Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 20, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
226791	7.8	危険	シスコシステムズ	-	Cisco Prime Central for Hosted Collaboration Solution Assurance の Web フレームワークにおけるユーザ名およびパスワードを取得される脆弱性	CWE-287 不適切な認証	CVE-2013-3473	2013-09-25 11:49	2013-09-18	Show	GitHub Exploit DB Packet Storm

226792	6.8	警告	シスコシステムズ	-	Cisco Unified Computing System の Cisco Management Controller における権限を取得される脆弱性	CWE-20 不適切な入力確認	CVE-2012-4082	2013-09-25 11:45	2013-09-19	Show	GitHub Exploit DB Packet Storm

226793	4.6	警告	シスコシステムズ	-	Cisco Unified Computing System の Cisco Management Controller におけるサービス運用妨害 (DoS) の脆弱性	CWE-119 バッファエラー	CVE-2012-4081	2013-09-25 11:42	2013-09-18	Show	GitHub Exploit DB Packet Storm

226794	4.3	警告	シスコシステムズ	-	Cisco MediaSense の oraservice ページにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-5501	2013-09-25 11:39	2013-09-20	Show	GitHub Exploit DB Packet Storm

226795	4.3	警告	シスコシステムズ	-	Cisco MediaSense の oraadmin サービスページにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-5500	2013-09-25 11:37	2013-09-20	Show	GitHub Exploit DB Packet Storm

226796	6.8	警告	シスコシステムズ	-	Mac OS X 上で稼働する Cisco AnyConnect Secure Mobility Client における権限を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2013-1130	2013-09-25 11:33	2013-09-19	Show	GitHub Exploit DB Packet Storm

226797	4.6	警告	シスコシステムズ	-	Cisco Unified Computing System Manager コンポーネントにおけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2012-4093	2013-09-25 11:31	2013-09-18	Show	GitHub Exploit DB Packet Storm

226798	4	警告	シスコシステムズ	-	Cisco Unified Computing System の管理 Web インターフェイスにおけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2012-4083	2013-09-25 11:29	2013-09-18	Show	GitHub Exploit DB Packet Storm

226799	5.8	警告	シスコシステムズ	-	Cisco Unified Computing System の Serial over LAN サブシステムにおける重要な情報を取得される脆弱性	CWE-255 証明書・パスワード管理	CVE-2012-4074	2013-09-25 11:25	2013-09-18	Show	GitHub Exploit DB Packet Storm

226800	5.8	警告	シスコシステムズ	-	Cisco Unified Computing System のクライアントの KVM サブシステムにおけるサーバになりすまされる脆弱性	CWE-20 不適切な入力確認	CVE-2012-4073	2013-09-25 11:22	2013-09-18	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 20, 2026, 4:01 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
220811	9.8	CRITICAL Network	psd-tools_project	psd-tools	An issue was discovered in psd-tools before 1.9.4. The Cython implementation of RLE decoding did not check for malicious data.	CWE-754 Improper Check for Unusual or Exceptional Conditions	CVE-2020-10571	2024-11-21 13:55	2020-03-15	Show	GitHub Exploit DB Packet Storm

220812	8.8	HIGH Network	onthegosystems	sitepress-multilingual-cms	The sitepress-multilingual-cms (WPML) plugin before 4.3.7-b.2 for WordPress has CSRF due to a loose comparison. This leads to remote code execution in includes/class-wp-installer.php via a series of …	CWE-352 Origin Validation Error	CVE-2020-10568	2024-11-21 13:55	2020-03-14	Show	GitHub Exploit DB Packet Storm

220813	9.8	CRITICAL Network	tecrail	responsive_filemanager	An issue was discovered in Responsive Filemanager through 9.14.0. In the ajax_calls.php file in the save_img action in the name parameter, there is no validation of what kind of extension is sent. Th…	CWE-20 Improper Input Validation	CVE-2020-10567	2024-11-21 13:55	2020-03-14	Show	GitHub Exploit DB Packet Storm

220814	7.8	HIGH Local	freebsd	freebsd	grub2-bhyve, as used in FreeBSD bhyve before revision 525916 2020-02-12, mishandles font loading by a guest through a grub2.cfg file, leading to a buffer overflow.	CWE-120 Classic Buffer Overflow	CVE-2020-10566	2024-11-21 13:55	2020-03-14	Show	GitHub Exploit DB Packet Storm

220815	7.8	HIGH Local	freebsd	freebsd	grub2-bhyve, as used in FreeBSD bhyve before revision 525916 2020-02-12, does not validate the address provided as part of a memrw command (read_* or write_*) by a guest through a grub2.cfg file. Thi…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2020-10565	2024-11-21 13:55	2020-03-14	Show	GitHub Exploit DB Packet Storm

220816	9.8	CRITICAL Network	iptanus	wordpress_file_upload	An issue was discovered in the File Upload plugin before 4.13.0 for WordPress. A directory traversal can lead to remote code execution by uploading a crafted txt file into the lib directory, because …	CWE-22 Path Traversal	CVE-2020-10564	2024-11-21 13:55	2020-03-14	Show	GitHub Exploit DB Packet Storm

220817	9.8	CRITICAL Network	devome	grr	An issue was discovered in DEVOME GRR before 3.4.1c. frmcontactlist.php mishandles a SQL query.	CWE-89 SQL Injection	CVE-2020-10563	2024-11-21 13:55	2020-03-14	Show	GitHub Exploit DB Packet Storm

220818	7.2	HIGH Network	devome	grr	An issue was discovered in DEVOME GRR before 3.4.1c. admin_edit_room.php mishandles file uploads.	CWE-434 Unrestricted Upload of File with Dangerous Type	CVE-2020-10562	2024-11-21 13:55	2020-03-14	Show	GitHub Exploit DB Packet Storm

220819	6.1	MEDIUM Network	primetek	primefaces	An XSS issue was discovered in tooltip/tooltip.js in PrimeTek PrimeFaces 7.0.11. In a web application using PrimeFaces, an attacker can provide JavaScript code in an input field whose data is later u…	CWE-79 Cross-site Scripting	CVE-2020-10544	2024-11-21 13:55	2020-03-14	Show	GitHub Exploit DB Packet Storm

220820	9.8	CRITICAL Network	zohocorp	manageengine_opmanager	Zoho ManageEngine OpManager before 12.4.179 allows remote code execution via a specially crafted Mail Server Settings v1 API request. This was fixed in 12.5.108.	NVD-CWE-noinfo	CVE-2020-10541	2024-11-21 13:55	2020-03-13	Show	GitHub Exploit DB Packet Storm