Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 17, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
228311	7.5	危険	webcms	-	webCMS Portal Edition の index.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-4186	2012-12-20 18:52	2008-09-23	Show	GitHub Exploit DB Packet Storm

228312	9.3	危険	systemrequirementslab	-	Instant Expert Analysis で使用されている LLC Systems Requirements Lab における強制的にダウンロードされる脆弱性	CWE-94 コード・インジェクション	CVE-2008-4385	2012-12-20 18:52	2008-10-14	Show	GitHub Exploit DB Packet Storm

228313	7.8	危険	サムスン	-	Samsung DVR の Web インターフェースにおけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2008-4380	2012-12-20 18:52	2008-10-1	Show	GitHub Exploit DB Packet Storm

228314	4.3	警告	siteman	-	Siteman の search.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-4365	2012-12-20 18:52	2008-09-30	Show	GitHub Exploit DB Packet Storm

228315	7.8	危険	powerportal	-	PowerPortal におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2008-4361	2012-12-20 18:52	2008-09-30	Show	GitHub Exploit DB Packet Storm

228316	10	危険	spaw editor	-	SPAW Editor PHP Edtion の class/theme.class.php における脆弱性	CWE-20 不適切な入力確認	CVE-2008-4358	2012-12-20 18:52	2008-09-30	Show	GitHub Exploit DB Packet Storm

228317	7.5	危険	Powie	-	Powie pLink の linkto.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-4357	2012-12-20 18:52	2008-09-30	Show	GitHub Exploit DB Packet Storm

228318	7.5	危険	Powie	-	Powie PSCRIPT Forum の showprofil.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-4355	2012-12-20 18:52	2008-09-30	Show	GitHub Exploit DB Packet Storm

228319	7.5	危険	phpsmartcom	-	phpSmartCom の inc/pages/viewprofile.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-4352	2012-12-20 18:52	2008-09-30	Show	GitHub Exploit DB Packet Storm

228320	7.5	危険	phpsmartcom	-	phpSmartCom の index.php におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2008-4351	2012-12-20 18:52	2008-09-30	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 17, 2026, 4:15 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
201661	7.5	HIGH Network	cisco	ucs_director ucs_director_express_for_big_data	Multiple vulnerabilities in the REST API of Cisco UCS Director and Cisco UCS Director Express for Big Data may allow a remote attacker to bypass authentication or conduct directory traversal attacks …	CWE-22 Path Traversal	CVE-2020-3249	2024-11-21 14:30	2020-04-16	Show	GitHub Exploit DB Packet Storm

201662	9.8	CRITICAL Network	cisco	ucs_director ucs_director_express_for_big_data	Multiple vulnerabilities in the REST API of Cisco UCS Director and Cisco UCS Director Express for Big Data may allow a remote attacker to bypass authentication or conduct directory traversal attacks …	CWE-22 Path Traversal	CVE-2020-3248	2024-11-21 14:30	2020-04-16	Show	GitHub Exploit DB Packet Storm

201663	9.8	CRITICAL Network	cisco	ucs_director ucs_director_express_for_big_data	Multiple vulnerabilities in the REST API of Cisco UCS Director and Cisco UCS Director Express for Big Data may allow a remote attacker to bypass authentication or conduct directory traversal attacks …	CWE-22 Path Traversal	CVE-2020-3247	2024-11-21 14:30	2020-04-16	Show	GitHub Exploit DB Packet Storm

201664	9.8	CRITICAL Network	cisco	ucs_director ucs_director_express_for_big_data	Multiple vulnerabilities in the REST API of Cisco UCS Director and Cisco UCS Director Express for Big Data may allow a remote attacker to bypass authentication or conduct directory traversal attacks …	CWE-269 Improper Privilege Management	CVE-2020-3243	2024-11-21 14:30	2020-04-16	Show	GitHub Exploit DB Packet Storm

201665	7.3	HIGH Local	cisco	ucs_director ucs_director_express_for_big_data	Multiple vulnerabilities in the REST API of Cisco UCS Director and Cisco UCS Director Express for Big Data may allow a remote attacker to bypass authentication or conduct directory traversal attacks …	CWE-20 Improper Input Validation	CVE-2020-3240	2024-11-21 14:30	2020-04-16	Show	GitHub Exploit DB Packet Storm

201666	8.8	HIGH Network	cisco	ucs_director ucs_director_express_for_big_data	Multiple vulnerabilities in the REST API of Cisco UCS Director and Cisco UCS Director Express for Big Data may allow a remote attacker to bypass authentication or conduct directory traversal attacks …	CWE-22 Path Traversal	CVE-2020-3239	2024-11-21 14:30	2020-04-16	Show	GitHub Exploit DB Packet Storm

201667	7.5	HIGH Network	cisco	5508_wireless_controller_firmware 5520_wireless_controller_firmware	A vulnerability in the 802.11 Generic Advertisement Service (GAS) frame processing function of Cisco Wireless LAN Controller (WLC) Software could allow an unauthenticated, remote attacker to cause an…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2020-3273	2024-11-21 14:30	2020-04-16	Show	GitHub Exploit DB Packet Storm

201668	7.5	HIGH Network	cisco	5508_wireless_controller_firmware 5520_wireless_controller_firmware	A vulnerability in the Control and Provisioning of Wireless Access Points (CAPWAP) protocol handler of Cisco Wireless LAN Controller (WLC) Software could allow an unauthenticated, remote attacker to …	CWE-20 Improper Input Validation	CVE-2020-3262	2024-11-21 14:30	2020-04-16	Show	GitHub Exploit DB Packet Storm

201669	6.5	MEDIUM Network	cisco	aironet_1542i_firmware aironet_1542d_firmware aironet_1562i_firmware aironet_1562e_firmware aironet_1562d_firmware aironet_1815_firmware aironet_1830_firmware aironet_1840_firmwa…	A vulnerability in the web-based management interface of Cisco Mobility Express Software could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack on an af…	CWE-352 Origin Validation Error	CVE-2020-3261	2024-11-21 14:30	2020-04-16	Show	GitHub Exploit DB Packet Storm

201670	6.5	MEDIUM Adjacent	cisco	aironet_1542i_firmware aironet_1542d_firmware aironet_1815_firmware aironet_1830_firmware aironet_1840_firmware aironet_1850_firmware	A vulnerability in Cisco Aironet Series Access Points Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability …	CWE-400 Uncontrolled Resource Consumption	CVE-2020-3260	2024-11-21 14:30	2020-04-16	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed