Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 23, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
250741 6.8 警告 Gretech - GOM Player におけるスタックベースのバッファーオーバーフローの脆弱性 - CVE-2007-0707 2012-06-26 15:46 2007-02-3 Show GitHub Exploit DB Packet Storm
250742 7.5 危険 epistemon - Epistemon の inc/common.inc.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-0701 2012-06-26 15:46 2007-02-3 Show GitHub Exploit DB Packet Storm
250743 6.8 警告 free lan intra internet portal - FLIP におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-0696 2012-06-26 15:46 2007-02-3 Show GitHub Exploit DB Packet Storm
250744 7.5 危険 free lan intra internet portal - FLIP における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2007-0695 2012-06-26 15:46 2007-02-3 Show GitHub Exploit DB Packet Storm
250745 4.3 警告 diangemilang - DGNews の footer.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-0694 2012-06-26 15:46 2007-05-30 Show GitHub Exploit DB Packet Storm
250746 6.8 警告 diangemilang - DGNews の news.php における SQL インジェクションの脆弱性 - CVE-2007-0693 2012-06-26 15:46 2007-05-30 Show GitHub Exploit DB Packet Storm
250747 5 警告 dgnews - DGNews における重要な情報を取得される脆弱性 - CVE-2007-0692 2012-06-26 15:46 2007-05-30 Show GitHub Exploit DB Packet Storm
250748 7.5 危険 cerulean portal system - Cerulean Portal System の portal.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-0684 2012-06-26 15:46 2007-02-2 Show GitHub Exploit DB Packet Storm
250749 7.5 危険 extcalendar - ExtCalendar の profile.php における任意のパスワードを変更される脆弱性 - CVE-2007-0681 2012-06-26 15:46 2007-02-2 Show GitHub Exploit DB Packet Storm
250750 7.5 危険 fullaspsite - Fullaspsite Asp Hosting Sitesi の windows.asp における SQL インジェクションの脆弱性 - CVE-2007-0678 2012-06-26 15:46 2007-02-2 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 24, 2026, 4 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
248091 7.4 HIGH
Adjacent
cisco ios_xe
ios
A vulnerability in the implementation of Cisco Discovery Protocol functionality in Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to exhaust memory on … CWE-770
 Allocation of Resources Without Limits or Throttling
CVE-2018-15373 2024-11-21 12:50 2018-10-5 Show GitHub Exploit DB Packet Storm
248092 8.1 HIGH
Adjacent
cisco ios_xe A vulnerability in the MACsec Key Agreement (MKA) using Extensible Authentication Protocol-Transport Layer Security (EAP-TLS) functionality of Cisco IOS XE Software could allow an unauthenticated, ad… NVD-CWE-noinfo
CVE-2018-15372 2024-11-21 12:50 2018-10-5 Show GitHub Exploit DB Packet Storm
248093 6.7 MEDIUM
Local
cisco ios_xe A vulnerability in the shell access request mechanism of Cisco IOS XE Software could allow an authenticated, local attacker to bypass authentication and gain unrestricted access to the root shell of … CWE-287
Improper Authentication
CVE-2018-15371 2024-11-21 12:50 2018-10-5 Show GitHub Exploit DB Packet Storm
248094 6.8 MEDIUM
Physics
cisco ios_rom_monitor A vulnerability in Cisco IOS ROM Monitor (ROMMON) Software for Cisco Catalyst 6800 Series Switches could allow an unauthenticated, local attacker to bypass Cisco Secure Boot validation checks and loa… NVD-CWE-noinfo
CVE-2018-15370 2024-11-21 12:50 2018-10-5 Show GitHub Exploit DB Packet Storm
248095 6.8 MEDIUM
Network
cisco ios_xe
ios
A vulnerability in the TACACS+ client subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a d… CWE-20
 Improper Input Validation 
CVE-2018-15369 2024-11-21 12:50 2018-10-5 Show GitHub Exploit DB Packet Storm
248096 6.7 MEDIUM
Local
cisco ios_xe A vulnerability in the CLI parser of Cisco IOS XE Software could allow an authenticated, local attacker to gain access to the underlying Linux shell of an affected device and execute arbitrary comman… CWE-78
OS Command 
CVE-2018-15368 2024-11-21 12:50 2018-10-5 Show GitHub Exploit DB Packet Storm
248097 5.4 MEDIUM
Network
trendmicro deep_discovery_inspector A Reflected Cross-Site Scripting (XSS) vulnerability in Trend Micro Deep Discovery Inspector 3.85 and below could allow an attacker to bypass CSRF protection and conduct an attack on vulnerable insta… CWE-79
Cross-site Scripting
CVE-2018-15365 2024-11-21 12:50 2018-09-29 Show GitHub Exploit DB Packet Storm
248098 9.8 CRITICAL
Network
isweb isweb CMS ISWEB 3.5.3 is vulnerable to directory traversal and local file download, as demonstrated by moduli/downloadFile.php?file=oggetto_documenti/../.././inc/config.php (one can take the control of the… CWE-22
Path Traversal
CVE-2018-14957 2024-11-21 12:50 2018-09-28 Show GitHub Exploit DB Packet Storm
248099 9.8 CRITICAL
Network
isweb isweb CMS ISWEB 3.5.3 is vulnerable to multiple SQL injection flaws. An attacker can inject malicious queries into the application and obtain sensitive information. CWE-89
SQL Injection
CVE-2018-14956 2024-11-21 12:50 2018-09-28 Show GitHub Exploit DB Packet Storm
248100 7.8 HIGH
Local
vectra cognito Management Console in Vectra Networks Cognito Brain and Sensor before 4.3 contains a local privilege escalation vulnerability. NVD-CWE-noinfo
CVE-2018-14891 2024-11-21 12:50 2018-09-22 Show GitHub Exploit DB Packet Storm