Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":April 30, 2026, 4 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
228361 10 危険 SAP - SAP RFC Library の RFC_START_GUI 関数におけるバッファオーバーフローの脆弱性 - CVE-2007-1916 2012-12-20 18:19 2007-04-10 Show GitHub Exploit DB Packet Storm
228362 7.5 危険 SAP - SAP RFC Library の RFC_START_PROGRAM 関数におけるバッファオーバーフローの脆弱性 - CVE-2007-1915 2012-12-20 18:19 2007-04-10 Show GitHub Exploit DB Packet Storm
228363 7.8 危険 SAP - SAP RFC Library の RFC_START_PROGRAM 関数における重要な情報を取得される脆弱性 - CVE-2007-1914 2012-12-20 18:19 2007-04-10 Show GitHub Exploit DB Packet Storm
228364 5 警告 SAP - SAP RFC Library の TRUSTED_SYSTEM_SECURITY 関数におけるシステムおよびドメイン上のユーザーとグループの存在を確認される脆弱性 - CVE-2007-1913 2012-12-20 18:19 2007-04-10 Show GitHub Exploit DB Packet Storm
228365 7.5 危険 ryan haudenschilt - PHP の Ryan Haudenschilt Battle.net Clan Script における SQL インジェクションの脆弱性 - CVE-2007-1909 2012-12-20 18:19 2007-04-10 Show GitHub Exploit DB Packet Storm
228366 4.3 警告 pineapple technologies - Pineapple Technologies QuizShock の auth.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2007-1905 2012-12-20 18:19 2007-04-10 Show GitHub Exploit DB Packet Storm
228367 2.6 注意 sonicbb - SonicBB の search.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-1903 2012-12-20 18:19 2007-05-14 Show GitHub Exploit DB Packet Storm
228368 6.8 警告 sonicbb - SonicBB における SQL インジェクションの脆弱性 - CVE-2007-1902 2012-12-20 18:19 2007-05-14 Show GitHub Exploit DB Packet Storm
228369 4.3 警告 sonicbb - SonicBB における重要な情報を取得される脆弱性 - CVE-2007-1901 2012-12-20 18:19 2007-05-14 Show GitHub Exploit DB Packet Storm
228370 6.5 警告 WordPress.org - WordPress の xmlrpc における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2007-1897 2012-12-20 18:19 2007-04-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 30, 2026, 4:58 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
197381 8.2 HIGH
Network
cisco data_center_network_manager A vulnerability in specific REST API endpoints of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote attacker to inject arbitrary commands on the underlying operating syste… NVD-CWE-Other
CVE-2020-3384 2024-11-21 14:30 2020-07-31 Show GitHub Exploit DB Packet Storm
197382 8.8 HIGH
Network
cisco data_center_network_manager A vulnerability in the archive utility of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote attacker to conduct directory traversal attacks on an affected device. The vuln… CWE-22
CWE-20
Path Traversal
 Improper Input Validation 
CVE-2020-3383 2024-11-21 14:30 2020-07-31 Show GitHub Exploit DB Packet Storm
197383 9.8 CRITICAL
Network
cisco data_center_network_manager A vulnerability in the REST API of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to bypass authentication and execute arbitrary actions with administrative … CWE-798
 Use of Hard-coded Credentials
CVE-2020-3382 2024-11-21 14:30 2020-07-31 Show GitHub Exploit DB Packet Storm
197384 8.8 HIGH
Network
cisco data_center_network_manager A vulnerability in the Device Manager application of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote attacker to inject arbitrary commands on the affected device. The vu… CWE-78
OS Command 
CVE-2020-3377 2024-11-21 14:30 2020-07-31 Show GitHub Exploit DB Packet Storm
197385 9.8 CRITICAL
Network
cisco data_center_network_manager A vulnerability in the Device Manager application of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to bypass authentication and execute arbitrary actions on… CWE-306
Missing Authentication for Critical Function
CVE-2020-3376 2024-11-21 14:30 2020-07-31 Show GitHub Exploit DB Packet Storm
197386 9.8 CRITICAL
Network
cisco sd-wan
ios_xe_sd-wan
A vulnerability in Cisco SD-WAN Solution Software could allow an unauthenticated, remote attacker to cause a buffer overflow on an affected device. The vulnerability is due to insufficient input vali… CWE-20
 Improper Input Validation 
CVE-2020-3375 2024-11-21 14:30 2020-07-31 Show GitHub Exploit DB Packet Storm
197387 9.9 CRITICAL
Network
cisco sd-wan A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to bypass authorization, enabling them to access sensitive informa… CWE-863
 Incorrect Authorization
CVE-2020-3374 2024-11-21 14:30 2020-07-31 Show GitHub Exploit DB Packet Storm
197388 7.8 HIGH
Local
cisco sd-wan_firmware
vbond_orchestrator
vsmart_controller
A vulnerability in Cisco SD-WAN Solution Software could allow an authenticated, local attacker to elevate privileges to Administrator on the underlying operating system. The vulnerability is due to i… CWE-20
 Improper Input Validation 
CVE-2020-3379 2024-11-21 14:30 2020-07-17 Show GitHub Exploit DB Packet Storm
197389 5.8 MEDIUM
Network
cisco email_security_appliance A vulnerability in URL filtering of Cisco Content Security Management Appliance (SMA) could allow an unauthenticated, remote attacker to bypass URL filtering on an affected device. The vulnerability … CWE-20
 Improper Input Validation 
CVE-2020-3370 2024-11-21 14:30 2020-07-17 Show GitHub Exploit DB Packet Storm
197390 5.4 MEDIUM
Network
cisco sd-wan_firmware A vulnerability in the web-based management interface of the Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user … CWE-79
Cross-site Scripting
CVE-2020-3406 2024-11-21 14:30 2020-07-17 Show GitHub Exploit DB Packet Storm