Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 8, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
225641	7.8	危険	シスコシステムズ	-	Cisco Unified Communications Manager におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2013-3459	2013-08-27 14:30	2013-08-21	Show	GitHub Exploit DB Packet Storm

225642	7.8	危険	シスコシステムズ	-	Cisco Prime Central for Hosted Collaboration Solution Assurance におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2013-3390	2013-08-27 14:28	2013-08-21	Show	GitHub Exploit DB Packet Storm

225643	7.8	危険	シスコシステムズ	-	Cisco Prime Central for Hosted Collaboration Solution Assurance におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2013-3389	2013-08-27 14:27	2013-08-21	Show	GitHub Exploit DB Packet Storm

225644	7.8	危険	シスコシステムズ	-	Cisco Prime Central for Hosted Collaboration Solution Assurance におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2013-3388	2013-08-27 14:27	2013-08-21	Show	GitHub Exploit DB Packet Storm

225645	7.8	危険	シスコシステムズ	-	Cisco Prime Central for Hosted Collaboration Solution Assurance におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2013-3387	2013-08-27 14:26	2013-08-21	Show	GitHub Exploit DB Packet Storm

225646	5.8	警告	Apache Software Foundation レッドハット	-	Apache Qpid の Python クライアントにおける SSL サーバになりすまされる脆弱性	CWE-20 不適切な入力確認	CVE-2013-1909	2013-08-27 12:25	2013-06-12	Show	GitHub Exploit DB Packet Storm

225647	4.3	警告	Axel Jung	-	TYPO3 用 Javascript and CSS Optimizer エクステンションにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-5570	2013-08-26 15:31	2013-01-28	Show	GitHub Exploit DB Packet Storm

225648	7.5	危険	Heiko Sudar	-	TYPO3 用 Slideshare エクステンションにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2013-5569	2013-08-26 15:31	2013-02-19	Show	GitHub Exploit DB Packet Storm

225649	2.1	注意	Paul Maddern	-	Drupal 用 Imagemenu モジュールにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-6583	2013-08-26 15:25	2012-09-19	Show	GitHub Exploit DB Packet Storm

225650	2.1	注意	Simon Tatham	-	PuTTY におけるログインパスワードを読まれる脆弱性	CWE-200 情報漏えい	CVE-2011-4607	2013-08-26 14:02	2011-12-8	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 8, 2026, 4:09 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
201661	7.5	HIGH Network	cacagoo	tv-288zd-2mp_firmware	The CACAGOO Cloud Storage Intelligent Camera TV-288ZD-2MP with firmware 3.4.2.0919 allows access to the RTSP service without a password.	CWE-306 Missing Authentication for Critical Function	CVE-2020-9349	2024-11-21 14:40	2020-04-3	Show	GitHub Exploit DB Packet Storm

201662	4.3	MEDIUM Network	piwigo	piwigo	The Community plugin 2.9.e-beta for Piwigo allows users to set image information on images in albums for which they do not have permission, by manipulating the image_id parameter.	CWE-639 Authorization Bypass Through User-Controlled Key	CVE-2020-9468	2024-11-21 14:40	2020-03-27	Show	GitHub Exploit DB Packet Storm

201663	5.4	MEDIUM Network	piwigo	piwigo	Piwigo 2.10.1 has stored XSS via the file parameter in a /ws.php request because of the pwg.images.setInfo function.	CWE-79 Cross-site Scripting	CVE-2020-9467	2024-11-21 14:40	2020-03-27	Show	GitHub Exploit DB Packet Storm

201664	8.8	HIGH Network	microfocus	service_manager_automation	An SQL injection vulnerability was discovered in Micro Focus Service Manager Automation (SMA), affecting versions 2019.08, 2019.05, 2019.02, 2018.08, 2018.05, 2018.02. The vulnerability could allow f…	CWE-89 SQL Injection	CVE-2020-9521	2024-11-21 14:40	2020-03-27	Show	GitHub Exploit DB Packet Storm

201665	5.4	MEDIUM Network	microfocus	vibe	A stored XSS vulnerability was discovered in Micro Focus Vibe, affecting all Vibe version prior to 4.0.7. The vulnerability could allows a remote attacker to craft and store malicious content into Vi…	CWE-79 Cross-site Scripting	CVE-2020-9520	2024-11-21 14:40	2020-03-26	Show	GitHub Exploit DB Packet Storm

201666	7.8	HIGH Local	adobe	bridge	Adobe Bridge versions 10.0 have a heap-based buffer overflow vulnerability. Successful exploitation could lead to arbitrary code execution.	CWE-787 Out-of-bounds Write	CVE-2020-9552	2024-11-21 14:40	2020-03-26	Show	GitHub Exploit DB Packet Storm

201667	7.8	HIGH Local	adobe	bridge	Adobe Bridge versions 10.0 have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution.	CWE-787 Out-of-bounds Write	CVE-2020-9551	2024-11-21 14:40	2020-03-26	Show	GitHub Exploit DB Packet Storm

201668	7.5	HIGH Network	tp-link	archer_c50	TP-Link Archer C50 V3 devices before Build 200318 Rel. 62209 allows remote attackers to cause a denial of service via a crafted HTTP Header containing an unexpected Referer field.	CWE-772 Missing Release of Resource after Effective Lifetime	CVE-2020-9375	2024-11-21 14:40	2020-03-26	Show	GitHub Exploit DB Packet Storm

201669	5.3	MEDIUM Local	kde debian fedoraproject	okular debian_linux fedora	KDE Okular before 1.10.0 allows code execution via an action link in a PDF document.	NVD-CWE-noinfo	CVE-2020-9359	2024-11-21 14:40	2020-03-24	Show	GitHub Exploit DB Packet Storm

201670	7.3	HIGH Network	supsystic	pricing_table_by_supsystic	An issue was discovered in the pricing-table-by-supsystic plugin before 1.8.2 for WordPress. Because there is no permission check on the ImportJSONTable, createFromTpl, and getJSONExportTable endpoin…	CWE-276 Incorrect Default Permissions	CVE-2020-9392	2024-11-21 14:40	2020-03-24	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed