Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 3, 2026, noon

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
253051 6.6 警告 シスコシステムズ - Cisco Unified IP Phones 7900 における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2011-1603 2011-12-1 11:03 2011-06-1 Show GitHub Exploit DB Packet Storm
253052 6.6 警告 シスコシステムズ - Cisco Unified IP Phone 7900 の su ユーティリティにおける権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2011-1602 2011-12-1 11:03 2011-06-1 Show GitHub Exploit DB Packet Storm
253053 7.8 危険 シスコシステムズ - Cisco IOS XR におけるサービス運用妨害 (デバイスリロード) の脆弱性 CWE-399
リソース管理の問題 		CVE-2011-1651 2011-12-1 11:02 2011-05-25 Show GitHub Exploit DB Packet Storm
253054 7.8 危険 シスコシステムズ - Cisco Content Delivery System におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2011-1649 2011-12-1 11:01 2011-05-25 Show GitHub Exploit DB Packet Storm
253055 5 警告 シスコシステムズ - Cisco RVS4000 Gigabit Security Router のソフトウェアおよび WRVS4400N Gigabit Security Router のソフトウェアにおける脆弱性 CWE-200
情報漏えい 		CVE-2011-1647 2011-12-1 11:00 2011-05-25 Show GitHub Exploit DB Packet Storm
253056 9 危険 シスコシステムズ - Cisco RVS4000 Gigabit Security Router のソフトウェアおよび WRVS4400N Gigabit Security Router のソフトウェアにおける脆弱性 CWE-94
コード・インジェクション 		CVE-2011-1646 2011-12-1 10:50 2011-05-25 Show GitHub Exploit DB Packet Storm
253057 9.3 危険 シスコシステムズ - Cisco RVS4000 Gigabit Security Router のソフトウェアおよび WRVS4400N Gigabit Security Router のソフトウェアにおける脆弱性 CWE-16
環境設定 		CVE-2011-1645 2011-12-1 10:49 2011-05-25 Show GitHub Exploit DB Packet Storm
253058 7.8 危険 シスコシステムズ - Cisco IOS XR におけるサービス運用妨害 (ディスク消費) の脆弱性 CWE-399
リソース管理の問題 		CVE-2011-0949 2011-12-1 10:48 2011-05-25 Show GitHub Exploit DB Packet Storm
253059 7.8 危険 シスコシステムズ - Cisco IOS XR におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2011-0943 2011-12-1 10:48 2011-05-25 Show GitHub Exploit DB Packet Storm
253060 6.8 警告 シスコシステムズ - Cisco CiscoWorks Common Services におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2011-0966 2011-12-1 10:47 2011-05-18 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 3, 2026, 4:18 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
246471 8.1 HIGH
Network 		intelbras nplug_firmware Intelbras NPLUG 1.0.0.14 wireless repeater devices have a critical vulnerability that allows an attacker to authenticate in the web interface just by using "admin:" as the name of a cookie. CWE-287
Improper Authentication 		CVE-2018-12455 2024-11-21 12:45 2018-10-11 Show GitHub Exploit DB Packet Storm
246472 9.8 CRITICAL
Network 		eclipse vert.x In version from 3.5.Beta1 to 3.5.3 of Eclipse Vert.x, the OpenAPI XML type validator creates XML parsers without taking appropriate defense against XML attacks. This mechanism is exclusively when the… CWE-611
XXE 		CVE-2018-12544 2024-11-21 12:45 2018-10-11 Show GitHub Exploit DB Packet Storm
246473 9.8 CRITICAL
Network 		eclipse vert.x In version from 3.0.0 to 3.5.3 of Eclipse Vert.x, the StaticHandler uses external input to construct a pathname that should be within a restricted directory, but it does not properly neutralize '\' (… CWE-22
Path Traversal 		CVE-2018-12542 2024-11-21 12:45 2018-10-11 Show GitHub Exploit DB Packet Storm
246474 6.5 MEDIUM
Network 		eclipse vert.x In version from 3.0.0 to 3.5.3 of Eclipse Vert.x, the WebSocket HTTP upgrade implementation buffers the full http request before doing the handshake, holding the entire request body in memory. There … CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2018-12541 2024-11-21 12:45 2018-10-11 Show GitHub Exploit DB Packet Storm
246475 9.8 CRITICAL
Network 		tibco spotfire_statistics_services The web server component of TIBCO Software Inc's Spotfire Statistics Services contains multiple vulnerabilities that may allow the remote execution of code. Without needing to authenticate, an attack… NVD-CWE-noinfo
CVE-2018-12410 2024-11-21 12:45 2018-10-11 Show GitHub Exploit DB Packet Storm
246476 7.5 HIGH
Network 		opensuse open_build_service A Improper Input Validation vulnerability in Open Build Service allows remote attackers to cause DoS by specifying crafted request IDs. Affected releases are openSUSE Open Build Service: versions pri… CWE-20
 Improper Input Validation  		CVE-2018-12479 2024-11-21 12:45 2018-10-9 Show GitHub Exploit DB Packet Storm
246477 6.5 MEDIUM
Network 		opensuse open_build_service A Improper Input Validation vulnerability in Open Build Service allows remote attackers to extract files from the system where the service runs. Affected releases are openSUSE Open Build Service: sta… CWE-20
 Improper Input Validation  		CVE-2018-12478 2024-11-21 12:45 2018-10-9 Show GitHub Exploit DB Packet Storm
246478 7.5 HIGH
Network 		opensuse leap A Improper Neutralization of CRLF Sequences vulnerability in Open Build Service allows remote attackers to cause deletion of directories by tricking obs-service-refresh_patches to delete them. Affect… CWE-93
CRLF Injection 		CVE-2018-12477 2024-11-21 12:45 2018-10-9 Show GitHub Exploit DB Packet Storm
246479 9.8 CRITICAL
Network 		opensuse tar_scm Improper input validation in obs-service-tar_scm of Open Build Service allows remote attackers to cause access and extract information outside the current build or cause the creation of file in attac… CWE-20
 Improper Input Validation  		CVE-2018-12474 2024-11-21 12:45 2018-10-9 Show GitHub Exploit DB Packet Storm
246480 9.1 CRITICAL
Network 		suse subscription_management_tool A improper authentication using the HOST header in SUSE Linux SMT allows remote attackers to spoof a sibling server. Affected releases are SUSE Linux SMT: versions prior to 3.0.37. CWE-287
Improper Authentication 		CVE-2018-12472 2024-11-21 12:45 2018-10-4 Show GitHub Exploit DB Packet Storm