Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 7, 2026, 2:09 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
226021	7.5	危険	webframe	-	WebFrame におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2009-0514	2012-12-20 19:10	2009-02-10	Show	GitHub Exploit DB Packet Storm

226022	7.5	危険	webframe	-	WebFrame における PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2009-0513	2012-12-20 19:10	2009-02-10	Show	GitHub Exploit DB Packet Storm

226023	10	危険	simpleircbot	-	SimpleIrcBot における脆弱性	CWE-287 不適切な認証	CVE-2009-0492	2012-12-20 19:10	2009-02-9	Show	GitHub Exploit DB Packet Storm

226024	2.1	注意	David Paleino	-	Wicd の DBus configuration file における Wicd デーモンへのメッセージを受信される脆弱性	CWE-16 環境設定	CVE-2009-0489	2012-12-20 19:10	2009-02-9	Show	GitHub Exploit DB Packet Storm

226025	5	警告	Rockwell Automation	-	Rockwell Automation ControlLogix 1756-ENBT/A EtherNet/IP Bridge Module の Web インターフェースにおける "内部の Web ページ情報" などを取得される脆弱性	CWE-200 情報漏えい	CVE-2009-0474	2012-12-20 19:10	2009-02-6	Show	GitHub Exploit DB Packet Storm

226026	4.3	警告	vivvo	-	Vivvo CMS におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-0466	2012-12-20 19:10	2009-02-10	Show	GitHub Exploit DB Packet Storm

226027	9.3	危険	synactis	-	Synactis ALL In-The-Box ActiveX の ALL_IN_THE_BOX.OCX における任意のファイルを作成される脆弱性	CWE-20 不適切な入力確認	CVE-2009-0465	2012-12-20 19:10	2009-02-10	Show	GitHub Exploit DB Packet Storm

226028	7.5	危険	wholehogsoftware	-	Whole Hog Password Protec における認証を回避される脆弱性	CWE-287 不適切な認証	CVE-2009-0461	2012-12-20 19:10	2009-02-10	Show	GitHub Exploit DB Packet Storm

226029	7.5	危険	wholehogsoftware	-	Whole Hog Ware Support における認証を回避される脆弱性	CWE-287 不適切な認証	CVE-2009-0460	2012-12-20 19:10	2009-02-10	Show	GitHub Exploit DB Packet Storm

226030	7.5	危険	wholehogsoftware	-	Whole Hog Password Protect の admin/login_submit.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2009-0459	2012-12-20 19:10	2009-02-10	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 7, 2026, 4:22 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
198341	9.8	CRITICAL Network	qualcomm	apq8009_firmware apq8017_firmware apq8053_firmware apq8096au_firmware apq8098_firmware kamorta_firmware mdm9206_firmware mdm9207c_firmware mdm9607_firmware msm8905_firmware…	Possible buffer overflow while parsing mp4 clip with corrupted sample atoms due to improper validation of index in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IO…	CWE-120 Classic Buffer Overflow	CVE-2020-3688	2024-11-21 14:31	2020-07-30	Show	GitHub Exploit DB Packet Storm

198342	7.5	HIGH Network	cisco	adaptive_security_appliance_software firepower_threat_defense	A vulnerability in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to …	CWE-22 Path Traversal	CVE-2020-3452	2024-11-21 14:31	2020-07-23	Show	GitHub Exploit DB Packet Storm

198343	5.7	MEDIUM Adjacent	duo	duoconnect	The DuoConnect client enables users to establish SSH connections to hosts protected by a DNG instance. When a user initiates an SSH connection to a DNG-protected host for the first time using DuoConn…	CWE-319 Cleartext Transmission of Sensitive Information	CVE-2020-3442	2024-11-21 14:31	2020-07-21	Show	GitHub Exploit DB Packet Storm

198344	7.5	HIGH Network	clamav debian canonical fedoraproject	clamav debian_linux ubuntu_linux fedora	A vulnerability in the EGG archive parsing module in Clam AntiVirus (ClamAV) Software versions 0.102.0 - 0.102.3 could allow an unauthenticated, remote attacker to cause a denial of service condition…	CWE-476 NULL Pointer Dereference	CVE-2020-3481	2024-11-21 14:31	2020-07-21	Show	GitHub Exploit DB Packet Storm

198345	5.4	MEDIUM Network	cisco	sd-wan_firmware	A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system. The vulner…	CWE-89 SQL Injection	CVE-2020-3468	2024-11-21 14:31	2020-07-17	Show	GitHub Exploit DB Packet Storm

198346	4.9	MEDIUM Network	cisco	vision_dynamic_signage_director	A vulnerability in the web-based management interface of Cisco Vision Dynamic Signage Director could allow an authenticated, remote attacker with administrative credentials to conduct SQL injection a…	CWE-89 SQL Injection	CVE-2020-3450	2024-11-21 14:31	2020-07-17	Show	GitHub Exploit DB Packet Storm

198347	6.5	MEDIUM Network	cisco	sd-wan_firmware	A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to read arbitrary files on the underlying filesystem of the device…	-	CVE-2020-3437	2024-11-21 14:31	2020-07-17	Show	GitHub Exploit DB Packet Storm

198348	9.8	CRITICAL Network	geovision	gv-as210_firmware gv-as410_firmware gv-as810_firmware gv-gf1921_firmware gv-as1010_firmware gv-gf1922_firmware	Buffer overflow exists in Geovision Door Access Control device family, an unauthenticated remote attacker can execute arbitrary command.	CWE-120 Classic Buffer Overflow	CVE-2020-3931	2024-11-21 14:31	2020-07-8	Show	GitHub Exploit DB Packet Storm

198349	5.5	MEDIUM Local	adobe	after_effects	Adobe After Effects versions 17.0.1 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure .	CWE-125 Out-of-bounds Read	CVE-2020-3809	2024-11-21 14:31	2020-06-27	Show	GitHub Exploit DB Packet Storm

198350	6.5	MEDIUM Network	adobe	digital_editions	Adobe Digital Editions versions 4.5.11.187212 and below have a file enumeration (host or local network) vulnerability. Successful exploitation could lead to information disclosure.	NVD-CWE-noinfo	CVE-2020-3798	2024-11-21 14:31	2020-06-27	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed