Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 20, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
223801 6.8 警告 シスコシステムズ - Cisco Unified Communications Manager の Enterprise License Manager におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2013-3472 2013-09-2 12:31 2013-08-28 Show GitHub Exploit DB Packet Storm
223802 4.3 警告 シスコシステムズ - Cisco Identity Services Engine の captive portal アプリケーションにおける平文のユーザ名およびパスワードを破られる脆弱性 CWE-255
証明書・パスワード管理
CVE-2013-3471 2013-09-2 12:27 2013-08-28 Show GitHub Exploit DB Packet Storm
223803 7.8 危険 シスコシステムズ - Cisco Unified IP Phone 8945 のソフトウェアにおけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2013-3468 2013-09-2 12:21 2013-08-28 Show GitHub Exploit DB Packet Storm
223804 9.3 危険 シスコシステムズ - Cisco Secure Access Control Server の EAP-FAST 認証モジュールにおける任意のコマンドを実行される脆弱性 CWE-287
不適切な認証
CVE-2013-3466 2013-09-2 12:11 2013-08-28 Show GitHub Exploit DB Packet Storm
223805 7.5 危険 Adam Zaninovich - Ruby 用 sounder gem の lib/sounder/sound.rb における任意のコマンドを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2013-5647 2013-09-2 11:04 2013-08-9 Show GitHub Exploit DB Packet Storm
223806 3.5 注意 Roundcube.net - Roundcube Webmail におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-5646 2013-09-2 09:58 2013-08-4 Show GitHub Exploit DB Packet Storm
223807 4.3 警告 Roundcube.net - Roundcube Webmail におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-5645 2013-09-2 09:51 2013-08-1 Show GitHub Exploit DB Packet Storm
223808 7.5 危険 The Cacti Group - Cacti の cacti/host.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2013-5589 2013-08-30 16:46 2013-08-24 Show GitHub Exploit DB Packet Storm
223809 4.3 警告 The Cacti Group - Cacti におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-5588 2013-08-30 16:44 2013-08-24 Show GitHub Exploit DB Packet Storm
223810 7.8 危険 FreeBSD - FreeBSD のカーネルの SCTP の実装におけるカーネルスタックメモリから重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2013-5209 2013-08-30 16:42 2012-08-22 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 21, 2026, 4:10 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
277801 - cisco unified_meetingplace Cisco Unified MeetingPlace 8.6(1.2) does not properly validate session IDs in http URLs, which allows remote attackers to obtain sensitive session information via a crafted URL, aka Bug ID CSCuu60338. CWE-200
Information Exposure
CVE-2015-0763 2024-11-21 11:23 2015-06-4 Show GitHub Exploit DB Packet Storm
277802 - cisco unified_meetingplace Cross-site scripting (XSS) vulnerability in the management interface in Cisco Unified MeetingPlace 8.6(1.2) and 8.6(1.9) for Microsoft Outlook allows remote attackers to inject arbitrary web script o… CWE-79
Cross-site Scripting
CVE-2015-0762 2024-11-21 11:23 2015-06-4 Show GitHub Exploit DB Packet Storm
277803 - cisco anyconnect_secure_mobility_client Cisco AnyConnect Secure Mobility Client before 3.1(8009) and 4.x before 4.0(2052) on Linux does not properly implement unspecified internal functions, which allows local users to obtain root privileg… CWE-264
Permissions, Privileges, and Access Controls
CVE-2015-0761 2024-11-21 11:23 2015-06-4 Show GitHub Exploit DB Packet Storm
277804 - cisco adaptive_security_appliance_software The IKEv1 implementation in Cisco ASA Software 7.x, 8.0.x, 8.1.x, and 8.2.x before 8.2.2.13 allows remote authenticated users to bypass XAUTH authentication via crafted IKEv1 packets, aka Bug ID CSCu… CWE-264
CWE-20
Permissions, Privileges, and Access Controls
 Improper Input Validation 
CVE-2015-0760 2024-11-21 11:23 2015-06-4 Show GitHub Exploit DB Packet Storm
277805 - fusionforge fusionforge The Git plugin for FusionForge before 6.0rc4 allows remote attackers to execute arbitrary code via an unspecified parameter when creating a secondary Git repository. CWE-20
 Improper Input Validation 
CVE-2015-0850 2024-11-21 11:23 2015-06-2 Show GitHub Exploit DB Packet Storm
277806 - cisco headend_digital_broadband_delivery_system Cross-site request forgery (CSRF) vulnerability in Cisco Headend Digital Broadband Delivery System allows remote attackers to hijack the authentication of arbitrary users. CWE-352
CWE-20
 Origin Validation Error
 Improper Input Validation 
CVE-2015-0759 2024-11-21 11:23 2015-06-2 Show GitHub Exploit DB Packet Storm
277807 - cisco unified_meetingplace The web-based user interface in Cisco Unified MeetingPlace 8.6(1.9) allows remote attackers to read arbitrary files via an XML document containing an external entity declaration in conjunction with a… CWE-200
Information Exposure
CVE-2015-0758 2024-11-21 11:23 2015-05-30 Show GitHub Exploit DB Packet Storm
277808 - cisco headend_system_release
videoscape_conductor
headend_digital_broadband_delivery_system
Cisco Conductor for Videoscape 3.0 and Cisco Headend System Release allow remote attackers to inject arbitrary cookies via a crafted HTTP request, aka Bug ID CSCuh25408. CWE-20
 Improper Input Validation 
CVE-2015-0747 2024-11-21 11:23 2015-05-30 Show GitHub Exploit DB Packet Storm
277809 - cisco headend_system_release
headend_digital_broadband_delivery_system
Cisco Headend System Release allows remote attackers to read temporary script files or archive files, and consequently obtain sensitive information, via a crafted header in an HTTP request, aka Bug I… CWE-200
Information Exposure
CVE-2015-0745 2024-11-21 11:23 2015-05-30 Show GitHub Exploit DB Packet Storm
277810 - cisco headend_system_release
dta_control_system
headend_digital_broadband_delivery_system
Cisco DTA Control System (DTACS) 4.0.0.9 and Cisco Headend System Release allow remote attackers to cause a denial of service (CPU and memory consumption, and TCP service outage) via (1) a SYN flood … CWE-399
 Resource Management Errors
CVE-2015-0744 2024-11-21 11:23 2015-05-30 Show GitHub Exploit DB Packet Storm