Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 2, 2026, 2 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228081 5 警告 securecomputing - Secure Computing SecurityReporter の file.cgi における認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2007-4043 2012-12-20 18:33 2007-07-27 Show GitHub Exploit DB Packet Storm
228082 9.3 危険 Yahoo! - Yahoo! Widgets の YDPCTL.dll におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2007-4034 2012-12-20 18:33 2007-07-27 Show GitHub Exploit DB Packet Storm
228083 7.5 危険 webSPELL - Webspell の index.php における絶対パストラバーサルの脆弱性 - CVE-2007-4028 2012-12-20 18:33 2007-07-26 Show GitHub Exploit DB Packet Storm
228084 6.8 警告 Telaxus LLC - epesi framework における任意の PHP コードを実行される脆弱性 - CVE-2007-4026 2012-12-20 18:33 2007-07-26 Show GitHub Exploit DB Packet Storm
228085 4.3 警告 サン・マイクロシステムズ - Windows 用の SJS Application Server における JSP ソースコードを取得される脆弱性 - CVE-2007-4025 2012-12-20 18:33 2007-07-24 Show GitHub Exploit DB Packet Storm
228086 4.3 警告 w1l3d4 - W1L3D4 Philboard の W1L3D4_aramasonuc.asp におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-4024 2012-12-20 18:33 2007-07-26 Show GitHub Exploit DB Packet Storm
228087 4.3 警告 WordPress.org - WordPress 用の Blix テーマなどに関する特定の index.php インストールスクリプトにおけるクロスサイトスクリプティングの脆弱性 - CVE-2007-4014 2012-12-20 18:33 2007-07-25 Show GitHub Exploit DB Packet Storm
228088 6.8 警告 virtual hosting control system - VHCS におけるセッションをハイジャックされる脆弱性 CWE-287
不適切な認証 		CVE-2007-3988 2012-12-20 18:33 2007-07-25 Show GitHub Exploit DB Packet Storm
228089 5 警告 securecomputing - Secure Computing SecurityReporter の file.cgi における認証を回避される脆弱性 - CVE-2007-3986 2012-12-20 18:33 2007-07-25 Show GitHub Exploit DB Packet Storm
228090 5 警告 securecomputing - SecurityReporter の file.cgi におけるディレクトリトラバーサルの脆弱性 - CVE-2007-3985 2012-12-20 18:33 2007-07-25 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 2, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
223581 6.8 MEDIUM
Physics 		cisco ios A vulnerability in the filesystem of Cisco IOS XE Software could allow an authenticated, local attacker with physical access to an affected device to execute arbitrary code on the underlying operatin… CWE-59
Link Following 		CVE-2019-12672 2024-11-21 13:23 2019-09-26 Show GitHub Exploit DB Packet Storm
223582 7.8 HIGH
Local 		cisco ios_xe A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker to gain shell access on an affected device and execute commands on the underlying operating system (OS… CWE-863
 Incorrect Authorization 		CVE-2019-12671 2024-11-21 13:23 2019-09-26 Show GitHub Exploit DB Packet Storm
223583 8.6 HIGH
Network 		cisco ios_xe A vulnerability in the Cisco TrustSec (CTS) Protected Access Credential (PAC) provisioning module of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a reload of an affe… CWE-20
 Improper Input Validation  		CVE-2019-12663 2024-11-21 13:23 2019-09-26 Show GitHub Exploit DB Packet Storm
223584 7.5 HIGH
Network 		cisco ios_xe A vulnerability in the HTTP server code of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause the HTTP server to crash. The vulnerability is due to a logical error in the … CWE-400
 Uncontrolled Resource Consumption 		CVE-2019-12659 2024-11-21 13:23 2019-09-26 Show GitHub Exploit DB Packet Storm
223585 6.7 MEDIUM
Local 		cisco ios A vulnerability in the filesystem of Cisco IOS XE Software could allow an authenticated, local attacker within the IOx Guest Shell to modify the namespace container protections on an affected device.… CWE-276
Incorrect Default Permissions  		CVE-2019-12670 2024-11-21 13:23 2019-09-26 Show GitHub Exploit DB Packet Storm
223586 7.5 HIGH
Network 		cisco ios A vulnerability in the RADIUS Change of Authorization (CoA) code of Cisco TrustSec, a feature within Cisco IOS XE Software, could allow an unauthenticated, remote attacker to cause a denial of servic… NVD-CWE-noinfo
CVE-2019-12669 2024-11-21 13:23 2019-09-26 Show GitHub Exploit DB Packet Storm
223587 4.8 MEDIUM
Network 		cisco ios
ios_xe 		A vulnerability in the web framework code of Cisco IOS and Cisco IOS XE Software could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of … CWE-79
Cross-site Scripting 		CVE-2019-12668 2024-11-21 13:23 2019-09-26 Show GitHub Exploit DB Packet Storm
223588 4.8 MEDIUM
Network 		cisco ios_xe A vulnerability in the web framework code of Cisco IOS XE Software could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the web interf… CWE-79
Cross-site Scripting 		CVE-2019-12667 2024-11-21 13:23 2019-09-26 Show GitHub Exploit DB Packet Storm
223589 6.7 MEDIUM
Local 		cisco ios_xe A vulnerability in the Guest Shell of Cisco IOS XE Software could allow an authenticated, local attacker to perform directory traversal on the base Linux operating system of Cisco IOS XE Software. Th… CWE-22
Path Traversal 		CVE-2019-12666 2024-11-21 13:23 2019-09-26 Show GitHub Exploit DB Packet Storm
223590 7.4 HIGH
Network 		cisco ios A vulnerability in the HTTP client feature of Cisco IOS and IOS XE Software could allow an unauthenticated, remote attacker to read and modify data that should normally have been sent via an encrypte… NVD-CWE-Other
CVE-2019-12665 2024-11-21 13:23 2019-09-26 Show GitHub Exploit DB Packet Storm