Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 22, 2026, 10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
254031	7.2	危険	マイクロソフト	-	Microsoft Windows の win32k.sys における権限昇格の脆弱性	CWE-399 リソース管理の問題	CVE-2011-1235	2011-05-9 11:46	2011-04-12	Show	GitHub Exploit DB Packet Storm

254032	6.8	警告	freedesktop.org サイバートラスト株式会社 foolabs OpenOffice.org Project レッドハット	-	xpdf および poppler などの製品で利用される PDF パーサの FoFiType1::parse 関数における任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2010-3704	2011-05-9 11:29	2010-10-7	Show	GitHub Exploit DB Packet Storm

254033	6.8	警告	freedesktop.org サイバートラスト株式会社 foolabs OpenOffice.org Project レッドハット	-	xpdf および poppler などの製品で利用される PDF パーサの Gfx::getPos 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2010-3702	2011-05-9 11:26	2010-10-7	Show	GitHub Exploit DB Packet Storm

254034	7.5	危険	サイバートラスト株式会社 The Perl Foundation レッドハットオラクル	-	Perl の Safe モジュールにおける任意のコードを挿入または実行される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-1168	2011-05-9 11:13	2010-06-7	Show	GitHub Exploit DB Packet Storm

254035	9.3	危険	サン・マイクロシステムズサイバートラスト株式会社 Mozilla Foundation レッドハットオラクル	-	Mozilla NSS の正規表現の解析における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2009-2404	2011-05-9 11:11	2009-08-1	Show	GitHub Exploit DB Packet Storm

254036	7.5	危険	アップルサイバートラスト株式会社 xmlsoft.org レッドハットオラクル	-	libxslt の pattern.c におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2008-1767	2011-05-9 11:07	2008-05-21	Show	GitHub Exploit DB Packet Storm

254037	9.3	危険	レッドハット GNOME Project オラクル	-	Evolution の iCalendar 添付ファイルの処理に関するヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2008-1109	2011-05-9 11:04	2008-06-4	Show	GitHub Exploit DB Packet Storm

254038	7.6	危険	レッドハット GNOME Project オラクル	-	Evolution のタイムゾーン処理に関するバッファーオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2008-1108	2011-05-9 10:51	2008-06-4	Show	GitHub Exploit DB Packet Storm

254039	2.6	注意	レッドハットオラクル	-	gedit の不正なファイル名の処理によるフォーマットストリングの脆弱性	-	CVE-2005-1686	2011-05-9 10:49	2005-05-24	Show	GitHub Exploit DB Packet Storm

254040	7.8	危険	シスコシステムズ	-	Cisco IOS におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2010-4683	2011-05-9 10:22	2011-01-7	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 22, 2026, 4:08 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
246741	7.4	HIGH Adjacent	cisco	meeting_server	A vulnerability in Cisco Meeting Server (CMS) could allow an unauthenticated, adjacent attacker to access services running on internal device interfaces of an affected system. The vulnerability is du…	CWE-1188 Insecure Default Initialization of Resource	CVE-2018-0263	2024-11-21 12:37	2018-06-7	Show	GitHub Exploit DB Packet Storm

246742	6.1	MEDIUM Network	cisco	unified_communications_manager	A vulnerability in the web framework of Cisco Unified Communications Manager and Cisco Unified Presence could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack …	CWE-79 Cross-site Scripting	CVE-2018-0328	2024-11-21 12:37	2018-05-17	Show	GitHub Exploit DB Packet Storm

246743	6.1	MEDIUM Network	cisco	identity_services_engine_software	A vulnerability in the web framework of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web i…	CWE-79 Cross-site Scripting	CVE-2018-0327	2024-11-21 12:37	2018-05-17	Show	GitHub Exploit DB Packet Storm

246744	6.1	MEDIUM Network	cisco	telepresence_tx9000_firmware	A vulnerability in the web UI of Cisco TelePresence Server Software could allow an unauthenticated, remote attacker to conduct a cross-frame scripting (XFS) attack against a user of the web UI of the…	CWE-693 Protection Mechanism Failure	CVE-2018-0326	2024-11-21 12:37	2018-05-17	Show	GitHub Exploit DB Packet Storm

246745	7.5	HIGH Network	cisco	ip_phone_8800_firmware ip_phone_7800_firmware	A vulnerability in the Session Initiation Protocol (SIP) call-handling functionality of Cisco IP Phone 7800 Series phones and Cisco IP Phone 8800 Series phones could allow an unauthenticated, remote …	CWE-20 Improper Input Validation	CVE-2018-0325	2024-11-21 12:37	2018-05-17	Show	GitHub Exploit DB Packet Storm

246746	6.7	MEDIUM Local	cisco	network_functions_virtualization_infrastructure	A vulnerability in the CLI of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, high-privileged, local attacker to perform a command injection attack. The vulnerabili…	CWE-78 OS Command	CVE-2018-0324	2024-11-21 12:37	2018-05-17	Show	GitHub Exploit DB Packet Storm

246747	6.5	MEDIUM Network	cisco	network_functions_virtualization_infrastructure	A vulnerability in the web management interface of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, remote attacker to conduct a path traversal attack on a targeted …	CWE-22 Path Traversal	CVE-2018-0323	2024-11-21 12:37	2018-05-17	Show	GitHub Exploit DB Packet Storm

246748	5.8	MEDIUM Network	cisco	firepower_threat_defense	A vulnerability in the detection engine of Cisco Firepower Threat Defense software could allow an unauthenticated, remote attacker to bypass a configured Secure Sockets Layer (SSL) Access Control (AC…	CWE-693 Protection Mechanism Failure	CVE-2018-0297	2024-11-21 12:37	2018-05-17	Show	GitHub Exploit DB Packet Storm

246749	5.3	MEDIUM Network	cisco	socialminer	A vulnerability in the TCP stack of Cisco SocialMiner could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition in the notification system. The vulnerability is due…	NVD-CWE-noinfo	CVE-2018-0290	2024-11-21 12:37	2018-05-17	Show	GitHub Exploit DB Packet Storm

246750	6.1	MEDIUM Network	cisco	identity_services_engine_software	A vulnerability in the logs component of Cisco Identity Services Engine could allow an unauthenticated, remote attacker to conduct cross-site scripting attacks. The vulnerability is due to improper v…	CWE-79 Cross-site Scripting	CVE-2018-0289	2024-11-21 12:37	2018-05-17	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed