Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 7, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
225871 10 危険 forkosh - mathTex の mathtex.cgi における任意のコマンドを実行される脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2009-1383 2012-12-20 19:10 2009-07-14 Show GitHub Exploit DB Packet Storm
225872 4.3 警告 レッドハット - Red Hat JBoss Enterprise Application Platform の JBossAs におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-1380 2012-12-20 19:10 2009-12-9 Show GitHub Exploit DB Packet Storm
225873 9.3 危険 xilisoft - Xilisoft Video Converter の ape_plugin.plg におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2009-1370 2012-12-20 19:10 2009-04-22 Show GitHub Exploit DB Packet Storm
225874 4.9 警告 サン・マイクロシステムズ - Sun OpenSolaris の SCTP におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2009-1359 2012-12-20 19:10 2009-04-19 Show GitHub Exploit DB Packet Storm
225875 6.8 警告 サン・マイクロシステムズ - Sun Java System Delegated Administrator の da/DA/Login における CRLF インジェクションの脆弱性 CWE-20
不適切な入力確認 		CVE-2009-1357 2012-12-20 19:10 2009-04-21 Show GitHub Exploit DB Packet Storm
225876 4 警告 sergey lyubka - Mongoose におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2009-1354 2012-12-20 19:10 2009-04-21 Show GitHub Exploit DB Packet Storm
225877 5 警告 sebastian fernandez - Zervit Webserver の libz/misc.c におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2009-1353 2012-12-20 19:10 2009-04-21 Show GitHub Exploit DB Packet Storm
225878 4.3 警告 レッドハット - C2Net Stronghold におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-1349 2012-12-20 19:10 2009-04-21 Show GitHub Exploit DB Packet Storm
225879 6 警告 TWiki - TWiki におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2009-1339 2012-12-20 19:10 2009-04-5 Show GitHub Exploit DB Packet Storm
225880 5 警告 サン・マイクロシステムズ - Sun Java System Directory Server および Enterprise Edition の Online Help 機能におけるファイルの一部のコンテンツを取得される脆弱性 CWE-noinfo
情報不足 		CVE-2009-1332 2012-12-20 19:10 2009-04-15 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 7, 2026, 4:22 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
198651 7.2 HIGH
Physics 		cisco ios_xe A vulnerability in the file system on the pluggable USB 3.0 Solid State Drive (SSD) for Cisco IOS XE Software could allow an authenticated, physical attacker to remove the USB 3.0 SSD and modify sens… CWE-269
 Improper Privilege Management 		CVE-2020-3396 2024-11-21 14:30 2020-09-25 Show GitHub Exploit DB Packet Storm
198652 7.8 HIGH
Local 		cisco ios_xe A vulnerability in the application-hosting subsystem of Cisco IOS XE Software could allow an authenticated, local attacker to elevate privileges to root on an affected device. The attacker could exec… CWE-20
 Improper Input Validation  		CVE-2020-3393 2024-11-21 14:30 2020-09-25 Show GitHub Exploit DB Packet Storm
198653 7.4 HIGH
Adjacent 		cisco ios_xe A vulnerability in Simple Network Management Protocol (SNMP) trap generation for wireless clients of the Cisco IOS XE Wireless Controller Software for the Cisco Catalyst 9000 Family could allow an un… CWE-20
 Improper Input Validation  		CVE-2020-3390 2024-11-21 14:30 2020-09-25 Show GitHub Exploit DB Packet Storm
198654 7.2 HIGH
Network 		cisco ex60_firmware
ex90_firmware
sx10_firmware
sx20_firmware
sx80_firmware
telepresence_codec_c40_firmware
telepresence_codec_c60_firmware
telepresence_codec_c90_firmware
teleprese… 		A vulnerability in the video endpoint API (xAPI) of Cisco TelePresence Collaboration Endpoint (CE) Software, Cisco TelePresence Codec (TC) Software, and Cisco RoomOS Software could allow an authentic… CWE-22
Path Traversal 		CVE-2020-3143 2024-11-21 14:30 2020-09-23 Show GitHub Exploit DB Packet Storm
198655 6.1 MEDIUM
Network 		cisco email_security_appliance A vulnerability in the web-based management interface of Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a … CWE-79
Cross-site Scripting 		CVE-2020-3137 2024-11-21 14:30 2020-09-23 Show GitHub Exploit DB Packet Storm
198656 8.8 HIGH
Network 		cisco unified_communications_manager A vulnerability in the web-based management interface of Cisco Unified Communications Manager (UCM) could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) atta… CWE-352
 Origin Validation Error 		CVE-2020-3135 2024-11-21 14:30 2020-09-23 Show GitHub Exploit DB Packet Storm
198657 7.5 HIGH
Network 		cisco email_security_appliance A vulnerability in the email message scanning of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to bypass configured filters on the de… CWE-20
 Improper Input Validation  		CVE-2020-3133 2024-11-21 14:30 2020-09-23 Show GitHub Exploit DB Packet Storm
198658 6.5 MEDIUM
Network 		cisco unity_connection A vulnerability in the web management interface of Cisco Unity Connection could allow an authenticated remote attacker to overwrite files on the underlying filesystem. The vulnerability is due to ins… CWE-20
 Improper Input Validation  		CVE-2020-3130 2024-11-21 14:30 2020-09-23 Show GitHub Exploit DB Packet Storm
198659 6.5 MEDIUM
Network 		cisco hosted_collaboration_mediation_fulfillment A vulnerability in the web-based interface of Cisco Hosted Collaboration Mediation Fulfillment (HCM-F) could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) a… CWE-352
 Origin Validation Error 		CVE-2020-3124 2024-11-21 14:30 2020-09-23 Show GitHub Exploit DB Packet Storm
198660 4.7 MEDIUM
Network 		cisco web_security_appliance
content_security_management_appliance 		A vulnerability in the API Framework of Cisco AsyncOS for Cisco Web Security Appliance (WSA) and Cisco Content Security Management Appliance (SMA) could allow an unauthenticated, remote attacker to i… NVD-CWE-Other
CVE-2020-3117 2024-11-21 14:30 2020-09-23 Show GitHub Exploit DB Packet Storm