Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 5, 2026, noon

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
226511	10	危険	project-observer	-	Observer における任意のコマンドを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2008-4318	2012-12-20 18:52	2008-09-29	Show	GitHub Exploit DB Packet Storm

226512	9	危険	phpCollab	-	phpCollab の installation/setup.php における include/settings.php に任意の PHP コードを挿入される脆弱性	CWE-94 コード・インジェクション	CVE-2008-4305	2012-12-20 18:52	2008-12-23	Show	GitHub Exploit DB Packet Storm

226513	10	危険	phpCollab	-	phpCollab の general/login.php における任意のコマンドを実行される脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2008-4304	2012-12-20 18:52	2008-12-23	Show	GitHub Exploit DB Packet Storm

226514	6.8	警告	phpCollab	-	phpCollab における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-4303	2012-12-20 18:52	2008-12-23	Show	GitHub Exploit DB Packet Storm

226515	6.5	警告	rianxosencabos cms	-	Rianxosencabos CMS の Admin Control Panel におけるユーザの権限を変更される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2008-4245	2012-12-20 18:52	2008-09-25	Show	GitHub Exploit DB Packet Storm

226516	7.5	危険	webcms	-	webCMS Portal Edition の index.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-4185	2012-12-20 18:52	2008-09-23	Show	GitHub Exploit DB Packet Storm

226517	4.3	警告	webcms	-	webCMS Portal Edition の index.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-4184	2012-12-20 18:52	2008-09-23	Show	GitHub Exploit DB Packet Storm

226518	7.5	危険	PreProject.com	-	Pre Real Estate Listings の search.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-4177	2012-12-20 18:52	2008-09-23	Show	GitHub Exploit DB Packet Storm

226519	7.5	危険	proarcadescript	-	ProArcadeScript における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-4173	2012-12-20 18:52	2008-09-22	Show	GitHub Exploit DB Packet Storm

226520	7.5	危険	rfaah	-	Cars & Vehicle の page.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-4172	2012-12-20 18:52	2008-09-22	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 5, 2026, 4:51 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
197771	6.5	MEDIUM Adjacent	cisco	8000p_ip_camera_firmware 8020_ip_camera_firmware 8030_ip_camera_firmware 8070_ip_camera_firmware 8400_ip_camera_firmware 8620_ip_camera_firmware 8630_ip_camera_firmware 8930_spee…	A vulnerability in the Cisco Discovery Protocol of Cisco Video Surveillance 8000 Series IP Cameras could allow an unauthenticated, adjacent attacker to cause a memory leak, which could lead to a deni…	CWE-401 Missing Release of Memory after Effective Lifetime	CVE-2020-3505	2024-11-21 14:31	2020-08-27	Show	GitHub Exploit DB Packet Storm

197772	5.3	MEDIUM Network	cisco	sg200-50_firmware sg200-50p_firmware sg200-50fp_firmware sg200-26_firmware sg200-26p_firmware sg200-26fp_firmware sg200-18_firmware sg200-10fp_firmware sg200-08_firmware sg…	A vulnerability in the IPv6 packet processing engine of Cisco Small Business Smart and Managed Switches could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on…	CWE-20 Improper Input Validation	CVE-2020-3496	2024-11-21 14:31	2020-08-27	Show	GitHub Exploit DB Packet Storm

197773	4.8	MEDIUM Network	cisco	vision_dynamic_signage_director	A vulnerability in the web-based management interface of Cisco Vision Dynamic Signage Director could allow an authenticated, remote attacker with administrative privileges to conduct a cross-site scr…	CWE-79 Cross-site Scripting	CVE-2020-3491	2024-11-21 14:31	2020-08-27	Show	GitHub Exploit DB Packet Storm

197774	4.9	MEDIUM Network	cisco	vision_dynamic_signage_director	A vulnerability in the web-based management interface of Cisco Vision Dynamic Signage Director could allow an authenticated, remote attacker with administrative privileges to conduct directory traver…	CWE-22 Path Traversal	CVE-2020-3490	2024-11-21 14:31	2020-08-27	Show	GitHub Exploit DB Packet Storm

197775	6.3	MEDIUM Network	cisco	vision_dynamic_signage_director	A vulnerability in the role-based access control (RBAC) functionality of the web management software of Cisco Vision Dynamic Signage Director could allow an authenticated, remote attacker to access r…	CWE-276 Incorrect Default Permissions	CVE-2020-3485	2024-11-21 14:31	2020-08-27	Show	GitHub Exploit DB Packet Storm

197776	5.3	MEDIUM Network	cisco	vision_dynamic_signage_director	A vulnerability in the web-based management interface of Cisco Vision Dynamic Signage Director could allow an unauthenticated, remote attacker to view potentially sensitive information on an affected…	CWE-276 Incorrect Default Permissions	CVE-2020-3484	2024-11-21 14:31	2020-08-27	Show	GitHub Exploit DB Packet Storm

197777	6.1	MEDIUM Network	cisco	dna_center	Multiple vulnerabilities in the web-based management interface of Cisco DNA Center software could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a us…	CWE-79 Cross-site Scripting	CVE-2020-3466	2024-11-21 14:31	2020-08-27	Show	GitHub Exploit DB Packet Storm

197778	9.8	CRITICAL Network	cisco	encs_5406-w_firmware encs_5408-w_firmware encs_5412-w_firmware csp_5228-w_firmware csp_5436-w_firmware	A vulnerability in Cisco Virtual Wide Area Application Services (vWAAS) with Cisco Enterprise NFV Infrastructure Software (NFVIS)-bundled images for Cisco ENCS 5400-W Series and CSP 5000-W Series app…	CWE-798 Use of Hard-coded Credentials	CVE-2020-3446	2024-11-21 14:31	2020-08-27	Show	GitHub Exploit DB Packet Storm

197779	8.8	HIGH Network	cisco	smart_software_manager_on-prem	A vulnerability in Cisco Smart Software Manager On-Prem (SSM On-Prem) could allow an authenticated, remote attacker to elevate privileges and execute commands with higher privileges. The vulnerabilit…	CWE-862 Missing Authorization	CVE-2020-3443	2024-11-21 14:31	2020-08-27	Show	GitHub Exploit DB Packet Storm

197780	6.5	MEDIUM Network	cisco	webex_meetings	A vulnerability in Cisco Webex Meetings Desktop App for Windows could allow an unauthenticated, remote attacker to overwrite arbitrary files on an end-user system. The vulnerability is due to imprope…	CWE-22 Path Traversal	CVE-2020-3440	2024-11-21 14:31	2020-08-27	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed