Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 13, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
226521 7.5 危険 phpscriptsnow - PHP Scripts Now World's Tallest Buildings の bios.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2009-2885 2012-12-20 19:10 2009-08-20 Show GitHub Exploit DB Packet Storm
226522 4.3 警告 phpscriptsnow - PHP Scripts Now World's Tallest Buildings の bios.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2009-2884 2012-12-20 19:10 2009-08-20 Show GitHub Exploit DB Packet Storm
226523 3.5 注意 サン・マイクロシステムズ - Sun VDI における VDI 設定データを平文で読まれる脆弱性 CWE-200
情報漏えい
CVE-2009-2856 2012-12-20 19:10 2009-08-14 Show GitHub Exploit DB Packet Storm
226524 6.4 警告 WordPress.org - Wordpress における許可されていない編集などをされる脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2009-2854 2012-12-20 19:10 2009-08-3 Show GitHub Exploit DB Packet Storm
226525 10 危険 WordPress.org - Wordpress における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2009-2853 2012-12-20 19:10 2009-08-3 Show GitHub Exploit DB Packet Storm
226526 6.8 警告 ryan.mcgeary - Wordpress 用の WP-Syntax プラグインにおける任意の PHP コードを実行される脆弱性 CWE-20
不適切な入力確認
CVE-2009-2852 2012-12-20 19:10 2009-08-18 Show GitHub Exploit DB Packet Storm
226527 4.3 警告 WordPress.org - WordPress の管理者インターフェースにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2009-2851 2012-12-20 19:10 2009-07-20 Show GitHub Exploit DB Packet Storm
226528 7.5 危険 webdynamite - WebDynamite ProjectButler の pda_projects.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション
CVE-2009-2791 2012-12-20 19:10 2009-08-17 Show GitHub Exploit DB Packet Storm
226529 7.5 危険 softbiz - SoftBiz Dating Script の cat_products.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2009-2790 2012-12-20 19:10 2009-08-17 Show GitHub Exploit DB Packet Storm
226530 6.8 警告 reputation - PunBB 用の Reputation プラグインにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2009-2787 2012-12-20 19:10 2009-08-17 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 14, 2026, 4 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
200641 5.9 MEDIUM
Network
cisco cloud_email_security
email_security_appliance
A vulnerability in the email message scanning feature of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to cause a temporary denial of… CWE-400
 Uncontrolled Resource Consumption
CVE-2020-3132 2024-11-21 14:30 2020-02-20 Show GitHub Exploit DB Packet Storm
200642 8.8 HIGH
Network
cisco data_center_network_manager A vulnerability in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack… CWE-352
 Origin Validation Error
CVE-2020-3114 2024-11-21 14:30 2020-02-20 Show GitHub Exploit DB Packet Storm
200643 5.4 MEDIUM
Network
cisco data_center_network_manager A vulnerability in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against … CWE-79
Cross-site Scripting
CVE-2020-3113 2024-11-21 14:30 2020-02-20 Show GitHub Exploit DB Packet Storm
200644 8.8 HIGH
Network
cisco data_center_network_manager A vulnerability in the REST API endpoint of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote attacker to elevate privileges on the application. The vulnerability is due t… CWE-269
 Improper Privilege Management
CVE-2020-3112 2024-11-21 14:30 2020-02-20 Show GitHub Exploit DB Packet Storm
200645 4.8 MEDIUM
Network
cisco identity_services_engine A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) Software could allow an authenticated, remote attacker to perform a stored cross-site scripting (XSS) att… CWE-79
Cross-site Scripting
CVE-2020-3149 2024-11-21 14:30 2020-02-6 Show GitHub Exploit DB Packet Storm
200646 7.5 HIGH
Network
clamav
canonical
clamav
ubuntu_linux
A vulnerability in the Data-Loss-Prevention (DLP) module in Clam AntiVirus (ClamAV) Software versions 0.102.1 and 0.102.0 could allow an unauthenticated, remote attacker to cause a denial of service … CWE-125
Out-of-bounds Read
CVE-2020-3123 2024-11-21 14:30 2020-02-6 Show GitHub Exploit DB Packet Storm
200647 6.5 MEDIUM
Adjacent
cisco firepower_extensible_operating_system
fxos
ios_xr
nx-os
ucs_manager
A vulnerability in the Cisco Discovery Protocol implementation for Cisco FXOS Software, Cisco IOS XR Software, and Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to cause a re… CWE-190
 Integer Overflow or Wraparound
CVE-2020-3120 2024-11-21 14:30 2020-02-6 Show GitHub Exploit DB Packet Storm
200648 8.8 HIGH
Adjacent
cisco nx-os
ucs_manager
A vulnerability in the Cisco Discovery Protocol implementation for Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to execute arbitrary code or cause a reload on an affected de… CWE-787
 Out-of-bounds Write
CVE-2020-3119 2024-11-21 14:30 2020-02-6 Show GitHub Exploit DB Packet Storm
200649 8.8 HIGH
Adjacent
cisco ios_xr A vulnerability in the Cisco Discovery Protocol implementation for Cisco IOS XR Software could allow an unauthenticated, adjacent attacker to execute arbitrary code or cause a reload on an affected d… CWE-787
 Out-of-bounds Write
CVE-2020-3118 2024-11-21 14:30 2020-02-6 Show GitHub Exploit DB Packet Storm
200650 8.8 HIGH
Adjacent
cisco ip_conference_phone_7832_firmware
ip_conference_phone_7832_with_multiplatform_firmware
ip_conference_phone_8832_firmware
ip_conference_phone_8832_with_multiplatform_firmware
ip_phone_6821…
A vulnerability in the Cisco Discovery Protocol implementation for the Cisco IP Phone could allow an unauthenticated, adjacent attacker to remotely execute code with root privileges or cause a reload… CWE-20
 Improper Input Validation 
CVE-2020-3111 2024-11-21 14:30 2020-02-6 Show GitHub Exploit DB Packet Storm