Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 6, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
220421 4.6 警告 Canonical - Ubuntu Date and Time Indicator におけるグリーター画面の制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2013-7374 2014-05-2 15:50 2013-11-27 Show GitHub Exploit DB Packet Storm
220422 4.3 警告 SAP - SAP BusinessObjects の InfoView アプリケーションにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-3134 2014-05-2 15:43 2014-04-28 Show GitHub Exploit DB Packet Storm
220423 5 警告 SAP - SAP Netweaver Java Application Server における SLD に登録されている SAP システムのリストを取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2014-3133 2014-05-2 15:37 2014-04-28 Show GitHub Exploit DB Packet Storm
220424 4 警告 SAP - SAP Background Processing における重要な情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2014-3132 2014-05-2 15:32 2014-04-28 Show GitHub Exploit DB Packet Storm
220425 4 警告 SAP - SAP Profile Maintenance における重要な情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2014-3131 2014-05-2 15:28 2014-04-28 Show GitHub Exploit DB Packet Storm
220426 4.6 警告 SAP - SAP Netweaver ABAP Application Server の Basis の ABAP Help ドキュメンテーションおよび翻訳ツールにおける権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2014-3130 2014-05-2 15:24 2014-04-28 Show GitHub Exploit DB Packet Storm
220427 5 警告 SAP - SAP NetWeaver の Software Lifecycle Manager の Java Server Page における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2014-3129 2014-05-2 15:18 2014-04-28 Show GitHub Exploit DB Packet Storm
220428 3.5 注意 Eugene Pankov - Eugene Pankov Ajenti の plugins/main/content/js/ajenti.coffee におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-2260 2014-05-2 15:15 2014-01-16 Show GitHub Exploit DB Packet Storm
220429 7.2 危険 Super Project - Super の super.c における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2014-0470 2014-05-2 15:10 2014-04-28 Show GitHub Exploit DB Packet Storm
220430 9 危険 フォーティネット - FortiGuard FortiAuthenticator における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2013-6990 2014-05-2 15:07 2013-12-15 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 7, 2026, 4:13 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
292661 - cisco adaptive_security_appliance_software The SSL implementation in Cisco Adaptive Security Appliance (ASA) Software 9.0 before 9.0(2.6) and 9.1 before 9.1(2) allows remote attackers to bypass authentication, and obtain VPN access or adminis… CWE-264
Permissions, Privileges, and Access Controls
CVE-2013-5509 2024-11-21 10:57 2013-10-13 Show GitHub Exploit DB Packet Storm
292662 - cisco adaptive_security_appliance_software
firewall_services_module_software
The SQL*Net inspection engine in Cisco Adaptive Security Appliance (ASA) Software 7.x before 7.2(5.12), 8.x before 8.2(5.44), 8.3.x before 8.3(2.39), 8.4.x before 8.4(6), 8.5.x before 8.5(1.18), 8.6.… CWE-20
 Improper Input Validation 
CVE-2013-5508 2024-11-21 10:57 2013-10-13 Show GitHub Exploit DB Packet Storm
292663 - cisco adaptive_security_appliance_software The IPsec implementation in Cisco Adaptive Security Appliance (ASA) Software 9.1 before 9.1(1.7), when an IPsec VPN tunnel is enabled, allows remote attackers to cause a denial of service (device rel… CWE-310
Cryptographic Issues
CVE-2013-5507 2024-11-21 10:57 2013-10-13 Show GitHub Exploit DB Packet Storm
292664 - cisco firewall_services_module_software The authorization functionality in Cisco Firewall Services Module (FWSM) 3.1.x and 3.2.x before 3.2(25) and 4.x before 4.1(13), when multiple-context mode is enabled, allows local users to read or mo… CWE-264
Permissions, Privileges, and Access Controls
CVE-2013-5506 2024-11-21 10:57 2013-10-13 Show GitHub Exploit DB Packet Storm
292665 - cisco unified_ip_phones_9900_series_firmware
unified_ip_phone_9951
unified_ip_phone_9971
The image-upgrade functionality on Cisco 9900 Unified IP phones allows local users to gain privileges by placing shell commands in an unspecified parameter, aka Bug ID CSCuh10334. CWE-20
 Improper Input Validation 
CVE-2013-5533 2024-11-21 10:57 2013-10-11 Show GitHub Exploit DB Packet Storm
292666 - cisco unified_ip_phones_9900_series_firmware
unified_ip_phone_9951
unified_ip_phone_9971
Buffer overflow in the web-application interface on Cisco 9900 IP phones allows remote attackers to cause a denial of service (webapp interface outage) via long values in unspecified fields, aka Bug … CWE-20
 Improper Input Validation 
CVE-2013-5532 2024-11-21 10:57 2013-10-11 Show GitHub Exploit DB Packet Storm
292667 - cisco unified_communications_manager Directory traversal vulnerability in the Tomcat administrative web interface in Cisco Unified Communications Manager allows remote authenticated users to read arbitrary files via directory traversal … CWE-22
Path Traversal
CVE-2013-5528 2024-11-21 10:57 2013-10-11 Show GitHub Exploit DB Packet Storm
292668 - cisco ios
ios_xe
The OSPF functionality in Cisco IOS and IOS XE allows remote attackers to cause a denial of service (device reload) via crafted options in an LSA type 11 packet, aka Bug ID CSCui21030. CWE-20
 Improper Input Validation 
CVE-2013-5527 2024-11-21 10:57 2013-10-10 Show GitHub Exploit DB Packet Storm
292669 - cisco unified_ip_phone_9951
unified_ip_phone_9971
Cisco 9900 fourth-generation IP phones do not properly perform SDP negotiation, which allows remote attackers to cause a denial of service (device reboot) via crafted SDP packets, aka Bug ID CSCuf066… CWE-20
 Improper Input Validation 
CVE-2013-5526 2024-11-21 10:57 2013-10-10 Show GitHub Exploit DB Packet Storm
292670 - cisco identity_services_engine_software SQL injection vulnerability in the web framework in Cisco Identity Services Engine (ISE) 1.2 and earlier allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, a… CWE-89
SQL Injection
CVE-2013-5525 2024-11-21 10:57 2013-10-10 Show GitHub Exploit DB Packet Storm