Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 19, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
227071 7.2 危険 south river technologies - South River Technologies WebDrive におけるサービスを停止される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2009-4606 2012-12-20 19:28 2010-01-13 Show GitHub Exploit DB Packet Storm
227072 5 警告 The phpMyAdmin Project - phpMyAdmin の scripts/setup.php におけるクロスサイトリクエストフォージェリ (CSRF) 攻撃を実行される脆弱性 CWE-DesignError
CVE-2009-4605 2012-12-20 19:28 2010-01-15 Show GitHub Exploit DB Packet Storm
227073 5 警告 SAP - SAP Kernel の sapstartsrv.exe におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2009-4603 2012-12-20 19:28 2010-01-12 Show GitHub Exploit DB Packet Storm
227074 4.3 警告 zeeways - Zeeways ZeeJobsite の basic_search_result.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4601 2012-12-20 19:28 2010-01-12 Show GitHub Exploit DB Packet Storm
227075 7.5 危険 phpwares - PHP Inventory の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-4597 2012-12-20 19:28 2010-01-12 Show GitHub Exploit DB Packet Storm
227076 4.3 警告 phpwares - PHP Inventory の index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4596 2012-12-20 19:28 2010-01-12 Show GitHub Exploit DB Packet Storm
227077 6 警告 phpwares - PHP Inventory の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-4595 2012-12-20 19:28 2010-01-12 Show GitHub Exploit DB Packet Storm
227078 4.3 警告 wowd - Wowd クライアントの index.html におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4586 2012-12-20 19:28 2010-01-7 Show GitHub Exploit DB Packet Storm
227079 7.5 危険 XOOPS - XOOPS 用の Dictionary モジュールにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-4582 2012-12-20 19:28 2010-01-6 Show GitHub Exploit DB Packet Storm
227080 6.8 警告 roseonlinecms - RoseOnlineCMS の modules/admincp.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2009-4581 2012-12-20 19:28 2010-01-6 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 20, 2026, 4:14 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
201791 7.2 HIGH
Network 		cisco ex60_firmware
ex90_firmware
sx10_firmware
sx20_firmware
sx80_firmware
telepresence_codec_c40_firmware
telepresence_codec_c60_firmware
telepresence_codec_c90_firmware
teleprese… 		A vulnerability in the video endpoint API (xAPI) of Cisco TelePresence Collaboration Endpoint (CE) Software, Cisco TelePresence Codec (TC) Software, and Cisco RoomOS Software could allow an authentic… CWE-22
Path Traversal 		CVE-2020-3143 2024-11-21 14:30 2020-09-23 Show GitHub Exploit DB Packet Storm
201792 6.1 MEDIUM
Network 		cisco email_security_appliance A vulnerability in the web-based management interface of Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a … CWE-79
Cross-site Scripting 		CVE-2020-3137 2024-11-21 14:30 2020-09-23 Show GitHub Exploit DB Packet Storm
201793 8.8 HIGH
Network 		cisco unified_communications_manager A vulnerability in the web-based management interface of Cisco Unified Communications Manager (UCM) could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) atta… CWE-352
 Origin Validation Error 		CVE-2020-3135 2024-11-21 14:30 2020-09-23 Show GitHub Exploit DB Packet Storm
201794 7.5 HIGH
Network 		cisco email_security_appliance A vulnerability in the email message scanning of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to bypass configured filters on the de… CWE-20
 Improper Input Validation  		CVE-2020-3133 2024-11-21 14:30 2020-09-23 Show GitHub Exploit DB Packet Storm
201795 6.5 MEDIUM
Network 		cisco unity_connection A vulnerability in the web management interface of Cisco Unity Connection could allow an authenticated remote attacker to overwrite files on the underlying filesystem. The vulnerability is due to ins… CWE-20
 Improper Input Validation  		CVE-2020-3130 2024-11-21 14:30 2020-09-23 Show GitHub Exploit DB Packet Storm
201796 6.5 MEDIUM
Network 		cisco hosted_collaboration_mediation_fulfillment A vulnerability in the web-based interface of Cisco Hosted Collaboration Mediation Fulfillment (HCM-F) could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) a… CWE-352
 Origin Validation Error 		CVE-2020-3124 2024-11-21 14:30 2020-09-23 Show GitHub Exploit DB Packet Storm
201797 4.7 MEDIUM
Network 		cisco web_security_appliance
content_security_management_appliance 		A vulnerability in the API Framework of Cisco AsyncOS for Cisco Web Security Appliance (WSA) and Cisco Content Security Management Appliance (SMA) could allow an unauthenticated, remote attacker to i… NVD-CWE-Other
CVE-2020-3117 2024-11-21 14:30 2020-09-23 Show GitHub Exploit DB Packet Storm
201798 5.5 MEDIUM
Local 		cisco webex_meetings_server
webex_meetings_online 		A vulnerability in the way Cisco Webex applications process Universal Communications Format (UCF) files could allow an attacker to cause a denial of service (DoS) condition. The vulnerability is due … CWE-20
 Improper Input Validation  		CVE-2020-3116 2024-11-21 14:30 2020-09-23 Show GitHub Exploit DB Packet Storm
201799 6.5 MEDIUM
Network 		cisco enterprise_network_function_virtualization_infrastructure A vulnerability in the directory permissions of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, remote attacker to perform a directory traversal attack on a limited… CWE-22
Path Traversal 		CVE-2020-3365 2024-11-21 14:30 2020-09-4 Show GitHub Exploit DB Packet Storm
201800 8.8 HIGH
Adjacent 		cisco nx-os A vulnerability in the Data Management Engine (DME) of Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to execute arbitrary code with administrative privileges or cause a denia… CWE-787
 Out-of-bounds Write 		CVE-2020-3415 2024-11-21 14:30 2020-08-28 Show GitHub Exploit DB Packet Storm