Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 18, 2026, 12:09 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
228911	4.3	警告	TYPO3 Association	-	TYPO3 用の WT Gallery エクステンションにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-2526	2012-12-20 18:52	2008-06-3	Show	GitHub Exploit DB Packet Storm

228912	4.3	警告	TYPO3 Association	-	TYPO3 用の Event Database エクステンションにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-2525	2012-12-20 18:52	2008-06-3	Show	GitHub Exploit DB Packet Storm

228913	7.5	危険	raknet	-	RakNet の Autopatcher サーバプラグインにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-2523	2012-12-20 18:52	2008-06-3	Show	GitHub Exploit DB Packet Storm

228914	6.5	警告	YABSoft	-	YABSoft Mega File Hosting Script の members.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-2521	2012-12-20 18:52	2008-06-3	Show	GitHub Exploit DB Packet Storm

228915	2.1	注意	sarab	-	SaraB の sarab.sh スクリプトにおける重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2008-2517	2012-12-20 18:52	2008-06-3	Show	GitHub Exploit DB Packet Storm

228916	5	警告	シマンテック	-	Symantec Backup Exec System Recovery Manager におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2008-2512	2012-12-20 18:52	2008-05-28	Show	GitHub Exploit DB Packet Storm

228917	7.5	危険	WordPress.org	-	WordPress 用 Upload File プラグインにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-2510	2012-12-20 18:52	2008-05-29	Show	GitHub Exploit DB Packet Storm

228918	4.3	警告	tr script news	-	Tr Script News の news.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-2508	2012-12-20 18:52	2008-05-29	Show	GitHub Exploit DB Packet Storm

228919	7.5	危険	simpel side	-	Simpel Side Weblosning における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-2506	2012-12-20 18:52	2008-05-29	Show	GitHub Exploit DB Packet Storm

228920	4.3	警告	simpel side	-	Simpel Side Weblosning の result.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-2505	2012-12-20 18:52	2008-05-29	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 18, 2026, 4:12 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
221701	7.8	HIGH Local	cisco	findit_network_probe findit_network_manager	A vulnerability in the Cisco FindIT Network Management Software virtual machine (VM) images could allow an unauthenticated, local attacker who has access to the VM console to log in to the device wit…	CWE-798 Use of Hard-coded Credentials	CVE-2019-1919	2024-11-21 13:37	2019-07-18	Show	GitHub Exploit DB Packet Storm

221702	9.8	CRITICAL Network	cisco	vision_dynamic_signage_director	A vulnerability in the REST API interface of Cisco Vision Dynamic Signage Director could allow an unauthenticated, remote attacker to bypass authentication on an affected system. The vulnerability is…	CWE-287 Improper Authentication	CVE-2019-1917	2024-11-21 13:37	2019-07-18	Show	GitHub Exploit DB Packet Storm

221703	8.6	HIGH Network	cisco	asa_5506-x_firmware asa_5506h-x_firmware asa_5506w-x_firmware asa_5508-x_firmware asa_5516-x_firmware	A vulnerability in the cryptographic driver for Cisco Adaptive Security Appliance Software (ASA) and Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause t…	CWE-20 Improper Input Validation	CVE-2019-1873	2024-11-21 13:37	2019-07-11	Show	GitHub Exploit DB Packet Storm

221704	7.4	HIGH Network	cisco	email_security_appliance	A vulnerability in the email message scanning of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to bypass configured filters on the de…	CWE-20 Improper Input Validation	CVE-2019-1933	2024-11-21 13:37	2019-07-6	Show	GitHub Exploit DB Packet Storm

221705	6.7	MEDIUM Local	cisco	advanced_malware_protection_for_endpoints	A vulnerability in Cisco Advanced Malware Protection (AMP) for Endpoints for Windows could allow an authenticated, local attacker with administrator privileges to execute arbitrary code. The vulnerab…	CWE-345 Insufficient Verification of Data Authenticity	CVE-2019-1932	2024-11-21 13:37	2019-07-6	Show	GitHub Exploit DB Packet Storm

221706	6.1	MEDIUM Network	cisco	firepower_management_center	Multiple vulnerabilities in the RSS dashboard in the web-based management interface of Cisco Firepower Management Center (FMC) could allow an unauthenticated, remote attacker to conduct a cross-site …	CWE-79 Cross-site Scripting	CVE-2019-1931	2024-11-21 13:37	2019-07-6	Show	GitHub Exploit DB Packet Storm

221707	6.1	MEDIUM Network	cisco	firepower_management_center	Multiple vulnerabilities in the RSS dashboard in the web-based management interface of Cisco Firepower Management Center (FMC) could allow an unauthenticated, remote attacker to conduct a cross-site …	CWE-79 Cross-site Scripting	CVE-2019-1930	2024-11-21 13:37	2019-07-6	Show	GitHub Exploit DB Packet Storm

221708	7.5	HIGH Network	cisco	ip_conference_phone_7832_firmware ip_conference_phone_8832_firmware ip_phone_7811_firmware ip_phone_7821_firmware ip_phone_7841_firmware ip_phone_7861_firmware ip_phone_8811_firmwar…	A vulnerability in Cisco SIP IP Phone Software for Cisco IP Phone 7800 Series and 8800 Series could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affect…	CWE-476 NULL Pointer Dereference	CVE-2019-1922	2024-11-21 13:37	2019-07-6	Show	GitHub Exploit DB Packet Storm

221709	7.5	HIGH Network	cisco	email_security_appliance	A vulnerability in the attachment scanning of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to bypass configured content filters on t…	CWE-20 Improper Input Validation	CVE-2019-1921	2024-11-21 13:37	2019-07-6	Show	GitHub Exploit DB Packet Storm

221710	7.8	HIGH Local	cisco	hosted_collaboration_solution	A vulnerability in the CLI of Cisco Unified Communications Domain Manager (Cisco Unified CDM) Software could allow an authenticated, local attacker to escape the restricted shell. The vulnerability i…	CWE-216 Containment Errors (Container Errors)	CVE-2019-1911	2024-11-21 13:37	2019-07-6	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed