Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 4, 2026, 4 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
224521	7.2	危険	シスコシステムズ	-	Cisco NX-OS における権限を取得される脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2012-4075	2013-10-8 16:26	2013-10-4	Show	GitHub Exploit DB Packet Storm

224522	6.8	警告	シスコシステムズ	-	Cisco Unified Computing System におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2012-4084	2013-10-8 16:21	2013-10-4	Show	GitHub Exploit DB Packet Storm

224523	6.5	警告	Vtiger	-	vTiger CRM の CalendarCommon.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2013-5091	2013-10-8 16:09	2013-09-17	Show	GitHub Exploit DB Packet Storm

224524	1.5	注意	ヒューレット・パッカード	-	複数の HP 製品の FutureSmart デバイスにおける任意のスキャンされたドキュメントの画像を読まれる脆弱性	CWE-200 情報漏えい	CVE-2013-4829	2013-10-8 15:59	2013-10-3	Show	GitHub Exploit DB Packet Storm

224525	4.3	警告	ヒューレット・パッカード	-	複数の HP 製品の FutureSmart デバイスにおける重要な情報を取得される脆弱性	CWE-310 暗号の問題	CVE-2013-4828	2013-10-8 15:59	2013-10-3	Show	GitHub Exploit DB Packet Storm

224526	4	警告	インターネットイニシアティブ	-	SEIL シリーズにおける RADIUS 認証に関する脆弱性	CWE-Other その他	CVE-2013-4708	2013-10-8 15:34	2013-09-20	Show	GitHub Exploit DB Packet Storm

224527	6.8	警告	Newera Software Technology	-	IconCool PDFCool Studio の PDFAX0722_IconCool.dll におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2013-4986	2013-10-8 15:13	2013-10-1	Show	GitHub Exploit DB Packet Storm

224528	7.8	危険	Brickcom	-	複数の Brickcom 製品のファームウェアにおける重要な情報を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2013-3689	2013-10-8 15:06	2013-06-12	Show	GitHub Exploit DB Packet Storm

224529	8.8	危険	アクシスコミュニケーションズ	-	AXIS ネットワークカメラ用 AXIS Media Control ActiveX コントロールにおける任意のファイルを作成される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2013-3543	2013-10-8 15:05	2013-06-12	Show	GitHub Exploit DB Packet Storm

224530	7.8	危険	OvisLink	-	AirLive WL-2600CAM などのモデルの cgi-bin/admin/fileread におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2013-3541	2013-10-8 15:05	2013-06-12	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 4, 2026, 4:17 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
277251	9.8	CRITICAL Network	apache	traffic_server	Unspecified vulnerability in the HTTP/2 experimental feature in Apache Traffic Server before 5.3.x before 5.3.2 has unknown impact and attack vectors, a different vulnerability than CVE-2015-5168.	NVD-CWE-noinfo	CVE-2015-5206	2024-11-21 11:32	2017-09-14	Show	GitHub Exploit DB Packet Storm

277252	9.8	CRITICAL Network	apache	traffic_server	Unspecified vulnerability in the HTTP/2 experimental feature in Apache Traffic Server 5.3.x before 5.3.2 has unknown impact and attack vectors, a different vulnerability than CVE-2015-5206.	NVD-CWE-noinfo	CVE-2015-5168	2024-11-21 11:32	2017-09-14	Show	GitHub Exploit DB Packet Storm

277253	6.1	MEDIUM Network	ellucian	banner_student	Open redirect vulnerability in Ellucian (formerly SunGard) Banner Student 8.5.1.2 through 8.7 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL i…	CWE-601 Open Redirect	CVE-2015-5054	2024-11-21 11:32	2017-09-12	Show	GitHub Exploit DB Packet Storm

277254	6.1	MEDIUM Network	anchorcms	anchor_cms	Cross-site scripting (XSS) vulnerability in anchor-cms before 0.9-dev.	CWE-79 Cross-site Scripting	CVE-2015-5060	2024-11-21 11:32	2017-09-8	Show	GitHub Exploit DB Packet Storm

277255	9.8	CRITICAL Network	sefrengo	sefrengo	SQL injection vulnerability in Sefrengo before 1.6.5 beta2.	CWE-89 SQL Injection	CVE-2015-5052	2024-11-21 11:32	2017-09-8	Show	GitHub Exploit DB Packet Storm

277256	5.3	MEDIUM Network	linux_audit_project	linux_audit	Audit before 2.4.4 in Linux does not sanitize escape characters in filenames.	CWE-20 Improper Input Validation	CVE-2015-5186	2024-11-21 11:32	2017-09-7	Show	GitHub Exploit DB Packet Storm

277257	7.5	HIGH Network	apache	struts	Apache Struts 2.x before 2.3.24.1 allows remote attackers to manipulate Struts internals, alter user sessions, or affect container settings via vectors involving a top object.	CWE-20 Improper Input Validation	CVE-2015-5209	2024-11-21 11:32	2017-08-30	Show	GitHub Exploit DB Packet Storm

277258	5.9	MEDIUM Network	redhat	enterprise_virtualization_manager	Red Hat Enterprise Virtualization Manager 3.6 and earlier gives valid SLAAC IPv6 addresses to interfaces when "boot protocol" is set to None, which might allow remote attackers to communicate with a …	CWE-284 Improper Access Control	CVE-2015-5293	2024-11-21 11:32	2017-08-25	Show	GitHub Exploit DB Packet Storm

277259	5.3	MEDIUM Network	fedoraproject debian ntp	fedora debian_linux ntp	ntpd in ntp before 4.2.8p3 with remote configuration enabled allows remote authenticated users with knowledge of the configuration password and access to a computer entrusted to perform remote config…	CWE-20 Improper Input Validation	CVE-2015-5146	2024-11-21 11:32	2017-08-25	Show	GitHub Exploit DB Packet Storm

277260	9.8	CRITICAL Network	kernel	util-linux	The mkostemp function in login-utils in util-linux when used incorrectly allows remote attackers to cause file name collision and possibly other attacks.	NVD-CWE-noinfo	CVE-2015-5224	2024-11-21 11:32	2017-08-24	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed