Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 20, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
227181 7.5 危険 q2solutions - Q2 Solutions ConnX の frmLoginPwdReminderPopup.aspx における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-4947 2012-12-20 19:28 2010-07-22 Show GitHub Exploit DB Packet Storm
227182 6.8 警告 thetricky - Joomla! 用の Messaging コンポーネントにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2009-4946 2012-12-20 19:28 2010-07-22 Show GitHub Exploit DB Packet Storm
227183 7.5 危険 zeuscart - Zeus Cart の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-4940 2012-12-20 19:28 2010-07-22 Show GitHub Exploit DB Packet Storm
227184 7.5 危険 warphd - Joomla! 用の JVideo! コンポーネントにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-4938 2012-12-20 19:28 2010-07-22 Show GitHub Exploit DB Packet Storm
227185 4.3 警告 spirate - SPirate におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4937 2012-12-20 19:28 2010-07-22 Show GitHub Exploit DB Packet Storm
227186 7.5 危険 spirate - SPirate における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-4936 2012-12-20 19:28 2010-07-22 Show GitHub Exploit DB Packet Storm
227187 7.5 危険 winterwebs - EZ Webitor の login.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-4933 2012-12-20 19:28 2010-07-12 Show GitHub Exploit DB Packet Storm
227188 4.3 警告 sungard - SunGard Banner Student System の twbkwbis.P_SecurityQuestion ページにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4930 2012-12-20 19:28 2010-07-12 Show GitHub Exploit DB Packet Storm
227189 7.5 危険 sweetphp - TotalCalendar の admin/manage_users.php における任意のパスワードを変更される脆弱性 CWE-287
不適切な認証 		CVE-2009-4929 2012-12-20 19:28 2010-07-12 Show GitHub Exploit DB Packet Storm
227190 7.5 危険 sweetphp - TotalCalendar の config.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2009-4928 2012-12-20 19:28 2010-07-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 21, 2026, 4:10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
201981 8.8 HIGH
Network 		cisco unified_communications_manager A vulnerability in the web-based management interface of Cisco Unified Communications Manager (UCM) could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) atta… CWE-352
 Origin Validation Error 		CVE-2020-3135 2024-11-21 14:30 2020-09-23 Show GitHub Exploit DB Packet Storm
201982 7.5 HIGH
Network 		cisco email_security_appliance A vulnerability in the email message scanning of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to bypass configured filters on the de… CWE-20
 Improper Input Validation  		CVE-2020-3133 2024-11-21 14:30 2020-09-23 Show GitHub Exploit DB Packet Storm
201983 6.5 MEDIUM
Network 		cisco unity_connection A vulnerability in the web management interface of Cisco Unity Connection could allow an authenticated remote attacker to overwrite files on the underlying filesystem. The vulnerability is due to ins… CWE-20
 Improper Input Validation  		CVE-2020-3130 2024-11-21 14:30 2020-09-23 Show GitHub Exploit DB Packet Storm
201984 6.5 MEDIUM
Network 		cisco hosted_collaboration_mediation_fulfillment A vulnerability in the web-based interface of Cisco Hosted Collaboration Mediation Fulfillment (HCM-F) could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) a… CWE-352
 Origin Validation Error 		CVE-2020-3124 2024-11-21 14:30 2020-09-23 Show GitHub Exploit DB Packet Storm
201985 4.7 MEDIUM
Network 		cisco web_security_appliance
content_security_management_appliance 		A vulnerability in the API Framework of Cisco AsyncOS for Cisco Web Security Appliance (WSA) and Cisco Content Security Management Appliance (SMA) could allow an unauthenticated, remote attacker to i… NVD-CWE-Other
CVE-2020-3117 2024-11-21 14:30 2020-09-23 Show GitHub Exploit DB Packet Storm
201986 5.5 MEDIUM
Local 		cisco webex_meetings_server
webex_meetings_online 		A vulnerability in the way Cisco Webex applications process Universal Communications Format (UCF) files could allow an attacker to cause a denial of service (DoS) condition. The vulnerability is due … CWE-20
 Improper Input Validation  		CVE-2020-3116 2024-11-21 14:30 2020-09-23 Show GitHub Exploit DB Packet Storm
201987 6.5 MEDIUM
Network 		cisco enterprise_network_function_virtualization_infrastructure A vulnerability in the directory permissions of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, remote attacker to perform a directory traversal attack on a limited… CWE-22
Path Traversal 		CVE-2020-3365 2024-11-21 14:30 2020-09-4 Show GitHub Exploit DB Packet Storm
201988 8.8 HIGH
Adjacent 		cisco nx-os A vulnerability in the Data Management Engine (DME) of Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to execute arbitrary code with administrative privileges or cause a denia… CWE-787
 Out-of-bounds Write 		CVE-2020-3415 2024-11-21 14:30 2020-08-28 Show GitHub Exploit DB Packet Storm
201989 8.6 HIGH
Network 		cisco nx-os A vulnerability in the Border Gateway Protocol (BGP) Multicast VPN (MVPN) implementation of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a BGP session to repeatedly r… CWE-20
 Improper Input Validation  		CVE-2020-3398 2024-11-21 14:30 2020-08-28 Show GitHub Exploit DB Packet Storm
201990 8.6 HIGH
Network 		cisco nx-os A vulnerability in the Border Gateway Protocol (BGP) Multicast VPN (MVPN) implementation of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause an affected device to unexpec… CWE-20
 Improper Input Validation  		CVE-2020-3397 2024-11-21 14:30 2020-08-28 Show GitHub Exploit DB Packet Storm