Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
219261 6.4 警告 JanRain - PHP OpenID Library における XML 外部実体参照に関する脆弱性 CWE-Other
その他 		CVE-2013-4701 2013-08-23 18:37 2013-08-21 Show GitHub Exploit DB Packet Storm
219262 7.2 危険 マイクロソフト - 複数の Microsoft Windows 製品のカーネルの NT Virtual DOS Machine サブシステムにおける権限昇格の脆弱性 CWE-119
バッファエラー 		CVE-2013-3198 2013-08-23 17:56 2013-08-13 Show GitHub Exploit DB Packet Storm
219263 7.2 危険 マイクロソフト - 複数の Microsoft Windows 製品のカーネルの NT Virtual DOS Machine サブシステムにおける権限昇格の脆弱性 CWE-119
バッファエラー 		CVE-2013-3197 2013-08-23 17:55 2013-08-13 Show GitHub Exploit DB Packet Storm
219264 7.2 危険 マイクロソフト - 複数の Microsoft Windows 製品のカーネルの NT Virtual DOS Machine サブシステムにおける権限昇格の脆弱性 CWE-119
バッファエラー 		CVE-2013-3196 2013-08-23 17:54 2013-08-13 Show GitHub Exploit DB Packet Storm
219265 7.5 危険 マイクロソフト - 複数の Microsoft Windows 製品における ASLR 保護メカニズムを回避される脆弱性 CWE-noinfo
情報不足 		CVE-2013-2556 2013-08-23 17:53 2013-03-11 Show GitHub Exploit DB Packet Storm
219266 6.8 警告 IBM - IBM WebSphere Application Server の管理コンソールにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2013-3029 2013-08-23 16:46 2013-08-19 Show GitHub Exploit DB Packet Storm
219267 5 警告 OSIsoft - OSIsoft PI Interface for IEEE におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2013-2801 2013-08-23 16:44 2013-08-13 Show GitHub Exploit DB Packet Storm
219268 5 警告 OSIsoft - OSIsoft PI Interface for IEEE におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2013-2800 2013-08-23 16:43 2013-08-13 Show GitHub Exploit DB Packet Storm
219269 7.8 危険 Kepware Technologies - KEPServerEX 用 Kepware DNP Master Driver におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2013-2789 2013-08-23 16:39 2013-08-14 Show GitHub Exploit DB Packet Storm
219270 3.5 注意 アドバンテック株式会社 - Advantech WebAccess におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-2299 2013-08-23 16:31 2013-08-13 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 25, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
277761 - caucho resin Caucho Technology Resin 2.1.12 allows remote attackers to gain sensitive information and view the contents of the /WEB-INF/ directory via an HTTP request for "WEB-INF..", which is equivalent to "WEB-… NVD-CWE-Other
CVE-2004-0281 2019-06-13 02:04 2004-11-23 Show GitHub Exploit DB Packet Storm
277762 - eric_allman sendmail The debug command in Sendmail is enabled, allowing attackers to execute commands as root. NVD-CWE-Other
CVE-1999-0095 2019-06-12 05:29 1988-10-1 Show GitHub Exploit DB Packet Storm
277763 - eric_allman sendmail Sendmail WIZ command enabled, allowing root access. NVD-CWE-Other
CVE-1999-0145 2019-06-12 05:29 1993-09-30 Show GitHub Exploit DB Packet Storm
277764 - f5 big-ip_protocol_security_module
big-ip_application_security_manager
big-ip_protocol_security_manager 		Buffer overflow in the bd daemon in F5 Networks BIG-IP Application Security Manager (ASM) 9.4.4 through 9.4.7 and 10.0.0 through 10.0.1, and Protocol Security Manager (PSM) 9.4.5 through 9.4.7 and 10… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2009-4420 2019-06-7 00:11 2009-12-25 Show GitHub Exploit DB Packet Storm
277765 - bea weblogic_server The Administration Console in BEA WebLogic Express and WebLogic Server 9.0 and 9.1 does not properly enforce certain Domain Security Policies, which allows remote administrative users in the Deployer… NVD-CWE-Other
CVE-2007-2699 2019-05-29 02:29 2007-05-16 Show GitHub Exploit DB Packet Storm
277766 - ibm db2 Stack-based buffer overflow in IBM DB2 8.x before 8.1 FixPak 15 and 9.1 before Fix Pack 2 allows local users to execute arbitrary code via a long string in unspecified environment variables. CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2007-1088 2019-05-24 02:06 2007-02-24 Show GitHub Exploit DB Packet Storm
277767 - ibm db2 IBM DB2 8.x before 8.1 FixPak 15 and 9.1 before Fix Pack 2 does not properly terminate certain input strings, which allows local users to execute arbitrary code via unspecified environment variables … CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2007-1087 2019-05-24 02:02 2007-02-24 Show GitHub Exploit DB Packet Storm
277768 - cisco unified_ip_phone_firmware_7906g
unified_ip_phone_firmware_7911g
unified_ip_phone_firmware_7941g
unified_ip_phone_firmware_7961g
unified_ip_phone_firmware_7970g
unified_ip_phone_firmwar… 		The command line interface (CLI) in Cisco Unified IP Phone 7906G, 7911G, 7941G, 7961G, 7970G, and 7971G, with firmware 8.0(4)SR1 and earlier allows local users to obtain privileges or cause a denial … CWE-264
Permissions, Privileges, and Access Controls 		CVE-2007-1072 2019-05-24 01:16 2007-02-23 Show GitHub Exploit DB Packet Storm
277769 - cisco unified_ip_phone_firmware_7906g
unified_ip_phone_firmware_7911g
unified_ip_phone_firmware_7941g
unified_ip_phone_firmware_7961g
unified_ip_phone_firmware_7970g
unified_ip_phone_firmwar… 		The SSH server in Cisco Unified IP Phone 7906G, 7911G, 7941G, 7961G, 7970G, and 7971G, with firmware 8.0(4)SR1 and earlier, uses a hard-coded username and password, which allows remote attackers to a… CWE-798
 Use of Hard-coded Credentials 		CVE-2007-1063 2019-05-24 01:15 2007-02-22 Show GitHub Exploit DB Packet Storm
277770 - cisco unified_ip_conference_station_7935_firmware
unified_ip_conference_station_firmware_7936 		The Cisco Unified IP Conference Station 7935 3.2(15) and earlier, and Station 7936 3.3(12) and earlier does not properly handle administrator HTTP sessions, which allows remote attackers to bypass au… CWE-287
Improper Authentication 		CVE-2007-1062 2019-05-24 01:13 2007-02-22 Show GitHub Exploit DB Packet Storm