Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 19, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
227261	6.8	警告	sjoerd arendsen	-	Drupal 用モジュールの Simplenews Statistics におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2009-3785	2012-12-20 19:28	2009-10-26	Show	GitHub Exploit DB Packet Storm

227262	6.8	警告	sjoerd arendsen	-	Drupal 用モジュールの Simplenews Statistics におけるオープンリダイレクトの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2009-3784	2012-12-20 19:28	2009-10-26	Show	GitHub Exploit DB Packet Storm

227263	4.3	警告	sjoerd arendsen	-	Drupal 用モジュールの Simplenews Statistics におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-3783	2012-12-20 19:28	2009-10-26	Show	GitHub Exploit DB Packet Storm

227264	7.5	危険	quicksketch	-	Drupal 用の FileField モジュールにおける許可されていないファイルにアクセスされる脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2009-3781	2012-12-20 19:28	2009-10-21	Show	GitHub Exploit DB Packet Storm

227265	4.3	警告	stefan auditor	-	Drupal 用の vCard モジュールにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-3779	2012-12-20 19:28	2009-10-21	Show	GitHub Exploit DB Packet Storm

227266	7.5	危険	santostefano giovanni	-	ToyLog の read.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2009-3750	2012-12-20 19:28	2009-10-22	Show	GitHub Exploit DB Packet Storm

227267	5	警告	ウェブセンス	-	Websense Personal Email Manager および Email Security の Web Administrator サービスにおけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2009-3749	2012-12-20 19:28	2009-10-22	Show	GitHub Exploit DB Packet Storm

227268	4.3	警告	ウェブセンス	-	Websense Personal Email Manager および Email Security の Web Administrator におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-3748	2012-12-20 19:28	2009-10-22	Show	GitHub Exploit DB Packet Storm

227269	4.3	警告	tbmnet	-	TBmnetCMS の index.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-3747	2012-12-20 19:28	2009-10-22	Show	GitHub Exploit DB Packet Storm

227270	10	危険	riorey	-	RioRey RIOS における権限を取得される脆弱性	CWE-255 証明書・パスワード管理	CVE-2009-3710	2012-12-20 19:28	2009-10-16	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 19, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
221781	8.8	HIGH Adjacent	cisco	nx-os	A vulnerability in the Link Layer Discovery Protocol (LLDP) subsystem of Cisco Nexus 9000 Series Application Centric Infrastructure (ACI) Mode Switch Software could allow an adjacent, unauthenticated…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2019-1901	2024-11-21 13:37	2019-08-1	Show	GitHub Exploit DB Packet Storm

221782	6.1	MEDIUM Network	cisco	sg200-50_firmware sg200-50p_firmware sg200-50fp_firmware sg200-26_firmware sg200-26p_firmware sg200-26fp_firmware sg200-18_firmware sg200-10fp_firmware sg200-08_firmware sg…	A vulnerability in the web interface of Cisco Small Business 200, 300, and 500 Series Switches software could allow an unauthenticated, remote attacker to redirect a user to a malicious web page. The…	CWE-601 Open Redirect	CVE-2019-1943	2024-11-21 13:37	2019-07-18	Show	GitHub Exploit DB Packet Storm

221783	6.5	MEDIUM Network	cisco	identity_services_engine	A vulnerability in the sponsor portal web interface for Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to impact the integrity of an affected system by executing a…	CWE-89 SQL Injection	CVE-2019-1942	2024-11-21 13:37	2019-07-18	Show	GitHub Exploit DB Packet Storm

221784	6.1	MEDIUM Network	cisco	identity_services_engine	A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a …	CWE-79 Cross-site Scripting	CVE-2019-1941	2024-11-21 13:37	2019-07-18	Show	GitHub Exploit DB Packet Storm

221785	5.9	MEDIUM Network	cisco	industrial_network_director	A vulnerability in the Web Services Management Agent (WSMA) feature of Cisco Industrial Network Director (IND) could allow an unauthenticated, remote attacker to gain unauthorized read access to sens…	CWE-295 Improper Certificate Validation	CVE-2019-1940	2024-11-21 13:37	2019-07-18	Show	GitHub Exploit DB Packet Storm

221786	6.6	MEDIUM Physics	cisco	spa501g_firmware spa502g_firmware spa504g_firmware spa508g_firmware spa509g_firmware spa512g_firmware spa514g_firmware spa525g2_firmware spa500s_firmware spa500ds_firmware	A vulnerability in Cisco Small Business SPA500 Series IP Phones could allow a physically proximate attacker to execute arbitrary commands on the device. The vulnerability is due to improper input val…	CWE-20 Improper Input Validation	CVE-2019-1923	2024-11-21 13:37	2019-07-18	Show	GitHub Exploit DB Packet Storm

221787	7.4	HIGH Adjacent	cisco	aironet_3700e_firmware aironet_3700i_firmware aironet_3700p_firmware access_points	A vulnerability in the 802.11r Fast Transition (FT) implementation for Cisco IOS Access Points (APs) Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) cond…	NVD-CWE-Other	CVE-2019-1920	2024-11-21 13:37	2019-07-18	Show	GitHub Exploit DB Packet Storm

221788	7.8	HIGH Local	cisco	findit_network_probe findit_network_manager	A vulnerability in the Cisco FindIT Network Management Software virtual machine (VM) images could allow an unauthenticated, local attacker who has access to the VM console to log in to the device wit…	CWE-798 Use of Hard-coded Credentials	CVE-2019-1919	2024-11-21 13:37	2019-07-18	Show	GitHub Exploit DB Packet Storm

221789	9.8	CRITICAL Network	cisco	vision_dynamic_signage_director	A vulnerability in the REST API interface of Cisco Vision Dynamic Signage Director could allow an unauthenticated, remote attacker to bypass authentication on an affected system. The vulnerability is…	CWE-287 Improper Authentication	CVE-2019-1917	2024-11-21 13:37	2019-07-18	Show	GitHub Exploit DB Packet Storm

221790	8.6	HIGH Network	cisco	asa_5506-x_firmware asa_5506h-x_firmware asa_5506w-x_firmware asa_5508-x_firmware asa_5516-x_firmware	A vulnerability in the cryptographic driver for Cisco Adaptive Security Appliance Software (ASA) and Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause t…	CWE-20 Improper Input Validation	CVE-2019-1873	2024-11-21 13:37	2019-07-11	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed