Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
219931 5 警告 シスコシステムズ - Cisco Prime for HCS Assurance の Web フレームワークにおけるデイレクトリおよびファイルを列挙される脆弱性 CWE-200
情報漏えい
CVE-2013-3398 2013-06-28 11:56 2013-06-26 Show GitHub Exploit DB Packet Storm
219932 4.3 警告 シスコシステムズ - Cisco コンテンツ セキュリティ管理アプライアンスデバイス上で稼働する Cisco Content Security Management におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-3396 2013-06-28 11:54 2013-06-26 Show GitHub Exploit DB Packet Storm
219933 5 警告 シスコシステムズ - Cisco Jabber for Windows および Cisco Virtualization Experience Media Engine におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2013-3393 2013-06-28 11:53 2013-06-25 Show GitHub Exploit DB Packet Storm
219934 7.8 危険 シスコシステムズ - Cisco Adaptive Security Appliances デバイス用 Next-Generation Firewall モジュールにおけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2013-3382 2013-06-28 11:53 2013-06-26 Show GitHub Exploit DB Packet Storm
219935 4.3 警告 Mozilla Foundation - 複数の Mozilla 製品におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-0793 2013-06-27 17:21 2013-04-2 Show GitHub Exploit DB Packet Storm
219936 9.3 危険 cairographics.org
Mozilla Foundation
Pixman
- 複数の Mozilla 製品などで使用される Pixman における整数符号エラーの脆弱性 CWE-189
数値処理の問題
CVE-2013-0800 2013-06-27 17:18 2013-04-2 Show GitHub Exploit DB Packet Storm
219937 10 危険 Mozilla Foundation - Linux 上で稼働する複数の Mozilla 製品における任意のコードを実行される脆弱性 CWE-noinfo
情報不足
CVE-2013-0796 2013-06-27 17:15 2013-04-2 Show GitHub Exploit DB Packet Storm
219938 10 危険 Mozilla Foundation - 複数の Mozilla 製品の SOW の実装における同一生成元ポリシーを回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2013-0795 2013-06-27 17:11 2013-04-2 Show GitHub Exploit DB Packet Storm
219939 5.8 警告 Mozilla Foundation - Mozilla Firefox および SeaMonkey におけるフィッシング攻撃を実行される脆弱性 CWE-Other
その他
CVE-2013-0794 2013-06-27 17:08 2013-04-2 Show GitHub Exploit DB Packet Storm
219940 4.3 警告 Mozilla Foundation - Mozilla Firefox および SeaMonkey における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2013-0792 2013-06-27 17:02 2013-04-2 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 26, 2026, 4:08 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
621 6.5 MEDIUM
Network
wwbn avideo WWBN AVideo is an open source video platform. In versions 29.0 and prior, the endpoint `plugin/Live/view/Live_restreams/list.json.php` contains an Insecure Direct Object Reference (IDOR) vulnerabilit… New CWE-639
 Authorization Bypass Through User-Controlled Key
CVE-2026-40907 2026-04-24 04:12 2026-04-22 Show GitHub Exploit DB Packet Storm
622 5.3 MEDIUM
Network
wwbn avideo WWBN AVideo is an open source video platform. In versions 29.0 and prior, the file `git.json.php` at the web root executes `git log -1` and returns the full output as JSON to any unauthenticated user… New CWE-200
Information Exposure
CVE-2026-40908 2026-04-24 04:09 2026-04-22 Show GitHub Exploit DB Packet Storm
623 6.5 MEDIUM
Network
wwbn avideo WWBN AVideo is an open source video platform. In versions 29.0 and prior, the locale save endpoint (`locale/save.php`) constructs a file path by directly concatenating `$_POST['flag']` into the path … New CWE-22
Path Traversal
CVE-2026-40909 2026-04-24 03:55 2026-04-22 Show GitHub Exploit DB Packet Storm
624 6.1 MEDIUM
Network
oracle identity_manager Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: Identity Console). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitabl… New CWE-284
CWE-601
Improper Access Control
Open Redirect
CVE-2026-34283 2026-04-24 03:50 2026-04-22 Show GitHub Exploit DB Packet Storm
625 6.1 MEDIUM
Network
oracle business_process_management_suite Vulnerability in the Oracle Business Process Management Suite product of Oracle Fusion Middleware (component: Human workflow 11g+). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.… New CWE-284
CWE-601
Improper Access Control
Open Redirect
CVE-2026-34284 2026-04-24 03:50 2026-04-22 Show GitHub Exploit DB Packet Storm
626 8.7 HIGH
Network
oracle http_server Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability… New CWE-284
Improper Access Control
CVE-2026-34291 2026-04-24 03:48 2026-04-22 Show GitHub Exploit DB Packet Storm
627 7.2 HIGH
Network
oracle weblogic_server Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerabili… New CWE-284
Improper Access Control
CVE-2026-34292 2026-04-24 03:47 2026-04-22 Show GitHub Exploit DB Packet Storm
628 8.8 HIGH
Network
nicolargo glances Glances is an open-source system cross-platform monitoring tool. Prior to version 4.5.4, a Server-Side Request Forgery (SSRF) vulnerability exists in the Glances IP plugin due to improper validation … New CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2026-35587 2026-04-24 03:42 2026-04-21 Show GitHub Exploit DB Packet Storm
629 9.8 CRITICAL
Network
reconurge flowsint Flowsint is an open-source OSINT graph exploration tool designed for cybersecurity investigation, transparency, and verification. Flowsint allows a user to create investigations, which are used to ma… New CWE-78
OS Command 
CVE-2026-32311 2026-04-24 03:41 2026-04-21 Show GitHub Exploit DB Packet Storm
630 8.4 HIGH
Local
gitlawb openclaude OpenClaude is an open-source coding-agent command line interface for cloud and local model providers. Versions prior to 0.5.1 have a logic flaw in `bashToolHasPermission()` inside `src/tools/BashTool… New CWE-22
CWE-284
Path Traversal
Improper Access Control
CVE-2026-35570 2026-04-24 03:37 2026-04-21 Show GitHub Exploit DB Packet Storm