Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 22, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
252311 9 危険 マイクロソフト - Microsoft Windows におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2011-3406 2011-12-16 11:38 2011-12-13 Show GitHub Exploit DB Packet Storm
252312 9.3 危険 マイクロソフト - 複数の Microsoft PowerPoint 製品における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2011-3413 2011-12-16 11:37 2011-12-13 Show GitHub Exploit DB Packet Storm
252313 9.3 危険 マイクロソフト - Microsoft PowerPoint 2007 および 2010 における権限昇格の脆弱性 CWE-Other
その他 		CVE-2011-3396 2011-12-16 11:36 2011-12-13 Show GitHub Exploit DB Packet Storm
252314 9.3 危険 マイクロソフト - Microsoft Windows XP および Windows Server 2003 における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2011-3400 2011-12-16 11:35 2011-12-13 Show GitHub Exploit DB Packet Storm
252315 9.3 危険 マイクロソフト - 複数の Microsoft Windows 製品の ENCDEC.DLL における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2011-3401 2011-12-16 11:34 2011-12-13 Show GitHub Exploit DB Packet Storm
252316 9.3 危険 マイクロソフト - Microsoft Publisher における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2011-3412 2011-12-16 11:32 2011-12-13 Show GitHub Exploit DB Packet Storm
252317 9.3 危険 マイクロソフト - Microsoft Publisher における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2011-3411 2011-12-16 11:31 2011-12-13 Show GitHub Exploit DB Packet Storm
252318 9.3 危険 マイクロソフト - Microsoft Publisher における任意のコードを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2011-3410 2011-12-16 11:25 2011-12-13 Show GitHub Exploit DB Packet Storm
252319 9.3 危険 マイクロソフト - Microsoft Publisher 2003 および 2007 における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2011-1508 2011-12-16 11:19 2011-12-13 Show GitHub Exploit DB Packet Storm
252320 9.3 危険 マイクロソフト - Microsoft Windows XP および Windows Server 2003 における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2011-3397 2011-12-16 11:16 2011-12-13 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 23, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
246991 4.3 MEDIUM
Network 		cisco unified_communications_manager A vulnerability in the web framework of Cisco Unified Communications Manager could allow an authenticated, remote attacker to conduct an SQL injection attack against an affected system. The vulnerabi… CWE-89
SQL Injection 		CVE-2018-0120 2024-11-21 12:37 2018-02-8 Show GitHub Exploit DB Packet Storm
246992 4.7 MEDIUM
Network 		cisco conference_director A vulnerability in certain authentication controls in the account services of Cisco Spark could allow an authenticated, remote attacker to interact with and view information on an affected device tha… NVD-CWE-noinfo
CVE-2018-0119 2024-11-21 12:37 2018-02-8 Show GitHub Exploit DB Packet Storm
246993 8.6 HIGH
Network 		cisco asr_5000_firmware
asr_5500_firmware 		A vulnerability in the ingress packet processing functionality of the Cisco Virtualized Packet Core-Distributed Instance (VPC-DI) Software could allow an unauthenticated, remote attacker to cause bot… CWE-20
 Improper Input Validation  		CVE-2018-0117 2024-11-21 12:37 2018-02-8 Show GitHub Exploit DB Packet Storm
246994 7.2 HIGH
Network 		cisco mobility_services_engine A vulnerability in the RADIUS authentication module of Cisco Policy Suite could allow an unauthenticated, remote attacker to be authorized as a subscriber without providing a valid password; however,… CWE-287
Improper Authentication 		CVE-2018-0116 2024-11-21 12:37 2018-02-8 Show GitHub Exploit DB Packet Storm
246995 8.8 HIGH
Network 		cisco unified_computing_system_central_software A vulnerability in an operations script of Cisco UCS Central could allow an authenticated, remote attacker to execute arbitrary shell commands with the privileges of the daemon user. The vulnerabilit… CWE-20
 Improper Input Validation  		CVE-2018-0113 2024-11-21 12:37 2018-02-8 Show GitHub Exploit DB Packet Storm
246996 8.6 HIGH
Network 		cisco ios_xr A vulnerability in the IPv6 subsystem of Cisco IOS XR Software Release 5.3.4 for the Cisco Aggregation Services Router (ASR) 9000 Series could allow an unauthenticated, remote attacker to trigger a r… NVD-CWE-Other
CVE-2018-0136 2024-11-21 12:37 2018-02-1 Show GitHub Exploit DB Packet Storm
246997 10.0 CRITICAL
Network 		cisco adaptive_security_appliance_software
firepower_threat_defense 		A vulnerability in the Secure Sockets Layer (SSL) VPN functionality of the Cisco Adaptive Security Appliance (ASA) Software could allow an unauthenticated, remote attacker to cause a reload of the af… CWE-415
 Double Free 		CVE-2018-0101 2024-11-21 12:37 2018-01-30 Show GitHub Exploit DB Packet Storm
246998 6.7 MEDIUM
Local 		cisco staros A vulnerability in the CLI of the Cisco StarOS operating system for Cisco ASR 5000 Series routers could allow an authenticated, local attacker to execute arbitrary commands with root privileges on an… CWE-78
OS Command  		CVE-2018-0115 2024-11-21 12:37 2018-01-18 Show GitHub Exploit DB Packet Storm
246999 8.8 HIGH
Network 		cisco prime_service_catalog A vulnerability in the web framework of Cisco Prime Service Catalog could allow an unauthenticated, remote attacker to execute unwanted actions on an affected device. The vulnerability is due to a la… CWE-352
 Origin Validation Error 		CVE-2018-0107 2024-11-21 12:37 2018-01-18 Show GitHub Exploit DB Packet Storm
247000 3.3 LOW
Local 		cisco elastic_services_controller A vulnerability in the ConfD server of the Cisco Elastic Services Controller (ESC) could allow an unauthenticated, local attacker to access sensitive information on a targeted system. The vulnerabili… CWE-552
 Files or Directories Accessible to External Parties 		CVE-2018-0106 2024-11-21 12:37 2018-01-18 Show GitHub Exploit DB Packet Storm