Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":June 30, 2026, 6 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 250851 | 9.3 | 危険 | チェック・ポイント・ソフトウェア・テクノロジーズ | - | Check Point VPN-1 Edge X 埋め込み型 NGX におけるクロスサイトリクエストフォージェリの脆弱性 | - | CVE-2007-3489 | 2012-06-26 15:46 | 2007-06-29 | Show | GitHub Exploit DB Packet Storm |
| 250852 | 4.3 | 警告 | altavista | - | AltaVista の検索エンジンにおけるクロスサイトスクリプティングの脆弱性 | - | CVE-2007-3486 | 2012-06-26 15:46 | 2007-06-28 | Show | GitHub Exploit DB Packet Storm |
| 250853 | 7.8 | 危険 | アップル マイクロソフト |
- | Apple Safari における "同一生成元ポリシ" を回避される脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2007-3482 | 2012-06-26 15:46 | 2007-06-28 | Show | GitHub Exploit DB Packet Storm |
| 250854 | 4.3 | 警告 | LibGD project | - | GD Graphics Library の gdImageStringFTEx におけるサービス運用妨害 (クラッシュ) の脆弱性 |
CWE-362
競合状態 |
CVE-2007-3478 | 2012-06-26 15:46 | 2007-06-28 | Show | GitHub Exploit DB Packet Storm |
| 250855 | 7.5 | 危険 | clicktech | - | ClickGallery Server の edit_image.asp における SQL インジェクションの脆弱性 | - | CVE-2007-3411 | 2012-06-26 15:46 | 2007-06-26 | Show | GitHub Exploit DB Packet Storm |
| 250856 | 7.5 | 危険 | elkagroup | - | elkagroup Image Gallery の property.php における SQL インジェクションの脆弱性 | - | CVE-2007-3461 | 2012-06-26 15:46 | 2007-06-27 | Show | GitHub Exploit DB Packet Storm |
| 250857 | 7.5 | 危険 | eva-web | - | EVA-Web の index.php3 における PHP リモートファイルインクルージョンの脆弱性 | - | CVE-2007-3460 | 2012-06-26 15:46 | 2007-06-27 | Show | GitHub Exploit DB Packet Storm |
| 250858 | 6.4 | 警告 | civiltech | - | Civitech Avax Vector の特定の ActiveX コントロールにおける任意のファイルを作成または上書きされる脆弱性 | - | CVE-2007-3459 | 2012-06-26 15:46 | 2007-06-27 | Show | GitHub Exploit DB Packet Storm |
| 250859 | 7.5 | 危険 | edocstore | - | eDocStore の essentials/minutes/doc.php における SQL インジェクションの脆弱性 | - | CVE-2007-3452 | 2012-06-26 15:46 | 2007-06-26 | Show | GitHub Exploit DB Packet Storm |
| 250860 | 6.5 | 警告 | gorani network | - | 6ALBlog の admin/index.php における PHP リモートファイルインクルージョンの脆弱性 | - | CVE-2007-3451 | 2012-06-26 15:46 | 2007-06-26 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:July 1, 2026, 4:27 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 255381 | 9.8 |
CRITICAL
Network |
cisco |
mobility_services_engine policy_suite |
A vulnerability in the Cluster Manager of Cisco Policy Suite before 18.2.0 could allow an unauthenticated, remote attacker to log in to an affected system using the root account, which has default, s… |
CWE-798
Use of Hard-coded Credentials |
CVE-2018-0375 | 2024-11-21 12:38 | 2018-07-19 | Show | GitHub Exploit DB Packet Storm |
| 255382 | 9.8 |
CRITICAL
Network |
cisco | mobility_services_engine | A vulnerability in the Policy Builder database of Cisco Policy Suite before 18.2.0 could allow an unauthenticated, remote attacker to connect directly to the Policy Builder database. The vulnerabilit… |
CWE-306
Missing Authentication for Critical Function |
CVE-2018-0374 | 2024-11-21 12:38 | 2018-07-19 | Show | GitHub Exploit DB Packet Storm |
| 255383 | 7.5 |
HIGH
Network |
cisco | nx-os | A vulnerability in the DHCPv6 feature of the Cisco Nexus 9000 Series Fabric Switches in Application-Centric Infrastructure (ACI) Mode could allow an unauthenticated, remote attacker to cause the devi… |
CWE-400
Uncontrolled Resource Consumption |
CVE-2018-0372 | 2024-11-21 12:38 | 2018-07-19 | Show | GitHub Exploit DB Packet Storm |
| 255384 | 7.8 |
HIGH
Local |
cisco |
vbond_orchestrator vedge-plus vedge-pro vsmart_controller vmanage_network_management vedge-100_firmware vedge_100b_firmware vedge_100m_firmware vedge_100wm_firmware vedge-1… |
A vulnerability in the command-line tcpdump utility in the Cisco SD-WAN Solution could allow an authenticated, local attacker to inject arbitrary commands that are executed with root privileges. The … |
CWE-77
Command Injection |
CVE-2018-0351 | 2024-11-21 12:38 | 2018-07-19 | Show | GitHub Exploit DB Packet Storm |
| 255385 | 8.8 |
HIGH
Network |
cisco |
vbond_orchestrator vedge-plus vedge-pro vsmart_controller vmanage_network_management vedge-100_firmware vedge_100b_firmware vedge_100m_firmware vedge_100wm_firmware vedge-1… |
A vulnerability in the VPN subsystem configuration in the Cisco SD-WAN Solution could allow an authenticated, remote attacker to inject arbitrary commands that are executed with root privileges. The … |
CWE-77
Command Injection |
CVE-2018-0350 | 2024-11-21 12:38 | 2018-07-19 | Show | GitHub Exploit DB Packet Storm |
| 255386 | 9.8 |
CRITICAL
Network |
cisco |
vbond_orchestrator vedge-plus vedge-pro vsmart_controller vmanage_network_management vedge-100_firmware vedge_100b_firmware vedge_100m_firmware vedge_100wm_firmware vedge-1… |
A vulnerability in the Cisco SD-WAN Solution could allow an authenticated, remote attacker to overwrite arbitrary files on the underlying operating system of an affected device. The vulnerability is … |
CWE-78
OS Command |
CVE-2018-0349 | 2024-11-21 12:38 | 2018-07-19 | Show | GitHub Exploit DB Packet Storm |
| 255387 | 7.2 |
HIGH
Network |
cisco |
vbond_orchestrator vedge-plus vedge-pro vsmart_controller vmanage_network_management vedge-100_firmware vedge_100b_firmware vedge_100m_firmware vedge_100wm_firmware vedge-1… |
A vulnerability in the CLI of the Cisco SD-WAN Solution could allow an authenticated, remote attacker to inject arbitrary commands that are executed with root privileges. The vulnerability is due to … |
CWE-78
OS Command |
CVE-2018-0348 | 2024-11-21 12:38 | 2018-07-19 | Show | GitHub Exploit DB Packet Storm |
| 255388 | 7.8 |
HIGH
Local |
cisco |
vbond_orchestrator vedge-plus vedge-pro vsmart_controller vmanage_network_management vedge-100_firmware vedge_100b_firmware vedge_100m_firmware vedge_100wm_firmware vedge-1… |
A vulnerability in the Zero Touch Provisioning (ZTP) subsystem of the Cisco SD-WAN Solution could allow an authenticated, local attacker to inject arbitrary commands that are executed with root privi… |
CWE-77
Command Injection |
CVE-2018-0347 | 2024-11-21 12:38 | 2018-07-19 | Show | GitHub Exploit DB Packet Storm |
| 255389 | 7.5 |
HIGH
Network |
cisco |
vbond_orchestrator vedge-plus vedge-pro vsmart_controller vmanage_network_management vedge-100_firmware vedge_100b_firmware vedge_100m_firmware vedge_100wm_firmware vedge-1… |
A vulnerability in the Zero Touch Provisioning service of the Cisco SD-WAN Solution could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.… |
CWE-119
Incorrect Access of Indexable Resource ('Range Error') |
CVE-2018-0346 | 2024-11-21 12:38 | 2018-07-19 | Show | GitHub Exploit DB Packet Storm |
| 255390 | 8.8 |
HIGH
Network |
cisco |
vbond_orchestrator vedge-plus vedge-pro vsmart_controller vmanage_network_management vedge-100_firmware vedge_100b_firmware vedge_100m_firmware vedge_100wm_firmware vedge-1… |
A vulnerability in the configuration and management database of the Cisco SD-WAN Solution could allow an authenticated, remote attacker to execute arbitrary commands with the privileges of the vmanag… |
CWE-88
Argument Injection |
CVE-2018-0345 | 2024-11-21 12:38 | 2018-07-19 | Show | GitHub Exploit DB Packet Storm |