Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 26, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
251981	4.3	警告	The phpMyAdmin Project	-	phpMyAdmin のリダイレクタ機能におけるオープンリダイレクトの脆弱性	CWE-20 不適切な入力確認	CVE-2011-1941	2012-01-30 15:05	2011-05-22	Show	GitHub Exploit DB Packet Storm

251982	4.3	警告	The phpMyAdmin Project	-	phpMyAdmin におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-1940	2012-01-30 15:03	2011-05-22	Show	GitHub Exploit DB Packet Storm

251983	10	危険	サイバートラスト株式会社 Mozilla Foundation レッドハットオラクル	-	複数の Mozilla 製品におけるサービス運用妨害 (DoS) の脆弱性	CWE-119 バッファエラー	CVE-2011-2377	2012-01-27 16:40	2011-06-21	Show	GitHub Exploit DB Packet Storm

251984	7.6	危険	サイバートラスト株式会社 Mozilla Foundation レッドハットオラクル	-	複数の Mozilla 製品における任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2011-2373	2012-01-27 16:39	2011-06-21	Show	GitHub Exploit DB Packet Storm

251985	10	危険	サイバートラスト株式会社 Mozilla Foundation レッドハットオラクル	-	複数の Mozilla 製品における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2011-2371	2012-01-27 16:38	2011-06-21	Show	GitHub Exploit DB Packet Storm

251986	10	危険	サイバートラスト株式会社 Mozilla Foundation レッドハットオラクル	-	複数の Mozilla 製品のブラウザエンジンにおけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2011-2365	2012-01-27 16:32	2011-06-21	Show	GitHub Exploit DB Packet Storm

251987	10	危険	サイバートラスト株式会社 Mozilla Foundation レッドハットオラクル	-	Mozilla Firefox および Thunderbird の nsSVGPointList::AppendElement 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2011-2363	2012-01-27 16:31	2011-06-21	Show	GitHub Exploit DB Packet Storm

251988	5	警告	サイバートラスト株式会社 Mozilla Foundation レッドハットオラクル	-	Mozilla Firefox および Thunderbird における同一生成元ポリシーを回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-2362	2012-01-27 16:25	2011-06-21	Show	GitHub Exploit DB Packet Storm

251989	10	危険	サイバートラスト株式会社 Mozilla Foundation レッドハットオラクル	-	Mozilla Firefox および Thunderbird の nsXULCommandDispatcher 関数における任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2011-0085	2012-01-27 16:23	2011-06-21	Show	GitHub Exploit DB Packet Storm

251990	10	危険	サイバートラスト株式会社 Mozilla Foundation レッドハットオラクル	-	Mozilla Firefox および Thunderbird の nsSVGPathSegList::ReplaceItem 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2011-0083	2012-01-27 16:22	2011-06-21	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 26, 2026, 4:05 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
246951	6.1	MEDIUM Network	cisco	security_manager	A vulnerability in DesktopServlet in the web-based management interface of Cisco Security Manager could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting (XSS) att…	CWE-79 Cross-site Scripting	CVE-2018-0223	2024-11-21 12:37	2018-03-8	Show	GitHub Exploit DB Packet Storm

246952	6.7	MEDIUM Local	cisco	identity_services_engine	A vulnerability in specific CLI commands for the Cisco Identity Services Engine (ISE) could allow an authenticated, local attacker to perform command injection to the underlying operating system or c…	CWE-78 OS Command	CVE-2018-0221	2024-11-21 12:37	2018-03-8	Show	GitHub Exploit DB Packet Storm

246953	5.4	MEDIUM Network	cisco	videoscape_anyres_live	A vulnerability in the web-based management interface of Cisco Videoscape AnyRes Live could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of th…	CWE-79 Cross-site Scripting	CVE-2018-0220	2024-11-21 12:37	2018-03-8	Show	GitHub Exploit DB Packet Storm

246954	6.1	MEDIUM Network	cisco	unified_computing_system_director	A vulnerability in the web-based management interface of Cisco Unified Computing System (UCS) Director could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack a…	CWE-79 Cross-site Scripting	CVE-2018-0219	2024-11-21 12:37	2018-03-8	Show	GitHub Exploit DB Packet Storm

246955	3.3	LOW Local	cisco	secure_access_control_server_solution_engine	A vulnerability in the web-based user interface of the Cisco Secure Access Control Server prior to 5.8 patch 9 could allow an unauthenticated, remote attacker to gain read access to certain informati…	CWE-611 XXE	CVE-2018-0218	2024-11-21 12:37	2018-03-8	Show	GitHub Exploit DB Packet Storm

246956	6.7	MEDIUM Local	cisco	asr_5000_firmware asr_5700_firmware asr_5500_firmware	A vulnerability in the CLI of the Cisco StarOS operating system for Cisco ASR 5000 Series Aggregation Services Routers could allow an authenticated, local attacker to perform a command injection atta…	CWE-78 OS Command	CVE-2018-0217	2024-11-21 12:37	2018-03-8	Show	GitHub Exploit DB Packet Storm

246957	5.4	MEDIUM Network	cisco	identity_services_engine	A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack and…	CWE-352 Origin Validation Error	CVE-2018-0216	2024-11-21 12:37	2018-03-8	Show	GitHub Exploit DB Packet Storm

246958	6.3	MEDIUM Network	cisco	identity_services_engine	A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack and…	CWE-352 Origin Validation Error	CVE-2018-0215	2024-11-21 12:37	2018-03-8	Show	GitHub Exploit DB Packet Storm

246959	5.3	MEDIUM Local	cisco	identity_services_engine	A vulnerability in certain CLI commands of Cisco Identity Services Engine (ISE) could allow an authenticated, local attacker to execute arbitrary commands on the host operating system with the privil…	CWE-78 OS Command	CVE-2018-0214	2024-11-21 12:37	2018-03-8	Show	GitHub Exploit DB Packet Storm

246960	8.8	HIGH Network	cisco	identity_services_engine	A vulnerability in the credential reset functionality for Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to gain elevated privileges. The vulnerability is due to a…	CWE-20 Improper Input Validation	CVE-2018-0213	2024-11-21 12:37	2018-03-8	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed