Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 19, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228381 7.5 危険 sg real estate portal - SG Real Estate Portal の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6011 2012-12-20 19:10 2009-01-30 Show GitHub Exploit DB Packet Storm
228382 5 警告 sg real estate portal - SG Real Estate Portal におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-6010 2012-12-20 19:10 2009-01-30 Show GitHub Exploit DB Packet Storm
228383 7.5 危険 sg real estate portal - SG Real Estate Portal における認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2008-6009 2012-12-20 19:10 2009-01-30 Show GitHub Exploit DB Packet Storm
228384 7.5 危険 quidascript - APB の view_group.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6007 2012-12-20 19:10 2009-01-30 Show GitHub Exploit DB Packet Storm
228385 10 危険 W3C - W3C Amaya Web Browser の CheckUniqueName 関数におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2008-6005 2012-12-20 19:10 2009-01-28 Show GitHub Exploit DB Packet Storm
228386 7.1 危険 web-cp - web-cp の sendfile.php における絶対パストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-6002 2012-12-20 19:10 2009-01-28 Show GitHub Exploit DB Packet Storm
228387 4.3 警告 TYPO3 Association - TYPO3 用の freeCap CAPTCHA エクステンションにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-5995 2012-12-20 19:10 2009-01-28 Show GitHub Exploit DB Packet Storm
228388 6.8 警告 phpcounter - PHPcounter の defs.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-5989 2012-12-20 19:10 2009-01-28 Show GitHub Exploit DB Packet Storm
228389 5 警告 Webkit - WebKit の WebCore における重要な情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-6059 2012-12-20 19:10 2008-11-18 Show GitHub Exploit DB Packet Storm
228390 6 警告 tangocms - TangoCMS におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2008-6048 2012-12-20 19:10 2008-12-16 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 19, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
201821 7.1 HIGH
Local 		cisco sd-wan_firmware A vulnerability in Cisco SD-WAN Solution software could allow an authenticated, local attacker to cause a buffer overflow on an affected device. The vulnerability is due to insufficient input validat… CWE-120
Classic Buffer Overflow 		CVE-2020-3264 2024-11-21 14:30 2020-03-20 Show GitHub Exploit DB Packet Storm
201822 5.3 MEDIUM
Network 		cisco prime_collaboration_provisioning A vulnerability in the web-based management interface of Cisco Prime Collaboration Provisioning could allow an unauthenticated, remote attacker to obtain sensitive information about an affected devic… CWE-200
Information Exposure 		CVE-2020-3193 2024-11-21 14:30 2020-03-5 Show GitHub Exploit DB Packet Storm
201823 6.1 MEDIUM
Network 		cisco prime_collaboration_provisioning A vulnerability in the web-based management interface of Cisco Prime Collaboration Provisioning could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against … CWE-79
Cross-site Scripting 		CVE-2020-3192 2024-11-21 14:30 2020-03-5 Show GitHub Exploit DB Packet Storm
201824 5.8 MEDIUM
Network 		cisco ios_xr A vulnerability in the IPsec packet processor of Cisco IOS XR Software could allow an unauthenticated remote attacker to cause a denial of service (DoS) condition for IPsec sessions to an affected de… CWE-400
 Uncontrolled Resource Consumption 		CVE-2020-3190 2024-11-21 14:30 2020-03-5 Show GitHub Exploit DB Packet Storm
201825 5.4 MEDIUM
Network 		cisco telepresence_management_suite A vulnerability in the web-based management interface of Cisco TelePresence Management Suite (TMS) could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against… CWE-79
Cross-site Scripting 		CVE-2020-3185 2024-11-21 14:30 2020-03-5 Show GitHub Exploit DB Packet Storm
201826 4.3 MEDIUM
Adjacent 		cisco webex_meetings A vulnerability in the multicast DNS (mDNS) protocol configuration of Cisco Webex Meetings Client for MacOS could allow an unauthenticated adjacent attacker to obtain sensitive information about the … CWE-200
Information Exposure 		CVE-2020-3182 2024-11-21 14:30 2020-03-5 Show GitHub Exploit DB Packet Storm
201827 6.5 MEDIUM
Network 		cisco email_security_appliance A vulnerability in the malware detection functionality in Cisco Advanced Malware Protection (AMP) in Cisco AsyncOS Software for Cisco Email Security Appliances (ESAs) could allow an unauthenticated r… CWE-400
 Uncontrolled Resource Consumption 		CVE-2020-3181 2024-11-21 14:30 2020-03-5 Show GitHub Exploit DB Packet Storm
201828 6.7 MEDIUM
Local 		cisco remote_phy_120_firmware
remote_phy_220_firmware
remote_phy_shelf_7200_firmware 		A vulnerability in Cisco Remote PHY Device Software could allow an authenticated, local attacker to execute commands on the underlying Linux shell of an affected device with root privileges. The vuln… CWE-78
OS Command  		CVE-2020-3176 2024-11-21 14:30 2020-03-5 Show GitHub Exploit DB Packet Storm
201829 5.3 MEDIUM
Network 		cisco email_security_appliance
cloud_email_security
web_security_appliance
content_security_management_appliance 		A vulnerability in the web-based management interface of Cisco AsyncOS for Cisco Email Security Appliance (ESA), Cisco Web Security Appliance (WSA), and Cisco Content Security Management Appliance (S… CWE-20
 Improper Input Validation  		CVE-2020-3164 2024-11-21 14:30 2020-03-5 Show GitHub Exploit DB Packet Storm
201830 5.4 MEDIUM
Network 		cisco identity_services_engine A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a us… CWE-79
Cross-site Scripting 		CVE-2020-3157 2024-11-21 14:30 2020-03-5 Show GitHub Exploit DB Packet Storm