Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 28, 2026, noon

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
230951 7.5 危険 psi-labs - psisns の profile/myprofile.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2007-4881 2012-12-20 18:33 2007-09-13 Show GitHub Exploit DB Packet Storm
230952 5 警告 Simplenews Project - SimpNews における任意の .inc ファイルをダウンロードされる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2007-4873 2012-12-20 18:33 2007-09-27 Show GitHub Exploit DB Packet Storm
230953 5 警告 Simplenews Project - SimpleNews における重要な情報を取得される脆弱性 CWE-DesignError
CVE-2007-4872 2012-12-20 18:33 2007-09-27 Show GitHub Exploit DB Packet Storm
230954 6.8 警告 Quirm - SAXON の example.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2007-4863 2012-12-20 18:33 2007-10-30 Show GitHub Exploit DB Packet Storm
230955 4.3 警告 Quirm - SAXON の admin/menu.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-4862 2012-12-20 18:33 2007-10-30 Show GitHub Exploit DB Packet Storm
230956 5 警告 Quirm - SAXON における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2007-4861 2012-12-20 18:33 2007-10-30 Show GitHub Exploit DB Packet Storm
230957 7.5 危険 webace - wls の start.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2007-4846 2012-12-20 18:33 2007-09-12 Show GitHub Exploit DB Packet Storm
230958 7.5 危険 rwscripts.com - RW::Download の UPLOAD/index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2007-4845 2012-12-20 18:33 2007-09-12 Show GitHub Exploit DB Packet Storm
230959 4.3 警告 x-diesel - X-Diesel Unreal Commander におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2007-4844 2012-12-20 18:33 2007-09-12 Show GitHub Exploit DB Packet Storm
230960 5.8 警告 x-diesel - X-Diesel Unreal Commander におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2007-4843 2012-12-20 18:33 2007-09-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
197271 7.5 HIGH
Network 		cisco aironet_access_point_software
catalyst_9800_firmware
wireless_lan_controller_software 		A vulnerability in the FlexConnect Upgrade feature of Cisco Aironet Series Access Points Software could allow an unauthenticated, remote attacker to obtain confidential information from an affected d… NVD-CWE-Other
CVE-2021-1437 2024-11-21 14:44 2021-03-25 Show GitHub Exploit DB Packet Storm
197272 8.1 HIGH
Network 		cisco ios_xe A vulnerability in the vDaemon process in Cisco IOS XE SD-WAN Software could allow an unauthenticated, remote attacker to cause a buffer overflow on an affected device. This vulnerability is due to i… - CVE-2021-1433 2024-11-21 14:44 2021-03-25 Show GitHub Exploit DB Packet Storm
197273 7.3 HIGH
Local 		cisco ios_xe
ios_xe_sd-wan 		A vulnerability in the CLI of Cisco IOS XE SD-WAN Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system as the root user. The attacker… CWE-74
Injection 		CVE-2021-1432 2024-11-21 14:44 2021-03-25 Show GitHub Exploit DB Packet Storm
197274 7.4 HIGH
Network 		cisco ios_xe A vulnerability in the web UI feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to conduct a cross-site WebSocket hijacking (CSWSH) attack and cause a denial of service… CWE-1021
 Improper Restriction of Rendered UI Layers or Frames 		CVE-2021-1403 2024-11-21 14:44 2021-03-25 Show GitHub Exploit DB Packet Storm
197275 6.8 MEDIUM
Physics 		cisco ios_xe A vulnerability in the boot logic of Cisco IOS XE Software could allow an authenticated, local attacker with level 15 privileges or an unauthenticated attacker with physical access to execute arbitra… - CVE-2021-1398 2024-11-21 14:44 2021-03-25 Show GitHub Exploit DB Packet Storm
197276 5.3 MEDIUM
Network 		cisco ios_xe A vulnerability in the ingress traffic manager of Cisco IOS XE Software for Cisco Network Convergence System (NCS) 520 Routers could allow an unauthenticated, remote attacker to cause a denial of ser… NVD-CWE-noinfo
CVE-2021-1394 2024-11-21 14:44 2021-03-25 Show GitHub Exploit DB Packet Storm
197277 7.8 HIGH
Local 		cisco ios
ios_xe 		A vulnerability in the CLI command permissions of Cisco IOS and Cisco IOS XE Software could allow an authenticated, local attacker to retrieve the password for Common Industrial Protocol (CIP) and th… CWE-522
 Insufficiently Protected Credentials 		CVE-2021-1392 2024-11-21 14:44 2021-03-25 Show GitHub Exploit DB Packet Storm
197278 6.7 MEDIUM
Local 		cisco ios_xe
ios 		A vulnerability in the dragonite debugger of Cisco IOS XE Software could allow an authenticated, local attacker to escalate from privilege level 15 to root privilege. The vulnerability is due to the … - CVE-2021-1391 2024-11-21 14:44 2021-03-25 Show GitHub Exploit DB Packet Storm
197279 6.7 MEDIUM
Local 		cisco ios_xe A vulnerability in one of the diagnostic test CLI commands of Cisco IOS XE Software could allow an authenticated, local attacker to execute arbitrary code on an affected device. To exploit this vulne… - CVE-2021-1390 2024-11-21 14:44 2021-03-25 Show GitHub Exploit DB Packet Storm
197280 6.5 MEDIUM
Network 		cisco ios_xe
ios 		A vulnerability in the Cisco IOx application hosting environment of multiple Cisco platforms could allow an authenticated, remote attacker to conduct directory traversal attacks and read and write fi… CWE-22
Path Traversal 		CVE-2021-1385 2024-11-21 14:44 2021-03-25 Show GitHub Exploit DB Packet Storm