Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 6, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
228201	7.5	危険	shopex	-	ECShop の search.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-2042	2012-12-20 19:29	2010-05-25	Show	GitHub Exploit DB Packet Storm

228202	4.3	警告	php-calendar project	-	PHP-Calendar の index.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-2041	2012-12-20 19:29	2010-05-25	Show	GitHub Exploit DB Packet Storm

228203	4.3	警告	V-EVA	-	V-EVA Shopzilla Affiliate Script PHP の search.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-2040	2012-12-20 19:29	2010-05-25	Show	GitHub Exploit DB Packet Storm

228204	1.9	注意	wolfram research	-	Mathematica における任意のファイルを上書きされる脆弱性	CWE-59 リンク解釈の問題	CVE-2010-2027	2012-12-20 19:29	2010-05-24	Show	GitHub Exploit DB Packet Storm

228205	6.8	警告	sebrac.webcindario	-	MigasCMS の function.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-2012	2012-12-20 19:29	2010-05-24	Show	GitHub Exploit DB Packet Storm

228206	4.3	警告	proxy2	-	Advanced Poll の misc/get_admin.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-2003	2012-12-20 19:29	2010-05-20	Show	GitHub Exploit DB Packet Storm

228207	2.1	注意	ron jerome	-	Drupal 用の Bibliography モジュールにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-2000	2012-12-20 19:29	2010-05-12	Show	GitHub Exploit DB Packet Storm

228208	2.1	注意	Saurused Ltd.	-	Saurus CMS の admin/edit.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-1997	2012-12-20 19:29	2010-05-20	Show	GitHub Exploit DB Packet Storm

228209	2.1	注意	tomatocms	-	TomatoCMS の index.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-1996	2012-12-20 19:29	2010-05-20	Show	GitHub Exploit DB Packet Storm

228210	2.1	注意	tomatocms	-	TomatoCMS の index.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-1995	2012-12-20 19:29	2010-05-20	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 6, 2026, 4:18 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
226241	9.8	CRITICAL Network	cisco	sf-220-24_firmware sf220-24p_firmware sf220-48_firmware sf220-48p_firmware sg220-26_firmware sg220-26p_firmware sg220-28_firmware sg220-28mp_firmware sg220-50_firmware sg22…	Multiple vulnerabilities in the web management interface of Cisco Small Business 220 Series Smart Switches could allow an unauthenticated, remote attacker to overflow a buffer, which then allows the …	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2019-1913	2024-11-21 13:37	2019-08-7	Show	GitHub Exploit DB Packet Storm

226242	9.1	CRITICAL Network	cisco	sf-220-24_firmware sf220-24p_firmware sf220-48_firmware sf220-48p_firmware sg220-26_firmware sg220-26p_firmware sg220-28_firmware sg220-28mp_firmware sg220-50_firmware sg22…	A vulnerability in the web management interface of Cisco Small Business 220 Series Smart Switches could allow an unauthenticated, remote attacker to upload arbitrary files. The vulnerability is due t…	CWE-863 Incorrect Authorization	CVE-2019-1912	2024-11-21 13:37	2019-08-7	Show	GitHub Exploit DB Packet Storm

226243	8.8	HIGH Adjacent	cisco	nx-os	A vulnerability in the Link Layer Discovery Protocol (LLDP) subsystem of Cisco Nexus 9000 Series Application Centric Infrastructure (ACI) Mode Switch Software could allow an adjacent, unauthenticated…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2019-1901	2024-11-21 13:37	2019-08-1	Show	GitHub Exploit DB Packet Storm

226244	6.1	MEDIUM Network	cisco	sg200-50_firmware sg200-50p_firmware sg200-50fp_firmware sg200-26_firmware sg200-26p_firmware sg200-26fp_firmware sg200-18_firmware sg200-10fp_firmware sg200-08_firmware sg…	A vulnerability in the web interface of Cisco Small Business 200, 300, and 500 Series Switches software could allow an unauthenticated, remote attacker to redirect a user to a malicious web page. The…	CWE-601 Open Redirect	CVE-2019-1943	2024-11-21 13:37	2019-07-18	Show	GitHub Exploit DB Packet Storm

226245	6.5	MEDIUM Network	cisco	identity_services_engine	A vulnerability in the sponsor portal web interface for Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to impact the integrity of an affected system by executing a…	CWE-89 SQL Injection	CVE-2019-1942	2024-11-21 13:37	2019-07-18	Show	GitHub Exploit DB Packet Storm

226246	6.1	MEDIUM Network	cisco	identity_services_engine	A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a …	CWE-79 Cross-site Scripting	CVE-2019-1941	2024-11-21 13:37	2019-07-18	Show	GitHub Exploit DB Packet Storm

226247	5.9	MEDIUM Network	cisco	industrial_network_director	A vulnerability in the Web Services Management Agent (WSMA) feature of Cisco Industrial Network Director (IND) could allow an unauthenticated, remote attacker to gain unauthorized read access to sens…	CWE-295 Improper Certificate Validation	CVE-2019-1940	2024-11-21 13:37	2019-07-18	Show	GitHub Exploit DB Packet Storm

226248	6.6	MEDIUM Physics	cisco	spa501g_firmware spa502g_firmware spa504g_firmware spa508g_firmware spa509g_firmware spa512g_firmware spa514g_firmware spa525g2_firmware spa500s_firmware spa500ds_firmware	A vulnerability in Cisco Small Business SPA500 Series IP Phones could allow a physically proximate attacker to execute arbitrary commands on the device. The vulnerability is due to improper input val…	CWE-20 Improper Input Validation	CVE-2019-1923	2024-11-21 13:37	2019-07-18	Show	GitHub Exploit DB Packet Storm

226249	7.4	HIGH Adjacent	cisco	aironet_3700e_firmware aironet_3700i_firmware aironet_3700p_firmware access_points	A vulnerability in the 802.11r Fast Transition (FT) implementation for Cisco IOS Access Points (APs) Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) cond…	NVD-CWE-Other	CVE-2019-1920	2024-11-21 13:37	2019-07-18	Show	GitHub Exploit DB Packet Storm

226250	7.8	HIGH Local	cisco	findit_network_probe findit_network_manager	A vulnerability in the Cisco FindIT Network Management Software virtual machine (VM) images could allow an unauthenticated, local attacker who has access to the VM console to log in to the device wit…	CWE-798 Use of Hard-coded Credentials	CVE-2019-1919	2024-11-21 13:37	2019-07-18	Show	GitHub Exploit DB Packet Storm