Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
219431 5 警告 オラクル - Oracle Java SE および JavaFX の Java Runtime Environment における JavaFX の処理に関する脆弱性 CWE-noinfo
情報不足
CVE-2013-1561 2013-08-12 17:39 2013-04-16 Show GitHub Exploit DB Packet Storm
219432 10 危険 オラクル - Oracle Java SE および JavaFX の Java Runtime Environment における JavaFX の処理に関する脆弱性 CWE-noinfo
情報不足
CVE-2013-2427 2013-08-12 17:25 2013-04-16 Show GitHub Exploit DB Packet Storm
219433 10 危険 オラクル - Oracle Java SE および JavaFX の Java Runtime Environment における JavaFX の処理に関する脆弱性 CWE-noinfo
情報不足
CVE-2013-2428 2013-08-12 17:24 2013-04-16 Show GitHub Exploit DB Packet Storm
219434 10 危険 オラクル - Oracle Java SE および JavaFX の Java Runtime Environment における JavaFX の処理に関する脆弱性 CWE-noinfo
情報不足
CVE-2013-2414 2013-08-12 17:22 2013-04-16 Show GitHub Exploit DB Packet Storm
219435 10 危険 オラクル - Oracle Java SE の Java Runtime Environment における Install の処理に関する脆弱性 CWE-noinfo
情報不足
CVE-2013-2425 2013-08-12 16:54 2013-04-16 Show GitHub Exploit DB Packet Storm
219436 6.8 警告 Shareaholic - WordPress 用 Shareaholic SexyBookmarks プラグインにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2013-3256 2013-08-12 12:25 2013-08-1 Show GitHub Exploit DB Packet Storm
219437 10 危険 シスコシステムズ - 複数の Cisco TelePresence System デバイス上で稼働する Cisco TelePresence System Software における設定を変更される脆弱性 CWE-255
証明書・パスワード管理
CVE-2013-3454 2013-08-12 12:24 2013-08-7 Show GitHub Exploit DB Packet Storm
219438 6.8 警告 サイバートラスト株式会社
ProFTPD Project
ターボリナックス
レッドハット
- 複数の STARTTLS 実装に脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2011-0411 2013-08-9 18:20 2011-03-8 Show GitHub Exploit DB Packet Storm
219439 10 危険 オラクル - Oracle Java SE および JavaFX の Java Runtime Environment における 2D の処理に関する脆弱性 CWE-noinfo
情報不足
CVE-2013-2434 2013-08-9 17:53 2013-04-16 Show GitHub Exploit DB Packet Storm
219440 6.5 警告 Huawei - 複数の Huawei 製品における平文パスワードを取得される脆弱性 CWE-310
暗号の問題
CVE-2012-4960 2013-08-9 16:41 2012-12-17 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 25, 2026, 4:08 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
277761 - caucho resin Caucho Technology Resin 2.1.12 allows remote attackers to gain sensitive information and view the contents of the /WEB-INF/ directory via an HTTP request for "WEB-INF..", which is equivalent to "WEB-… NVD-CWE-Other
CVE-2004-0281 2019-06-13 02:04 2004-11-23 Show GitHub Exploit DB Packet Storm
277762 - eric_allman sendmail The debug command in Sendmail is enabled, allowing attackers to execute commands as root. NVD-CWE-Other
CVE-1999-0095 2019-06-12 05:29 1988-10-1 Show GitHub Exploit DB Packet Storm
277763 - eric_allman sendmail Sendmail WIZ command enabled, allowing root access. NVD-CWE-Other
CVE-1999-0145 2019-06-12 05:29 1993-09-30 Show GitHub Exploit DB Packet Storm
277764 - f5 big-ip_protocol_security_module
big-ip_application_security_manager
big-ip_protocol_security_manager
Buffer overflow in the bd daemon in F5 Networks BIG-IP Application Security Manager (ASM) 9.4.4 through 9.4.7 and 10.0.0 through 10.0.1, and Protocol Security Manager (PSM) 9.4.5 through 9.4.7 and 10… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2009-4420 2019-06-7 00:11 2009-12-25 Show GitHub Exploit DB Packet Storm
277765 - bea weblogic_server The Administration Console in BEA WebLogic Express and WebLogic Server 9.0 and 9.1 does not properly enforce certain Domain Security Policies, which allows remote administrative users in the Deployer… NVD-CWE-Other
CVE-2007-2699 2019-05-29 02:29 2007-05-16 Show GitHub Exploit DB Packet Storm
277766 - ibm db2 Stack-based buffer overflow in IBM DB2 8.x before 8.1 FixPak 15 and 9.1 before Fix Pack 2 allows local users to execute arbitrary code via a long string in unspecified environment variables. CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2007-1088 2019-05-24 02:06 2007-02-24 Show GitHub Exploit DB Packet Storm
277767 - ibm db2 IBM DB2 8.x before 8.1 FixPak 15 and 9.1 before Fix Pack 2 does not properly terminate certain input strings, which allows local users to execute arbitrary code via unspecified environment variables … CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2007-1087 2019-05-24 02:02 2007-02-24 Show GitHub Exploit DB Packet Storm
277768 - cisco unified_ip_phone_firmware_7906g
unified_ip_phone_firmware_7911g
unified_ip_phone_firmware_7941g
unified_ip_phone_firmware_7961g
unified_ip_phone_firmware_7970g
unified_ip_phone_firmwar…
The command line interface (CLI) in Cisco Unified IP Phone 7906G, 7911G, 7941G, 7961G, 7970G, and 7971G, with firmware 8.0(4)SR1 and earlier allows local users to obtain privileges or cause a denial … CWE-264
Permissions, Privileges, and Access Controls
CVE-2007-1072 2019-05-24 01:16 2007-02-23 Show GitHub Exploit DB Packet Storm
277769 - cisco unified_ip_phone_firmware_7906g
unified_ip_phone_firmware_7911g
unified_ip_phone_firmware_7941g
unified_ip_phone_firmware_7961g
unified_ip_phone_firmware_7970g
unified_ip_phone_firmwar…
The SSH server in Cisco Unified IP Phone 7906G, 7911G, 7941G, 7961G, 7970G, and 7971G, with firmware 8.0(4)SR1 and earlier, uses a hard-coded username and password, which allows remote attackers to a… CWE-798
 Use of Hard-coded Credentials
CVE-2007-1063 2019-05-24 01:15 2007-02-22 Show GitHub Exploit DB Packet Storm
277770 - cisco unified_ip_conference_station_7935_firmware
unified_ip_conference_station_firmware_7936
The Cisco Unified IP Conference Station 7935 3.2(15) and earlier, and Station 7936 3.3(12) and earlier does not properly handle administrator HTTP sessions, which allows remote attackers to bypass au… CWE-287
Improper Authentication
CVE-2007-1062 2019-05-24 01:13 2007-02-22 Show GitHub Exploit DB Packet Storm