager	Buffer overflow in the bd daemon in F5 Networks BIG-IP Application Security Manager (ASM) 9.4.4 through 9.4.7 and 10.0.0 through 10.0.1, and Protocol Security Manager (PSM) 9.4.5 through 9.4.7 and 10…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2009-4420	2019-06-7 00:11	2009-12-25	Show	GitHub Exploit DB Packet Storm

277833	-	bea	weblogic_server	The Administration Console in BEA WebLogic Express and WebLogic Server 9.0 and 9.1 does not properly enforce certain Domain Security Policies, which allows remote administrative users in the Deployer…	NVD-CWE-Other	CVE-2007-2699	2019-05-29 02:29	2007-05-16	Show	GitHub Exploit DB Packet Storm

277834	-	ibm	db2	Stack-based buffer overflow in IBM DB2 8.x before 8.1 FixPak 15 and 9.1 before Fix Pack 2 allows local users to execute arbitrary code via a long string in unspecified environment variables.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2007-1088	2019-05-24 02:06	2007-02-24	Show	GitHub Exploit DB Packet Storm

277835	-	ibm	db2	IBM DB2 8.x before 8.1 FixPak 15 and 9.1 before Fix Pack 2 does not properly terminate certain input strings, which allows local users to execute arbitrary code via unspecified environment variables …	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2007-1087	2019-05-24 02:02	2007-02-24	Show	GitHub Exploit DB Packet Storm

277836	-	cisco	unified_ip_phone_firmware_7906g unified_ip_phone_firmware_7911g unified_ip_phone_firmware_7941g unified_ip_phone_firmware_7961g unified_ip_phone_firmware_7970g unified_ip_phone_firmwar…	The command line interface (CLI) in Cisco Unified IP Phone 7906G, 7911G, 7941G, 7961G, 7970G, and 7971G, with firmware 8.0(4)SR1 and earlier allows local users to obtain privileges or cause a denial …	CWE-264 Permissions, Privileges, and Access Controls	CVE-2007-1072	2019-05-24 01:16	2007-02-23	Show	GitHub Exploit DB Packet Storm

277837	-	cisco	unified_ip_phone_firmware_7906g unified_ip_phone_firmware_7911g unified_ip_phone_firmware_7941g unified_ip_phone_firmware_7961g unified_ip_phone_firmware_7970g unified_ip_phone_firmwar…	The SSH server in Cisco Unified IP Phone 7906G, 7911G, 7941G, 7961G, 7970G, and 7971G, with firmware 8.0(4)SR1 and earlier, uses a hard-coded username and password, which allows remote attackers to a…	CWE-798 Use of Hard-coded Credentials	CVE-2007-1063	2019-05-24 01:15	2007-02-22	Show	GitHub Exploit DB Packet Storm

277838	-	cisco	unified_ip_conference_station_7935_firmware unified_ip_conference_station_firmware_7936	The Cisco Unified IP Conference Station 7935 3.2(15) and earlier, and Station 7936 3.3(12) and earlier does not properly handle administrator HTTP sessions, which allows remote attackers to bypass au…	CWE-287 Improper Authentication	CVE-2007-1062	2019-05-24 01:13	2007-02-22	Show	GitHub Exploit DB Packet Storm

277839	-	gnu debian	gzip debian_linux	znew in the gzip package allows local users to overwrite arbitrary files via a symlink attack on temporary files.	CWE-20 Improper Input Validation	CVE-2003-0367	2019-05-23 23:04	2003-07-2	Show	GitHub Exploit DB Packet Storm

277840	-	php debian canonical redhat	php debian_linux ubuntu_linux enterprise_linux_server enterprise_linux_workstation	Buffer overflow in the bundled libxmlrpc library in PHP before 4.4.7, and 5.x before 5.2.2, has unknown impact and remote attack vectors.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2007-1864	2019-05-23 03:44	2007-05-9	Show	GitHub Exploit DB Packet Storm