Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 27, 2026, 2:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
251861 7.5 危険 DrBenHur - DBHcms の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-4869 2012-02-9 11:10 2011-10-5 Show GitHub Exploit DB Packet Storm
251862 4.3 警告 W-Agora - W-Agora の search.php3 におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-4868 2012-02-9 11:10 2011-10-5 Show GitHub Exploit DB Packet Storm
251863 7.5 危険 W-Agora - W-Agora の search.php3 におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2010-4867 2012-02-9 11:10 2011-10-5 Show GitHub Exploit DB Packet Storm
251864 7.5 危険 Chipmunk Scripts - Chipmunk Board の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-4866 2012-02-9 11:09 2011-10-5 Show GitHub Exploit DB Packet Storm
251865 7.5 危険 Jextensions - Joomla! 用 JE Guestbook (com_jeguestbook) コンポーネントにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-4865 2012-02-9 11:08 2011-10-5 Show GitHub Exploit DB Packet Storm
251866 7.5 危険 Daniel James Scott - Joomla! 用 Club Manager (com_clubmanager) コンポーネントにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-4864 2012-02-9 11:08 2011-10-5 Show GitHub Exploit DB Packet Storm
251867 4.3 警告 The GetSimple Team - GetSimple CMS の admin/changedata.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-4863 2012-02-9 11:07 2011-10-5 Show GitHub Exploit DB Packet Storm
251868 7.5 危険 Joomla!
Jextensions		 - Joomla! 用 JExtensions JE Director コンポーネントにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-4862 2012-02-9 11:07 2011-10-5 Show GitHub Exploit DB Packet Storm
251869 7.5 危険 webSPELL - webSPELL の asearch.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-4861 2012-02-9 11:06 2011-10-5 Show GitHub Exploit DB Packet Storm
251870 7.5 危険 Galaxyscriptz - MyPhpAuction の product_desc.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-4860 2012-02-9 11:05 2011-10-5 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 27, 2026, 4:52 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
247061 6.7 MEDIUM
Local 		cisco web_security_appliance A vulnerability in the account management subsystem of Cisco Web Security Appliance (WSA) could allow an authenticated, local attacker to elevate privileges to root. The attacker must authenticate wi… CWE-269
 Improper Privilege Management 		CVE-2018-0428 2024-11-21 12:38 2018-08-16 Show GitHub Exploit DB Packet Storm
247062 8.8 HIGH
Network 		cisco application_policy_infrastructure_controller_enterprise_module A vulnerability in the CronJob scheduler API of Cisco Digital Network Architecture (DNA) Center could allow an authenticated, remote attacker to perform a command injection attack. The vulnerability … CWE-78
OS Command  		CVE-2018-0427 2024-11-21 12:38 2018-08-16 Show GitHub Exploit DB Packet Storm
247063 7.5 HIGH
Network 		cisco email_security_appliance A vulnerability in certain attachment detection mechanisms of Cisco Email Security Appliances (ESA) could allow an unauthenticated, remote attacker to bypass the filtering functionality of an affecte… CWE-20
 Improper Input Validation  		CVE-2018-0419 2024-11-21 12:38 2018-08-16 Show GitHub Exploit DB Packet Storm
247064 8.6 HIGH
Network 		cisco ios_xr A vulnerability in the Local Packet Transport Services (LPTS) feature set of Cisco ASR 9000 Series Aggregation Services Router Software could allow an unauthenticated, remote attacker to cause a deni… CWE-20
 Improper Input Validation  		CVE-2018-0418 2024-11-21 12:38 2018-08-16 Show GitHub Exploit DB Packet Storm
247065 6.8 MEDIUM
Adjacent 		cisco wap121_firmware
wap125_firmware
wap131_firmware
wap150_firmware
wap321_firmware
wap351_firmware
wap361_firmware
wap371_firmware 		A vulnerability in the implementation of Extensible Authentication Protocol over LAN (EAPOL) functionality in Cisco Small Business 100 Series Wireless Access Points and Cisco Small Business 300 Serie… CWE-388
 7PK - Errors 		CVE-2018-0415 2024-11-21 12:38 2018-08-16 Show GitHub Exploit DB Packet Storm
247066 5.3 MEDIUM
Adjacent 		cisco wap121_firmware
wap125_firmware
wap131_firmware
wap150_firmware
wap321_firmware
wap351_firmware
wap361_firmware
wap371_firmware 		A vulnerability in the implementation of Extensible Authentication Protocol over LAN (EAPOL) functionality in Cisco Small Business 100 Series Wireless Access Points and Cisco Small Business 300 Serie… NVD-CWE-noinfo
CVE-2018-0412 2024-11-21 12:38 2018-08-16 Show GitHub Exploit DB Packet Storm
247067 8.6 HIGH
Network 		cisco web_security_appliance A vulnerability in the web proxy functionality of Cisco AsyncOS Software for Cisco Web Security Appliances could allow an unauthenticated, remote attacker to exhaust system memory and cause a denial … CWE-400
 Uncontrolled Resource Consumption 		CVE-2018-0410 2024-11-21 12:38 2018-08-16 Show GitHub Exploit DB Packet Storm
247068 7.5 HIGH
Network 		cisco telepresence_video_communication_server
unified_communications_manager_im_and_presence_service 		A vulnerability in the XCP Router service of the Cisco Unified Communications Manager IM & Presence Service (CUCM IM&P) and the Cisco TelePresence Video Communication Server (VCS) and Expressway coul… CWE-125
Out-of-bounds Read 		CVE-2018-0409 2024-11-21 12:38 2018-08-16 Show GitHub Exploit DB Packet Storm
247069 6.1 MEDIUM
Network 		cisco unified_communications_domain_manager
hosted_collaboration_solution 		A vulnerability in Cisco Unified Communications Domain Manager Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack on an affected system. The vulne… CWE-79
Cross-site Scripting 		CVE-2018-0386 2024-11-21 12:38 2018-08-16 Show GitHub Exploit DB Packet Storm
247070 5.4 MEDIUM
Network 		cisco registered_envelope_service A vulnerability in the web-based management interface of the Cisco Registered Envelope Service could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a u… CWE-79
Cross-site Scripting 		CVE-2018-0367 2024-11-21 12:38 2018-08-16 Show GitHub Exploit DB Packet Storm