Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 18, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
227661 7.5 危険 videoscript - VideoScript.us YouTube Video Script の admin/index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-1804 2012-12-20 19:10 2009-05-28 Show GitHub Exploit DB Packet Storm
227662 6.8 警告 sebastian-thiele - ST-Gallery の st_admin/gallery_output.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-1799 2012-12-20 19:10 2009-05-28 Show GitHub Exploit DB Packet Storm
227663 4.3 警告 サン・マイクロシステムズ - Sun Java System Portal Server におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-1796 2012-12-20 19:10 2009-05-22 Show GitHub Exploit DB Packet Storm
227664 9.3 危険 stonetrip - StoneTrip Ston3D StandalonePlayer および WebPlayer の system.openURL 関数における任意のコマンドを実行される脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2009-1792 2012-12-20 19:10 2009-05-29 Show GitHub Exploit DB Packet Storm
227665 7.5 危険 phpdirsubmit - PHP Dir Submit における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-1787 2012-12-20 19:10 2009-05-26 Show GitHub Exploit DB Packet Storm
227666 4.3 警告 ulteo - Ulteo Open Virtual Desktop におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-1785 2012-12-20 19:10 2009-05-22 Show GitHub Exploit DB Packet Storm
227667 6.8 警告 roboform - Frax.dk Php Recommend の admin.php における phpre_config.php へ任意の PHP コードを挿入される脆弱性 CWE-94
コード・インジェクション 		CVE-2009-1781 2012-12-20 19:10 2009-05-22 Show GitHub Exploit DB Packet Storm
227668 7.5 危険 roboform - Frax.dk Php Recommend の admin.php における管理者権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2009-1780 2012-12-20 19:10 2009-05-22 Show GitHub Exploit DB Packet Storm
227669 6.8 警告 roboform - Frax.dk Php Recommend の admin.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2009-1779 2012-12-20 19:10 2009-05-22 Show GitHub Exploit DB Packet Storm
227670 4.3 警告 ulteo - Ulteo Open Virtual Desktop におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-1775 2012-12-20 19:10 2009-05-22 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 18, 2026, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
221661 6.7 MEDIUM
Local 		cisco remote_phy_120_firmware
remote_phy_220_firmware
remote_phy_shelf_7200_firmware
cbr-8_firmware 		A vulnerability in Cisco Remote PHY Device Software could allow an authenticated, local attacker to execute commands on the underlying Linux shell of an affected device with root privileges. The vuln… CWE-78
OS Command  		CVE-2019-1839 2024-11-21 13:37 2019-08-22 Show GitHub Exploit DB Packet Storm
221662 4.8 MEDIUM
Network 		cisco enterprise_network_function_virtualization_infrastructure A vulnerability in the web portal framework of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack agains… CWE-79
Cross-site Scripting 		CVE-2019-1973 2024-11-21 13:37 2019-08-8 Show GitHub Exploit DB Packet Storm
221663 6.7 MEDIUM
Local 		cisco enterprise_network_function_virtualization_infrastructure A vulnerability the Cisco Enterprise NFV Infrastructure Software (NFVIS) restricted CLI could allow an authenticated, local attacker with valid administrator-level credentials to elevate privileges a… NVD-CWE-Other
CVE-2019-1972 2024-11-21 13:37 2019-08-8 Show GitHub Exploit DB Packet Storm
221664 9.8 CRITICAL
Network 		cisco enterprise_network_function_virtualization_infrastructure A vulnerability in the web portal of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an unauthenticated, remote attacker to perform a command injection attack and execute arbitrary c… CWE-20
 Improper Input Validation  		CVE-2019-1971 2024-11-21 13:37 2019-08-8 Show GitHub Exploit DB Packet Storm
221665 4.4 MEDIUM
Local 		cisco enterprise_network_function_virtualization_infrastructure Multiple vulnerabilities in Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, local attacker to read arbitrary files on the underlying operating system (OS) of an aff… CWE-78
OS Command  		CVE-2019-1960 2024-11-21 13:37 2019-08-8 Show GitHub Exploit DB Packet Storm
221666 4.4 MEDIUM
Local 		cisco enterprise_network_function_virtualization_infrastructure Multiple vulnerabilities in Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, local attacker to read arbitrary files on the underlying operating system (OS) of an aff… CWE-78
OS Command  		CVE-2019-1959 2024-11-21 13:37 2019-08-8 Show GitHub Exploit DB Packet Storm
221667 7.5 HIGH
Network 		cisco firepower_management_center
firepower_threat_defense 		A vulnerability in the Secure Sockets Layer (SSL)/Transport Layer Security (TLS) protocol inspection engine of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote att… CWE-693
 Protection Mechanism Failure 		CVE-2019-1970 2024-11-21 13:37 2019-08-8 Show GitHub Exploit DB Packet Storm
221668 4.9 MEDIUM
Network 		cisco enterprise_network_function_virtualization_infrastructure A vulnerability in Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, remote attacker to read arbitrary files on the underlying operating system (OS) of an affected de… CWE-20
 Improper Input Validation  		CVE-2019-1961 2024-11-21 13:37 2019-08-8 Show GitHub Exploit DB Packet Storm
221669 8.8 HIGH
Network 		cisco hyperflex_hx_data_platform A vulnerability in the web-based management interface of Cisco HyperFlex Software could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack on an affected … CWE-352
 Origin Validation Error 		CVE-2019-1958 2024-11-21 13:37 2019-08-8 Show GitHub Exploit DB Packet Storm
221670 7.5 HIGH
Network 		cisco iot_field_network_director A vulnerability in the web interface of Cisco IoT Field Network Director could allow an unauthenticated, remote attacker to trigger high CPU usage, resulting in a denial of service (DoS) condition on… NVD-CWE-noinfo
CVE-2019-1957 2024-11-21 13:37 2019-08-8 Show GitHub Exploit DB Packet Storm