Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 28, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
251211	4.3	警告	dietrich ayala	-	MantisBT の NuSOAP におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-3070	2012-03-27 18:42	2010-09-28	Show	GitHub Exploit DB Packet Storm

251212	10	危険	シスコシステムズ	-	Cisco ICM の Setup Manager の agent.exe におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-3040	2012-03-27 18:42	2010-11-3	Show	GitHub Exploit DB Packet Storm

251213	6.8	警告	シスコシステムズ	-	Cisco CUCM の /usr/local/cm/bin/pktCap_protectData における任意のコマンドを実行される脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2010-3039	2012-03-27 18:42	2010-11-3	Show	GitHub Exploit DB Packet Storm

251214	10	危険	シスコシステムズ	-	Cisco UVC System 5110 および 5115 における不正アクセスの脆弱性	CWE-255 証明書・パスワード管理	CVE-2010-3038	2012-03-27 18:42	2010-11-17	Show	GitHub Exploit DB Packet Storm

251215	8.5	危険	シスコシステムズ	-	複数の Cisco UVC System 製品における任意のコマンドを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-3037	2012-03-27 18:42	2010-11-17	Show	GitHub Exploit DB Packet Storm

251216	10	危険	シスコシステムズ	-	Cisco CiscoWorks Common Service の Web サーバの認証機能における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-3036	2012-03-27 18:42	2010-10-27	Show	GitHub Exploit DB Packet Storm

251217	5	警告	シスコシステムズ	-	Cisco WLC における ACL を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-3034	2012-03-27 18:42	2010-09-8	Show	GitHub Exploit DB Packet Storm

251218	9	危険	シスコシステムズ	-	Cisco WLC におけるアクセス制限を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-3033	2012-03-27 18:42	2010-09-8	Show	GitHub Exploit DB Packet Storm

251219	4.3	警告	RSAセキュリティ	-	RSA Access Manager Server における重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2010-3018	2012-03-27 18:42	2010-09-9	Show	GitHub Exploit DB Packet Storm

251220	5.7	警告	RSAセキュリティ	-	RSA Access Manager Agent における重要な情報を取得される脆弱性	CWE-noinfo 情報不足	CVE-2010-3017	2012-03-27 18:42	2010-09-9	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
281491	7.8	HIGH Local	huawei	ec156_firmware ec176_firmware ec177_firmware	Huawei EC156, EC176, and EC177 USB Modem products with software before UTPS-V200R003B015D02SP07C1014 (23.015.02.07.1014) and before V200R003B015D02SP08C1014 (23.015.02.08.1014) use a weak ACL for the…	CWE-426 Untrusted Search Path	CVE-2014-8358	2024-11-21 11:18	2017-12-12	Show	GitHub Exploit DB Packet Storm

281492	6.5	MEDIUM Network	redhat	cloudforms_3.0_management_engine	Red Hat CloudForms 3 Management Engine (CFME) allows remote authenticated users to cause a denial of service (resource consumption) via vectors involving calls to the .to_sym rails function and lack …	CWE-400 Uncontrolled Resource Consumption	CVE-2014-7813	2024-11-21 11:18	2017-10-18	Show	GitHub Exploit DB Packet Storm

281493	8.8	HIGH Network	dasanzhone	znid_2426a_firmware	backupsettings.html in the web administrative portal in Zhone zNID GPON 2426A before S3.0.501 places a session key in a URL, which allows remote attackers to obtain arbitrary user passwords via the s…	CWE-255 Credentials Management	CVE-2014-8357	2024-11-21 11:18	2017-10-18	Show	GitHub Exploit DB Packet Storm

281494	7.5	HIGH Network	aircrack-ng	aircrack-ng	network.c in Aircrack-ng before 1.2 Beta 3 allows remote attackers to cause a denial of service (segmentation fault) via a response with a crafted length parameter.	CWE-20 Improper Input Validation	CVE-2014-8324	2024-11-21 11:18	2017-10-17	Show	GitHub Exploit DB Packet Storm

281495	7.5	HIGH Network	aircrack-ng	aircrack-ng	buddy-ng.c in Aircrack-ng before 1.2 Beta 3 allows remote attackers to cause a denial of service (segmentation fault) via a response with a crafted length parameter.	CWE-20 Improper Input Validation	CVE-2014-8323	2024-11-21 11:18	2017-10-17	Show	GitHub Exploit DB Packet Storm

281496	6.1	MEDIUM Network	post_highlights_projects	post_highlights	Cross-site scripting (XSS) vulnerability in the post highlights plugin before 2.6.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the txt parameter in a headline ac…	CWE-79 Cross-site Scripting	CVE-2014-8087	2024-11-21 11:18	2017-10-17	Show	GitHub Exploit DB Packet Storm

281497	7.5	HIGH Network	ovirt redhat	ovirt ovirt-engine	oVirt 3.2.2 through 3.5.0 does not invalidate the restapi session after logout from the webadmin, which allows remote authenticated users with knowledge of another user's session data to gain that us…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2014-7851	2024-11-21 11:18	2017-10-17	Show	GitHub Exploit DB Packet Storm

281498	8.8	HIGH Network	ovirt	ovirt-node	ovirt_safe_delete_config in ovirtfunctions.py and other unspecified locations in ovirt-node 3.0.0-474-gb852fd7 as packaged in Red Hat Enterprise Virtualization 3 do not properly quote input strings, …	CWE-134 Use of Externally-Controlled Format String	CVE-2014-8170	2024-11-21 11:18	2017-09-26	Show	GitHub Exploit DB Packet Storm

281499	7.8	HIGH Local	fso-frameworkd_project fso-gsmd_project fso-usaged_project phonefsod_project	fso-frameworkd fso-gsmd fso-usaged phonefsod	The D-Bus security policy files in /etc/dbus-1/system.d/*.conf in fso-gsmd 0.12.0-3, fso-frameworkd 0.9.5.9+git20110512-4, and fso-usaged 0.12.0-2 as packaged in Debian, the upstream cornucopia.git (…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2014-8156	2024-11-21 11:18	2017-09-26	Show	GitHub Exploit DB Packet Storm

281500	9.8	CRITICAL Network	redhat	edeploy	eDeploy makes it easier for remote attackers to execute arbitrary code by leveraging use of HTTP to download files.	CWE-200 Information Exposure	CVE-2014-8174	2024-11-21 11:18	2017-09-20	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed