Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 6, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228691 7.5 危険 VirtueMart - VirtueMart の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-4430 2012-12-20 19:28 2009-12-28 Show GitHub Exploit DB Packet Storm
228692 7.5 危険 weentech - weenCompany の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-4423 2012-12-20 19:28 2009-12-24 Show GitHub Exploit DB Packet Storm
228693 5 警告 Zend Technologies Ltd. - Zend Framework の Zend_Log_Writer_Mail クラスにおける任意の電子メールメッセージを送信される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2009-4417 2012-12-20 19:28 2009-12-24 Show GitHub Exploit DB Packet Storm
228694 4.3 警告 phpgroupware - phpGroupWare の login.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4416 2012-12-20 19:28 2009-12-24 Show GitHub Exploit DB Packet Storm
228695 7.5 危険 phpgroupware - phpGroupWare におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2009-4415 2012-12-20 19:28 2009-12-24 Show GitHub Exploit DB Packet Storm
228696 6.8 警告 phpgroupware - phpGroupWare の phpgwapi /inc/class.auth_sql.inc.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-4414 2012-12-20 19:28 2009-12-24 Show GitHub Exploit DB Packet Storm
228697 5 警告 pps.jussieu - Polipo の client.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-189
数値処理の問題 		CVE-2009-4413 2012-12-20 19:28 2009-12-24 Show GitHub Exploit DB Packet Storm
228698 6 警告 s9y - Serendipity における任意のコードを実行される脆弱性 CWE-Other
その他 		CVE-2009-4412 2012-12-20 19:28 2009-12-21 Show GitHub Exploit DB Packet Storm
228699 3.7 注意 xfs - XFS acl の setfacl および getfacl コマンドにおける任意のファイルなど対する ACL を変更される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2009-4411 2012-12-20 19:28 2009-12-24 Show GitHub Exploit DB Packet Storm
228700 4.3 警告 pyforum - PyForum および zForum の models.parser におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4408 2012-12-20 19:28 2009-12-23 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 7, 2026, 4:13 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
226311 6.7 MEDIUM
Local 		cisco enterprise_network_function_virtualization_infrastructure A vulnerability the Cisco Enterprise NFV Infrastructure Software (NFVIS) restricted CLI could allow an authenticated, local attacker with valid administrator-level credentials to elevate privileges a… NVD-CWE-Other
CVE-2019-1972 2024-11-21 13:37 2019-08-8 Show GitHub Exploit DB Packet Storm
226312 9.8 CRITICAL
Network 		cisco enterprise_network_function_virtualization_infrastructure A vulnerability in the web portal of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an unauthenticated, remote attacker to perform a command injection attack and execute arbitrary c… CWE-20
 Improper Input Validation  		CVE-2019-1971 2024-11-21 13:37 2019-08-8 Show GitHub Exploit DB Packet Storm
226313 4.4 MEDIUM
Local 		cisco enterprise_network_function_virtualization_infrastructure Multiple vulnerabilities in Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, local attacker to read arbitrary files on the underlying operating system (OS) of an aff… CWE-78
OS Command  		CVE-2019-1960 2024-11-21 13:37 2019-08-8 Show GitHub Exploit DB Packet Storm
226314 4.4 MEDIUM
Local 		cisco enterprise_network_function_virtualization_infrastructure Multiple vulnerabilities in Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, local attacker to read arbitrary files on the underlying operating system (OS) of an aff… CWE-78
OS Command  		CVE-2019-1959 2024-11-21 13:37 2019-08-8 Show GitHub Exploit DB Packet Storm
226315 7.5 HIGH
Network 		cisco firepower_management_center
firepower_threat_defense 		A vulnerability in the Secure Sockets Layer (SSL)/Transport Layer Security (TLS) protocol inspection engine of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote att… CWE-693
 Protection Mechanism Failure 		CVE-2019-1970 2024-11-21 13:37 2019-08-8 Show GitHub Exploit DB Packet Storm
226316 4.9 MEDIUM
Network 		cisco enterprise_network_function_virtualization_infrastructure A vulnerability in Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, remote attacker to read arbitrary files on the underlying operating system (OS) of an affected de… CWE-20
 Improper Input Validation  		CVE-2019-1961 2024-11-21 13:37 2019-08-8 Show GitHub Exploit DB Packet Storm
226317 8.8 HIGH
Network 		cisco hyperflex_hx_data_platform A vulnerability in the web-based management interface of Cisco HyperFlex Software could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack on an affected … CWE-352
 Origin Validation Error 		CVE-2019-1958 2024-11-21 13:37 2019-08-8 Show GitHub Exploit DB Packet Storm
226318 7.5 HIGH
Network 		cisco iot_field_network_director A vulnerability in the web interface of Cisco IoT Field Network Director could allow an unauthenticated, remote attacker to trigger high CPU usage, resulting in a denial of service (DoS) condition on… NVD-CWE-noinfo
CVE-2019-1957 2024-11-21 13:37 2019-08-8 Show GitHub Exploit DB Packet Storm
226319 4.8 MEDIUM
Network 		cisco spa112_2-port_phone_adapter_firmware A vulnerability in the web-based interface of the Cisco SPA112 2-Port Phone Adapter could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against another user o… CWE-79
Cross-site Scripting 		CVE-2019-1956 2024-11-21 13:37 2019-08-8 Show GitHub Exploit DB Packet Storm
226320 7.5 HIGH
Network 		cisco email_security_appliance_firmware A vulnerability in the Sender Policy Framework (SPF) functionality of Cisco AsyncOS Software for Cisco Email Security Appliances (ESA) could allow an unauthenticated, remote attacker to bypass config… CWE-20
 Improper Input Validation  		CVE-2019-1955 2024-11-21 13:37 2019-08-8 Show GitHub Exploit DB Packet Storm