Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 12, 2026, 2:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
225991 7.5 危険 Zenphoto - Zenphoto の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-4566 2012-12-20 19:28 2010-01-4 Show GitHub Exploit DB Packet Storm
225992 6.8 警告 Zenphoto - Zenphoto の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-4564 2012-12-20 19:28 2010-01-4 Show GitHub Exploit DB Packet Storm
225993 4.3 警告 Zenphoto - Zenphoto の zp-core/admin-options.php におけるクロスサイトリクエストフォージェリの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4563 2012-12-20 19:28 2010-01-4 Show GitHub Exploit DB Packet Storm
225994 4.3 警告 Zenphoto - Zenphoto の zp-core/admin.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4562 2012-12-20 19:28 2010-01-4 Show GitHub Exploit DB Packet Storm
225995 6.8 警告 worms-league - WebLeague の Admin/index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-4561 2012-12-20 19:28 2010-01-4 Show GitHub Exploit DB Packet Storm
225996 7.5 危険 worms-league - WebLeague の profile.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-4560 2012-12-20 19:28 2010-01-4 Show GitHub Exploit DB Packet Storm
225997 7.2 危険 クイックヒール・テクノロジーズ・ジャパン株式会社 - Quick Heal AntiVirus Plus 2009 などにおける権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2009-4556 2012-12-20 19:28 2010-01-4 Show GitHub Exploit DB Packet Storm
225998 5 警告 rjvmedia - iRehearse におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2009-4553 2012-12-20 19:28 2010-01-4 Show GitHub Exploit DB Packet Storm
225999 7.5 危険 Secure Ideas - BASE の base_local_rules.php における任意のフォーカルファイルをインクルードされる脆弱性 CWE-noinfo
情報不足 		CVE-2009-4592 2012-12-20 19:28 2009-10-4 Show GitHub Exploit DB Packet Storm
226000 7.5 危険 Secure Ideas - BASE における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-4591 2012-12-20 19:28 2009-10-4 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 12, 2026, 5:06 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
199931 5.5 MEDIUM
Local 		cisco application_services_engine
application_policy_infrastructure_controller 		A vulnerability in the key store of Cisco Application Services Engine Software could allow an authenticated, local attacker to read sensitive information of other users on an affected device. The vul… CWE-863
 Incorrect Authorization 		CVE-2020-3335 2024-11-21 14:30 2020-06-4 Show GitHub Exploit DB Packet Storm
199932 5.3 MEDIUM
Network 		cisco application_services_engine
application_policy_infrastructure_controller 		A vulnerability in the API of Cisco Application Services Engine Software could allow an unauthenticated, remote attacker to update event policies on an affected device. The vulnerability is due to in… CWE-306
Missing Authentication for Critical Function 		CVE-2020-3333 2024-11-21 14:30 2020-06-4 Show GitHub Exploit DB Packet Storm
199933 8.8 HIGH
Network 		cisco digital_network_architecture_center A vulnerability in the audit logging component of Cisco Digital Network Architecture (DNA) Center could allow an authenticated, remote attacker to view sensitive information in clear text. The vulner… CWE-532
 Inclusion of Sensitive Information in Log Files 		CVE-2020-3281 2024-11-21 14:30 2020-06-4 Show GitHub Exploit DB Packet Storm
199934 7.1 HIGH
Network 		cisco unified_contact_center_express A vulnerability in the API subsystem of Cisco Unified Contact Center Express (Unified CCX) could allow an authenticated, remote attacker to change the availability state of any agent. The vulnerabili… CWE-552
 Files or Directories Accessible to External Parties 		CVE-2020-3267 2024-11-21 14:30 2020-06-4 Show GitHub Exploit DB Packet Storm
199935 8.1 HIGH
Adjacent 		cisco ios Multiple vulnerabilities in the Cisco IOx application environment of Cisco 809 and 829 Industrial Integrated Services Routers (Industrial ISRs) and Cisco 1000 Series Connected Grid Routers (CGR1000) … CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2020-3257 2024-11-21 14:30 2020-06-4 Show GitHub Exploit DB Packet Storm
199936 8.1 HIGH
Network 		cisco iox A vulnerability in the Cisco Application Framework component of the Cisco IOx application environment could allow an authenticated, remote attacker to write or modify arbitrary files in the virtual i… CWE-20
 Improper Input Validation  		CVE-2020-3238 2024-11-21 14:30 2020-06-4 Show GitHub Exploit DB Packet Storm
199937 6.3 MEDIUM
Local 		cisco iox A vulnerability in the Cisco Application Framework component of the Cisco IOx application environment could allow an authenticated, local attacker to overwrite arbitrary files in the virtual instance… CWE-59
Link Following 		CVE-2020-3237 2024-11-21 14:30 2020-06-4 Show GitHub Exploit DB Packet Storm
199938 6.7 MEDIUM
Local 		cisco ios_xe A vulnerability in the Virtual Services Container of Cisco IOS XE Software could allow an authenticated, local attacker to gain root-level privileges on an affected device. The vulnerability is due t… CWE-20
 Improper Input Validation  		CVE-2020-3215 2024-11-21 14:30 2020-06-4 Show GitHub Exploit DB Packet Storm
199939 6.7 MEDIUM
Local 		cisco ios_xe A vulnerability in Cisco IOS XE Software could allow an authenticated, local attacker to escalate their privileges to a user with root-level privileges. The vulnerability is due to insufficient valid… CWE-20
 Improper Input Validation  		CVE-2020-3214 2024-11-21 14:30 2020-06-4 Show GitHub Exploit DB Packet Storm
199940 7.7 HIGH
Network 		cisco
oracle 		ios
ios_xe
goldengate_management_pack 		A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS Software and Cisco IOS XE Software on Catalyst 4500 Series Switches could allow an authenticated, remote attack… CWE-20
 Improper Input Validation  		CVE-2020-3235 2024-11-21 14:30 2020-06-4 Show GitHub Exploit DB Packet Storm