Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 20, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228001 7.5 危険 rd-media - Joomla! 用の RD-Autos コンポーネントにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-1258 2012-12-20 19:10 2009-04-7 Show GitHub Exploit DB Packet Storm
228002 6.5 警告 podcast generator - Podcast Generator の index.php における config.php へ任意の PHP コードを挿入される脆弱性 CWE-94
コード・インジェクション 		CVE-2009-1230 2012-12-20 19:10 2009-04-2 Show GitHub Exploit DB Packet Storm
228003 7.5 危険 podcast generator - Podcast Generator の core/admin/delete.php における任意のファイルを削除される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2009-1226 2012-12-20 19:10 2009-04-2 Show GitHub Exploit DB Packet Storm
228004 4.3 警告 platinumprofitzone - Turnkey Ebook Store の index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-1225 2012-12-20 19:10 2009-04-2 Show GitHub Exploit DB Packet Storm
228005 7.5 危険 scivox - vsp stats プロセッサの vsp-core/pub/themes/bismarck/gamestat.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-1224 2012-12-20 19:10 2009-04-2 Show GitHub Exploit DB Packet Storm
228006 5.1 警告 webEdition e.V. - webEdition の index.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2009-1222 2012-12-20 19:10 2009-04-2 Show GitHub Exploit DB Packet Storm
228007 7.8 危険 precisionid - DMATRIXLib.Datamatrix の PRECIS~2.DLL における任意のファイルを上書きされる脆弱性 CWE-Other
その他 		CVE-2009-1212 2012-12-20 19:10 2009-04-1 Show GitHub Exploit DB Packet Storm
228008 9.3 危険 w3 - W3C Amaya Web Browser におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2009-1209 2012-12-20 19:10 2009-04-1 Show GitHub Exploit DB Packet Storm
228009 4.3 警告 Tiki Software Community Association - Tiki CMS/Groupware におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-1204 2012-12-20 19:10 2009-03-18 Show GitHub Exploit DB Packet Storm
228010 5 警告 サン・マイクロシステムズ - Sun JDK の java.util.regex.Pattern.compile メソッドにおけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2009-1190 2012-12-20 19:10 2009-04-27 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 21, 2026, 4:10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
201991 7.8 HIGH
Local 		cisco nx-os A vulnerability in the Enable Secret feature of Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series Switches in standalone NX-OS mode could allow an authenticated, local attacker to issue th… CWE-862
 Missing Authorization 		CVE-2020-3394 2024-11-21 14:30 2020-08-28 Show GitHub Exploit DB Packet Storm
201992 7.5 HIGH
Network 		cisco nx-os A vulnerability in the Protocol Independent Multicast (PIM) feature for IPv6 networks (PIM6) of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS)… CWE-755
 Improper Handling of Exceptional Conditions 		CVE-2020-3338 2024-11-21 14:30 2020-08-28 Show GitHub Exploit DB Packet Storm
201993 4.4 MEDIUM
Local 		cisco hyperflex_hx-series_software A vulnerability in the installation component of Cisco Hyperflex HX-Series Software could allow an authenticated, local attacker to retrieve the password that was configured at installation on an aff… CWE-311
Missing Encryption of Sensitive Data 		CVE-2020-3389 2024-11-21 14:30 2020-08-27 Show GitHub Exploit DB Packet Storm
201994 6.7 MEDIUM
Local 		cisco connected_mobile_experiences A vulnerability in Cisco Connected Mobile Experiences (CMX) could allow an authenticated, local attacker with administrative credentials to execute arbitrary commands with root privileges. The vulner… CWE-276
Incorrect Default Permissions  		CVE-2020-3152 2024-11-21 14:30 2020-08-27 Show GitHub Exploit DB Packet Storm
201995 6.7 MEDIUM
Local 		cisco connected_mobile_experiences A vulnerability in the CLI of Cisco Connected Mobile Experiences (CMX) could allow an authenticated, local attacker with administrative credentials to bypass restrictions on the CLI. The vulnerabilit… CWE-287
Improper Authentication 		CVE-2020-3151 2024-11-21 14:30 2020-08-27 Show GitHub Exploit DB Packet Storm
201996 7.5 HIGH
Network 		cisco dna_center A vulnerability in Cisco DNA Center software could allow an unauthenticated remote attacker access to sensitive information on an affected system. The vulnerability is due to improper handling of aut… CWE-287
Improper Authentication 		CVE-2020-3411 2024-11-21 14:30 2020-08-18 Show GitHub Exploit DB Packet Storm
201997 4.3 MEDIUM
Network 		cisco webex_meetings_online A vulnerability in the scheduled meeting template feature of Cisco Webex Meetings could allow an authenticated, remote attacker to delete a scheduled meeting template that belongs to another user in … CWE-863
 Incorrect Authorization 		CVE-2020-3413 2024-11-21 14:30 2020-08-18 Show GitHub Exploit DB Packet Storm
201998 4.3 MEDIUM
Network 		cisco webex_meetings_online A vulnerability in the scheduled meeting template feature of Cisco Webex Meetings could allow an authenticated, remote attacker to create a scheduled meeting template that would belong to another use… CWE-863
 Incorrect Authorization 		CVE-2020-3412 2024-11-21 14:30 2020-08-18 Show GitHub Exploit DB Packet Storm
201999 8.6 HIGH
Network 		cisco sg250x-24_firmware
sg250x-24p_firmware
sg250x-48_firmware
sg250x-48p_firmware
sg250-08_firmware
sg250-08hp_firmware
sg250-10p_firmware
sg250-18_firmware
sg250-26_firmware
s… 		A vulnerability in the IPv6 packet processing engine of Cisco Small Business Smart and Managed Switches could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on… CWE-20
 Improper Input Validation  		CVE-2020-3363 2024-11-21 14:30 2020-08-18 Show GitHub Exploit DB Packet Storm
202000 6.1 MEDIUM
Network 		cisco unified_communications_manager A vulnerability in the web UI of Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) could allow an unauthenticated,… CWE-79
Cross-site Scripting 		CVE-2020-3346 2024-11-21 14:30 2020-08-18 Show GitHub Exploit DB Packet Storm