Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 7, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
230671 7.5 危険 phpdmca - phpDMCA における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2008-2986 2012-12-20 18:52 2008-07-2 Show GitHub Exploit DB Packet Storm
230672 6.8 警告 tinx cms - TinX/cms におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-2976 2012-12-20 18:52 2008-07-2 Show GitHub Exploit DB Packet Storm
230673 4.3 警告 tinx cms - TinX/cms の admin/objects/obj_image.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-2975 2012-12-20 18:52 2008-07-2 Show GitHub Exploit DB Packet Storm
230674 7.5 危険 yektaweb - AWT YEKTA におけるセッションをハイジャックされる脆弱性 CWE-20
不適切な入力確認 		CVE-2008-2970 2012-12-20 18:52 2008-07-2 Show GitHub Exploit DB Packet Storm
230675 5 警告 yektaweb - AWT YEKTA の download.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-2969 2012-12-20 18:52 2008-07-2 Show GitHub Exploit DB Packet Storm
230676 7.5 危険 yektaweb - AWT YEKTA の rating.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2968 2012-12-20 18:52 2008-07-2 Show GitHub Exploit DB Packet Storm
230677 4.3 警告 yektaweb - AWT YEKTA におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-2967 2012-12-20 18:52 2008-07-2 Show GitHub Exploit DB Packet Storm
230678 7.5 危険 researchguide - ResearchGuide の guide.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2964 2012-12-20 18:52 2008-07-2 Show GitHub Exploit DB Packet Storm
230679 2.6 注意 The phpMyAdmin Project - phpMyAdmin におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-2960 2012-12-20 18:52 2008-06-23 Show GitHub Exploit DB Packet Storm
230680 5.8 警告 Edgewall Software - Trac の検索スクリプトにおけるオープンリダイレクトの脆弱性 CWE-20
不適切な入力確認 		CVE-2008-2951 2012-12-20 18:52 2008-07-27 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 7, 2026, 4:13 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
294311 - liftweb lift The JsonParser class in json/JsonParser.scala in Lift before 2.5 interprets a certain end-index value as a length value, which allows remote authenticated users to obtain sensitive information from o… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2013-3300 2024-11-21 10:53 2013-07-29 Show GitHub Exploit DB Packet Storm
294312 - cisco video_surveillance_manager Cisco Video Surveillance Manager (VSM) before 7.0.0 does not require authentication for access to VSMC monitoring pages, which allows remote attackers to obtain sensitive configuration, archive, and … CWE-287
Improper Authentication 		CVE-2013-3431 2024-11-21 10:53 2013-07-26 Show GitHub Exploit DB Packet Storm
294313 - cisco video_surveillance_manager Cisco Video Surveillance Manager (VSM) before 7.0.0 allows remote attackers to obtain sensitive configuration, archive, and log information via unspecified vectors, related to the Cisco_VSBWT (aka Br… CWE-287
Improper Authentication 		CVE-2013-3430 2024-11-21 10:53 2013-07-26 Show GitHub Exploit DB Packet Storm
294314 - cisco video_surveillance_manager Multiple directory traversal vulnerabilities in Cisco Video Surveillance Manager (VSM) before 7.0.0 allow remote attackers to read system files via a crafted URL, related to the Cisco_VSBWT (aka Broa… CWE-22
Path Traversal 		CVE-2013-3429 2024-11-21 10:53 2013-07-26 Show GitHub Exploit DB Packet Storm
294315 - cisco adaptive_security_appliance_software
adaptive_security_appliance 		Cross-site scripting (XSS) vulnerability in the WebVPN portal login page on Cisco Adaptive Security Appliances (ASA) devices allows remote attackers to inject arbitrary web script or HTML via a craft… CWE-79
Cross-site Scripting 		CVE-2013-3414 2024-11-21 10:53 2013-07-26 Show GitHub Exploit DB Packet Storm
294316 - cisco unified_meetingplace_web_conferencing The web framework in the server in Cisco Unified MeetingPlace Web Conferencing allows remote attackers to bypass intended access restrictions and read unspecified web pages via crafted parameters, ak… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2013-3438 2024-11-21 10:53 2013-07-24 Show GitHub Exploit DB Packet Storm
294317 - cisco unified_operations_manager Multiple cross-site scripting (XSS) vulnerabilities in the administrative web interface in Cisco Unified Operations Manager allow remote attackers to inject arbitrary web script or HTML, and obtain i… CWE-79
Cross-site Scripting 		CVE-2013-3440 2024-11-21 10:53 2013-07-24 Show GitHub Exploit DB Packet Storm
294318 - cisco unified_operations_manager Cross-site scripting (XSS) vulnerability in Cisco Unified Operations Manager allows remote attackers to inject arbitrary web script or HTML via a crafted URL in an unspecified HTTP header field, aka … CWE-79
Cross-site Scripting 		CVE-2013-3439 2024-11-21 10:53 2013-07-24 Show GitHub Exploit DB Packet Storm
294319 - cisco aironet_3600e
aironet_3600
aironet_3600p
aironet_3600i 		Cisco Aironet 3600 access points allow remote attackers to cause a denial of service (memory corruption and device crash) by disrupting Cisco Wireless LAN Controller communication and consequently fo… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2013-3441 2024-11-21 10:53 2013-07-23 Show GitHub Exploit DB Packet Storm
294320 - cisco unified_operations_manager SQL injection vulnerability in the management application in Cisco Unified Operations Manager allows remote authenticated users to execute arbitrary SQL commands via an entry field, aka Bug ID CSCud8… CWE-89
SQL Injection 		CVE-2013-3437 2024-11-21 10:53 2013-07-23 Show GitHub Exploit DB Packet Storm