Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 4, 2026, 4 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
250901 7.5 危険 softwebsnepal - Softwebs Nepal Ananda Real Estate の list.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-4782 2012-03-27 18:42 2011-04-7 Show GitHub Exploit DB Packet Storm
250902 5 警告 enanocms - Enano CMS における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2010-4781 2012-03-27 18:42 2011-04-7 Show GitHub Exploit DB Packet Storm
250903 7.5 危険 enanocms - Enano CMS の check_banlist 関数における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-4780 2012-03-27 18:42 2011-04-7 Show GitHub Exploit DB Packet Storm
250904 4.3 警告 BraveNewCode
WordPress.org
- WordPress の WPtouch プラグインにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-4779 2012-03-27 18:42 2011-04-7 Show GitHub Exploit DB Packet Storm
250905 4.3 警告 Horde - Horde Groupware Webmail Edition のfetchmailprefs.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-4778 2012-03-27 18:42 2011-04-4 Show GitHub Exploit DB Packet Storm
250906 7.5 危険 PreProject.com - PreProjects Pre Online Tests Generator Pro の takefreestart.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-4776 2012-03-27 18:42 2011-03-23 Show GitHub Exploit DB Packet Storm
250907 7.5 危険 AuraCMS - AuraCMS における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-4774 2012-03-27 18:42 2011-03-23 Show GitHub Exploit DB Packet Storm
250908 4.3 警告 matteoiammarrone - S-CMS の blocks/lang.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-4772 2012-03-27 18:42 2011-03-23 Show GitHub Exploit DB Packet Storm
250909 4 警告 IBM - IBM Tivoli Directory Server (TDS) のプロキシサーバ実装におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2010-4789 2012-03-27 18:42 2010-10-29 Show GitHub Exploit DB Packet Storm
250910 4 警告 IBM - IBM TDS におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2010-4788 2012-03-27 18:42 2010-02-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 5, 2026, 4:11 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
287661 - ibm websphere_application_server IBM WebSphere Application Server (WAS) 7.0.x before 7.0.0.33, 8.0.x before 8.0.0.9, and 8.5.x before 8.5.5.3 allows remote attackers to obtain sensitive information via a crafted URL that triggers an… CWE-200
Information Exposure
CVE-2014-3022 2024-11-21 11:07 2014-08-22 Show GitHub Exploit DB Packet Storm
287662 - cisco webex_meetmenow Directory traversal vulnerability in an unspecified PHP script in the server in Cisco WebEx MeetMeNow allows remote authenticated users to read arbitrary files via a crafted request, aka Bug ID CSCuo… CWE-22
Path Traversal
CVE-2014-3340 2024-11-21 11:07 2014-08-20 Show GitHub Exploit DB Packet Storm
287663 - cisco asr_5000_series_software The Session Manager component in Packet Data Network Gateway (aka PGW) in Cisco ASR 5000 Series Software 11.0, 12.0, 12.1, 12.2, 14.0, 15.0, 16.x through 16.1.2, and 17.0 allows remote attackers to c… CWE-20
 Improper Input Validation 
CVE-2014-3331 2024-11-21 11:07 2014-08-20 Show GitHub Exploit DB Packet Storm
287664 - cisco nx-os
nexus_5000
nexus_5010
nexus_5010p_switch
nexus_5020
nexus_5020p_switch
nexus_5548p
nexus_5548up
nexus_5596t
nexus_5596up
nexus_56128p
nexus_5672up
nexus_6001…
The SNMP module in Cisco NX-OS 7.0(3)N1(1) and earlier on Nexus 5000 and 6000 devices provides different error messages for invalid requests depending on whether the VLAN ID exists, which allows remo… CWE-200
Information Exposure
CVE-2014-3341 2024-11-21 11:07 2014-08-19 Show GitHub Exploit DB Packet Storm
287665 - ibm websphere_application_server
business_process_manager
callService.do in IBM Business Process Manager (BPM) 7.5 through 8.5.5 and WebSphere Lombardi Edition 7.2 through 7.2.0.5 allows remote authenticated users to read arbitrary files via an XML external… CWE-200
Information Exposure
CVE-2014-3087 2024-11-21 11:07 2014-08-18 Show GitHub Exploit DB Packet Storm
287666 - ibm global_console_manager_32_firmware
global_console_manager_16_firmware
systest.php on IBM GCM16 and GCM32 Global Console Manager switches with firmware before 1.20.20.23447 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the l… CWE-78
OS Command 
CVE-2014-3085 2024-11-21 11:07 2014-08-18 Show GitHub Exploit DB Packet Storm
287667 - ibm global_console_manager_32_firmware
global_console_manager_16_firmware
prodtest.php on IBM GCM16 and GCM32 Global Console Manager switches with firmware before 1.20.20.23447 allows remote authenticated users to read arbitrary files via the filename parameter. CWE-200
Information Exposure
CVE-2014-3081 2024-11-21 11:07 2014-08-18 Show GitHub Exploit DB Packet Storm
287668 - ibm global_console_manager_32_firmware
global_console_manager_16_firmware
Multiple cross-site scripting (XSS) vulnerabilities on IBM GCM16 and GCM32 Global Console Manager switches with firmware before 1.20.20.23447 allow remote attackers to inject arbitrary web script or … CWE-79
Cross-site Scripting
CVE-2014-3080 2024-11-21 11:07 2014-08-18 Show GitHub Exploit DB Packet Storm
287669 - ibm infosphere_master_data_management_server_for_product_information_management
infosphere_master_data_management
IBM InfoSphere Master Data Management - Collaborative Edition 10.x before 10.1-FP11 and 11.x before 11.0-FP5 and InfoSphere Master Data Management Server for Product Information Management 9.x before… CWE-264
Permissions, Privileges, and Access Controls
CVE-2014-3063 2024-11-21 11:07 2014-08-18 Show GitHub Exploit DB Packet Storm
287670 - cobham aviator_700d
aviator_700e
Cobham Aviator 700D and 700E satellite terminals have hardcoded passwords for the (1) debug, (2) prod, (3) do160, and (4) flrp programs, which allows physically proximate attackers to gain privileges… NVD-CWE-Other
CVE-2014-2964 2024-11-21 11:07 2014-08-15 Show GitHub Exploit DB Packet Storm