Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 28, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
219521 6.8 警告 シスコシステムズ - Cisco IOS XE の SNMP モジュールにおけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2014-3269 2014-05-21 15:12 2014-05-19 Show GitHub Exploit DB Packet Storm
219522 5 警告 シスコシステムズ - Cisco Unified Border Element デバイス上で稼動する Cisco IOS におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2014-3268 2014-05-21 15:11 2014-05-19 Show GitHub Exploit DB Packet Storm
219523 4.3 警告 シスコシステムズ - Cisco Security Manager の Auto Update Server の Web フレームワークにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2014-3265 2014-05-21 15:10 2014-05-19 Show GitHub Exploit DB Packet Storm
219524 6.3 警告 シスコシステムズ - Cisco Adaptive Security Appliance ソフトウェアにおけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2014-3264 2014-05-21 15:09 2014-05-19 Show GitHub Exploit DB Packet Storm
219525 5 警告 シスコシステムズ - 複数の Cisco WebEx 製品の meetinginfo.do における重要なミーティング情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2014-2199 2014-05-21 15:08 2014-05-15 Show GitHub Exploit DB Packet Storm
219526 4.3 警告 シスコシステムズ - 複数の Cisco セキュリティ アプライアンス上で稼働する Cisco AsyncOS におけるロールの権限を取得される脆弱性 CWE-20
不適切な入力確認 		CVE-2014-2195 2014-05-21 15:07 2014-05-20 Show GitHub Exploit DB Packet Storm
219527 6.8 警告 シスコシステムズ - Cisco Unified Web and E-mail Interaction Manager における脆弱性 CWE-20
不適切な入力確認 		CVE-2014-2194 2014-05-21 15:06 2014-05-19 Show GitHub Exploit DB Packet Storm
219528 4.3 警告 シスコシステムズ - Cisco Unified Web and E-mail Interaction Manager における会話テキストを挿入される脆弱性 CWE-20
不適切な入力確認 		CVE-2014-2193 2014-05-21 15:05 2014-05-20 Show GitHub Exploit DB Packet Storm
219529 4.3 警告 シスコシステムズ - Cisco Unified Web and E-mail Interaction Manager におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2014-2192 2014-05-21 15:05 2014-05-19 Show GitHub Exploit DB Packet Storm
219530 4.6 警告 シスコシステムズ - Cisco NX-OS のコマンドラインインターフェースにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2013-6975 2014-05-21 15:04 2013-12-5 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
291591 - microsoft internet_explorer Use-after-free vulnerability in Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted CMarkup object, aka "Internet … CWE-399
 Resource Management Errors 		CVE-2013-3140 2024-11-21 10:53 2013-12-17 Show GitHub Exploit DB Packet Storm
291592 - vmware esxi
workstation
esx
player
fusion 		lgtosync.sys in VMware Workstation 9.x before 9.0.3, VMware Player 5.x before 5.0.3, VMware Fusion 5.x before 5.0.4, VMware ESXi 4.0 through 5.1, and VMware ESX 4.0 and 4.1, when a 32-bit Windows gue… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2013-3519 2024-11-21 10:53 2013-12-5 Show GitHub Exploit DB Packet Storm
291593 - cisco prime_network_registrar Cross-site scripting (XSS) vulnerability in the web interface in Cisco Prime Network Registrar 8.1 and earlier allows remote attackers to inject arbitrary web script or HTML via a crafted field, aka … CWE-79
Cross-site Scripting 		CVE-2013-3394 2024-11-21 10:53 2013-11-27 Show GitHub Exploit DB Packet Storm
291594 - emc rsa_data_protection_manager_appliance Cross-site scripting (XSS) vulnerability on the EMC RSA Data Protection Manager (DPM) appliance 3.2.x before 3.2.4.2 and 3.5.x before 3.5.1 allows remote attackers to inject arbitrary web script or H… CWE-79
Cross-site Scripting 		CVE-2013-3288 2024-11-21 10:53 2013-11-23 Show GitHub Exploit DB Packet Storm
291595 - cisco server_provisioner The web interface in Cisco Server Provisioner 6.4.0 Patch 5-1301292331 and earlier does not require authentication for unspecified pages, which allows remote attackers to obtain sensitive information… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2013-3407 2024-11-21 10:53 2013-11-18 Show GitHub Exploit DB Packet Storm
291596 - cisco service_portal The "Files Available for Download" implementation in the Cisco Intelligent Automation for Cloud component in Cisco Services Portal 9.4(1) allows remote authenticated users to read arbitrary files via… CWE-20
 Improper Input Validation  		CVE-2013-3406 2024-11-21 10:53 2013-11-18 Show GitHub Exploit DB Packet Storm
291597 - emc documentum_eroom Multiple cross-site scripting (XSS) vulnerabilities in EMC Documentum eRoom before 7.4.4 P11 allow remote attackers to inject arbitrary web script or HTML via a crafted URL. CWE-79
Cross-site Scripting 		CVE-2013-3286 2024-11-21 10:53 2013-11-7 Show GitHub Exploit DB Packet Storm
291598 - emc documentum_taskspace
documentum_capital_projects
documentum_wdk
documentum_digital_asset_manager
documentum_administrator
documentum_webtop
documentum_web_publisher 		Cross-site scripting (XSS) vulnerability in EMC Documentum Webtop before 6.7 SP2 P07, Documentum WDK before 6.7 SP2 P07, Documentum Taskspace before 6.7 SP2 P07, Documentum Records Manager before 6.7… CWE-79
Cross-site Scripting 		CVE-2013-3281 2024-11-21 10:53 2013-11-7 Show GitHub Exploit DB Packet Storm
291599 - smackcoders wp_ultimate_email_marketer_plugin The WP Ultimate Email Marketer plugin 1.1.0 and possibly earlier for Wordpress does not properly restrict access to (1) list/edit.php and (2) campaign/editCampaign.php, which allows remote attackers … CWE-264
Permissions, Privileges, and Access Controls 		CVE-2013-3264 2024-11-21 10:53 2013-11-6 Show GitHub Exploit DB Packet Storm
291600 - smackcoders wp_ultimate_email_marketer_plugin Multiple cross-site scripting (XSS) vulnerabilities in the WP Ultimate Email Marketer plugin 1.1.0 and possibly earlier for Wordpress allow remote attackers to inject arbitrary web script or HTML via… CWE-79
Cross-site Scripting 		CVE-2013-3263 2024-11-21 10:53 2013-11-6 Show GitHub Exploit DB Packet Storm