Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 27, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
222081	4.3	警告	Zenphoto	-	Zenphoto の zp-core/zp-extensions/mergedRSS.php 内の export 関数におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-7241	2014-01-7 10:49	2013-10-1	Show	GitHub Exploit DB Packet Storm

222082	6.5	警告	シスコシステムズ	-	Cisco Unified Presence Server の Web インターフェースにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2013-6983	2014-01-6 18:30	2014-01-3	Show	GitHub Exploit DB Packet Storm

222083	6.8	警告	The JForum Team	-	JForum の Admin モジュールの admBase/login.page におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2013-7209	2014-01-6 18:29	2013-12-26	Show	GitHub Exploit DB Packet Storm

222084	6.8	警告	WordPress.org	-	WordPress の wp-admin/options-discussion.php の retrospam コンポーネントにおけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2013-7233	2014-01-6 18:28	2013-12-17	Show	GitHub Exploit DB Packet Storm

222085	7.5	危険	Esri	-	ESRI ArcGIS for Server における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2013-7232	2014-01-6 18:27	2013-12-19	Show	GitHub Exploit DB Packet Storm

222086	3.5	注意	Esri	-	ESRI ArcGIS for Server の Mobile Content Server におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-7231	2014-01-6 18:27	2013-08-2	Show	GitHub Exploit DB Packet Storm

222087	3.5	注意	Esri	-	ESRI ArcGIS for Server におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-5222	2014-01-6 18:26	2013-08-7	Show	GitHub Exploit DB Packet Storm

222088	4.3	警告	ADTRAN	-	NetVanta 7000 シリーズ製品上で稼働する ADTRAN AOS の GUI ログインページにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-5210	2014-01-6 18:14	2013-09-9	Show	GitHub Exploit DB Packet Storm

222089	4.3	警告	X.Org Foundation	-	X.Org xdm におけるサービス運用妨害 (DoS) の脆弱性	CWE-310 暗号の問題	CVE-2013-2179	2014-01-6 17:58	2013-06-7	Show	GitHub Exploit DB Packet Storm

222090	7.2	危険	DELL EMC (旧 EMC Corporation)	-	EMC Replication Manager における権限を取得される脆弱性	CWE-Other その他	CVE-2013-6182	2014-01-6 17:54	2013-12-24	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
273451	5.5	MEDIUM Local	huawei	e3272s_firmware	Huawei MBB (Mobile Broadband) product E3272s with software versions earlier than E3272s-153TCPU-V200R002B491D09SP00C00 has a Denial of Service (DoS) vulnerability. An attacker could send a malicious …	CWE-20 Improper Input Validation	CVE-2015-7847	2024-11-21 11:37	2017-04-3	Show	GitHub Exploit DB Packet Storm

273452	7.5	HIGH Network	huawei	fusionaccess	Huawei FusionAccess with software V100R005C10,V100R005C20 could allow attackers to craft and send a malformed HDP protocol packet to cause the virtual cloud desktop to be displaying an error and not …	CWE-20 Improper Input Validation	CVE-2015-7844	2024-11-21 11:37	2017-04-3	Show	GitHub Exploit DB Packet Storm

273453	6.1	MEDIUM Network	icinga opensuse_project opensuse	icinga leap	Cross-site scripting (XSS) vulnerability in the Classic-UI with the CSV export link and pagination feature in Icinga before 1.14 allows remote attackers to inject arbitrary web script or HTML via the…	CWE-79 Cross-site Scripting	CVE-2015-8010	2024-11-21 11:37	2017-03-28	Show	GitHub Exploit DB Packet Storm

273454	7.8	HIGH Local	exfat_project	exfat	Heap-based buffer overflow in the verify_vbr_checksum function in exfatfsck in exfat-utils before 1.2.1 allows remote attackers to cause a denial of service (infinite loop) or possibly execute arbitr…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2015-8026	2024-11-21 11:37	2017-03-28	Show	GitHub Exploit DB Packet Storm

273455	8.1	HIGH Network	windriver	vxworks	Integer overflow in the _authenticate function in svc_auth.c in Wind River VxWorks 5.5 through 6.9.4.1, when the Remote Procedure Call (RPC) protocol is enabled, allows remote attackers to cause a de…	CWE-190 Integer Overflow or Wraparound	CVE-2015-7599	2024-11-21 11:37	2017-02-8	Show	GitHub Exploit DB Packet Storm

273456	3.3	LOW Local	saltstack	salt	The state.sls function in Salt before 2015.8.3 uses weak permissions on the cache data, which allows local users to obtain sensitive information by reading the file.	CWE-200 Information Exposure	CVE-2015-8034	2024-11-21 11:37	2017-01-31	Show	GitHub Exploit DB Packet Storm

273457	7.5	HIGH Network	ntp	ntp	NTP before 4.2.8p6 and 4.3.x before 4.3.90 allows remote attackers to cause a denial of service (client-server association tear down) by sending broadcast packets with invalid authentication to a bro…	CWE-19 Data Processing Errors	CVE-2015-7979	2024-11-21 11:37	2017-01-31	Show	GitHub Exploit DB Packet Storm

273458	7.5	HIGH Network	ntp	ntp	NTP before 4.2.8p6 and 4.3.0 before 4.3.90 allows a remote attackers to cause a denial of service (stack exhaustion) via an ntpdc relist command, which triggers recursive traversal of the restriction…	CWE-400 Uncontrolled Resource Consumption	CVE-2015-7978	2024-11-21 11:37	2017-01-31	Show	GitHub Exploit DB Packet Storm

273459	5.9	MEDIUM Network	ntp oracle siemens netapp freebsd fedoraproject debian canonical	ntp linux tim_4r-ie_firmware tim_4r-ie_dnp3_firmware oncommand_balance clustered_data_ontap freebsd fedora debian_linux ubuntu_linux	ntpd in NTP before 4.2.8p6 and 4.3.x before 4.3.90 allows remote attackers to cause a denial of service (NULL pointer dereference) via a ntpdc reslist command.	CWE-476 NULL Pointer Dereference	CVE-2015-7977	2024-11-21 11:37	2017-01-31	Show	GitHub Exploit DB Packet Storm

273460	4.3	MEDIUM Network	ntp suse novell opensuse	ntp linux_enterprise_server linux_enterprise_debuginfo manager_proxy manager linux_enterprise_desktop suse_openstack_cloud leap opensuse suse_linux_enterprise_server	The ntpq saveconfig command in NTP 4.1.2, 4.2.x before 4.2.8p6, 4.3, 4.3.25, 4.3.70, and 4.3.77 does not properly filter special characters, which allows attackers to cause unspecified impact via a c…	CWE-254 7PK - Security Features	CVE-2015-7976	2024-11-21 11:37	2017-01-31	Show	GitHub Exploit DB Packet Storm