Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 20, 2026, 4 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
227251 6.8 警告 Ubercart - Drupal 用の Ubercart モジュールにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2009-4773 2012-12-20 19:28 2009-11-18 Show GitHub Exploit DB Packet Storm
227252 4.3 警告 Ubercart - Drupal 用の Ubercart モジュールにおける重要な情報を取得される脆弱性 CWE-noinfo
情報不足
CVE-2009-4772 2012-12-20 19:28 2009-11-18 Show GitHub Exploit DB Packet Storm
227253 5 警告 Ubercart - Drupal 用の Ubercart モジュールにおける不特定の "複製操作" を誘発される脆弱性 CWE-20
不適切な入力確認
CVE-2009-4771 2012-12-20 19:28 2009-11-18 Show GitHub Exploit DB Packet Storm
227254 9 危険 Codeorigin - Sysax Multi Server におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2009-4790 2012-12-20 19:28 2010-04-22 Show GitHub Exploit DB Packet Storm
227255 7.2 危険 tukeva - TUKEVA Password Reminder における資格情報を発見される脆弱性 CWE-255
証明書・パスワード管理
CVE-2009-4781 2012-12-20 19:28 2010-04-21 Show GitHub Exploit DB Packet Storm
227256 7.5 危険 robert garrigos - NukeHall における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション
CVE-2009-4779 2012-12-20 19:28 2010-04-21 Show GitHub Exploit DB Packet Storm
227257 4.3 警告 Plohni - Plohni Shoutbox の index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2009-4767 2012-12-20 19:28 2010-04-20 Show GitHub Exploit DB Packet Storm
227258 5 警告 yasirpro - YP Portal MS-Pro Surumu におけるデータベースをダウンロードされる脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2009-4766 2012-12-20 19:28 2010-04-13 Show GitHub Exploit DB Packet Storm
227259 6.8 警告 phpmyvisites - phpMyVisites に使用されている ClickHeat プラグインにおける脆弱性 CWE-noinfo
情報不足
CVE-2009-4763 2012-12-20 19:28 2010-03-30 Show GitHub Exploit DB Packet Storm
227260 5 警告 Winn GuestBook - Winn ASP Guestbook におけるデータベースをダウンロードされる脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2009-4760 2012-12-20 19:28 2010-03-29 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 20, 2026, 4:14 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
202001 7.5 HIGH
Network
cisco unified_communications_manager
unified_contact_center_express
A vulnerability in the Tool for Auto-Registered Phones Support (TAPS) of Cisco Unified Communications Manager (UCM) and Cisco Unified Communications Manager Session Management Edition (SME) could all… CWE-22
Path Traversal
CVE-2020-3177 2024-11-21 14:30 2020-04-16 Show GitHub Exploit DB Packet Storm
202002 7.5 HIGH
Network
cisco iot_field_network_director A vulnerability in the Constrained Application Protocol (CoAP) implementation of Cisco IoT Field Network Director could allow an unauthenticated remote attacker to cause a denial of service (DoS) con… CWE-20
 Improper Input Validation 
CVE-2020-3162 2024-11-21 14:30 2020-04-16 Show GitHub Exploit DB Packet Storm
202003 9.8 CRITICAL
Network
cisco ip_phone_8865_firmware
ip_phone_8851_firmware
ip_phone_7841_firmware
ip_phone_7821_firmware
ip_phone_8811_firmware
ip_phone_8861_firmware
ip_phone_8845_firmware
ip_phone_7861_fir…
A vulnerability in the web server for Cisco IP Phones could allow an unauthenticated, remote attacker to execute code with root privileges or cause a reload of an affected IP phone, resulting in a de… CWE-20
 Improper Input Validation 
CVE-2020-3161 2024-11-21 14:30 2020-04-16 Show GitHub Exploit DB Packet Storm
202004 3.5 LOW
Network
cisco webex_meetings_server vulnerability within the Multimedia Viewer feature of Cisco Webex Meetings could allow an authenticated, remote attacker to bypass security protections. The vulnerability is due to missing security w… CWE-20
 Improper Input Validation 
CVE-2020-3126 2024-11-21 14:30 2020-04-14 Show GitHub Exploit DB Packet Storm
202005 7.8 HIGH
Local
cisco sd-wan_firmware A vulnerability in the CLI of Cisco SD-WAN Solution software could allow an authenticated, local attacker to inject arbitrary commands that are executed with root privileges. The vulnerability is due… CWE-78
OS Command 
CVE-2020-3266 2024-11-21 14:30 2020-03-20 Show GitHub Exploit DB Packet Storm
202006 7.8 HIGH
Local
cisco sd-wan_firmware A vulnerability in Cisco SD-WAN Solution software could allow an authenticated, local attacker to elevate privileges to root on the underlying operating system. The vulnerability is due to insufficie… CWE-269
 Improper Privilege Management
CVE-2020-3265 2024-11-21 14:30 2020-03-20 Show GitHub Exploit DB Packet Storm
202007 7.1 HIGH
Local
cisco sd-wan_firmware A vulnerability in Cisco SD-WAN Solution software could allow an authenticated, local attacker to cause a buffer overflow on an affected device. The vulnerability is due to insufficient input validat… CWE-120
Classic Buffer Overflow
CVE-2020-3264 2024-11-21 14:30 2020-03-20 Show GitHub Exploit DB Packet Storm
202008 5.3 MEDIUM
Network
cisco prime_collaboration_provisioning A vulnerability in the web-based management interface of Cisco Prime Collaboration Provisioning could allow an unauthenticated, remote attacker to obtain sensitive information about an affected devic… CWE-200
Information Exposure
CVE-2020-3193 2024-11-21 14:30 2020-03-5 Show GitHub Exploit DB Packet Storm
202009 6.1 MEDIUM
Network
cisco prime_collaboration_provisioning A vulnerability in the web-based management interface of Cisco Prime Collaboration Provisioning could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against … CWE-79
Cross-site Scripting
CVE-2020-3192 2024-11-21 14:30 2020-03-5 Show GitHub Exploit DB Packet Storm
202010 5.8 MEDIUM
Network
cisco ios_xr A vulnerability in the IPsec packet processor of Cisco IOS XR Software could allow an unauthenticated remote attacker to cause a denial of service (DoS) condition for IPsec sessions to an affected de… CWE-400
 Uncontrolled Resource Consumption
CVE-2020-3190 2024-11-21 14:30 2020-03-5 Show GitHub Exploit DB Packet Storm