Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 30, 2026, 4 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
229881	6.8	警告	positive software	-	Positive Software H-Sphere WebShell の actions.php におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2008-4448	2012-12-20 18:52	2008-10-6	Show	GitHub Exploit DB Packet Storm

229882	4.3	警告	positive software	-	Positive Software H-Sphere WebShell の actions.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-4447	2012-12-20 18:52	2008-10-6	Show	GitHub Exploit DB Packet Storm

229883	4.3	警告	rmsoft	-	Xoops 用の rmdp モジュールにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-4435	2012-12-20 18:52	2008-10-3	Show	GitHub Exploit DB Packet Storm

229884	7.5	危険	rmsoft	-	Xoops 用の RMSOFT MiniShop モジュールにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-4433	2012-12-20 18:52	2008-10-3	Show	GitHub Exploit DB Packet Storm

229885	4.3	警告	rmsoft	-	Xoops 用の RMSOFT MiniShop モジュールにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-4432	2012-12-20 18:52	2008-10-3	Show	GitHub Exploit DB Packet Storm

229886	5	警告	トレンドマイクロ	-	Trend Micro OfficeScan のサーバにおけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2008-4403	2012-12-20 18:52	2008-09-30	Show	GitHub Exploit DB Packet Storm

229887	10	危険	トレンドマイクロ	-	Trend Micro OfficeScan のサーバにおけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2008-4402	2012-12-20 18:52	2008-09-30	Show	GitHub Exploit DB Packet Storm

229888	9.3	危険	safer networking	-	Safer Networking FileAlyzer におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2008-4396	2012-12-20 18:52	2008-10-2	Show	GitHub Exploit DB Packet Storm

229889	4.3	警告	ベリサイン	-	VeriSign Kontiki DMS におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-4393	2012-12-20 18:52	2008-10-7	Show	GitHub Exploit DB Packet Storm

229890	9.3	危険	simba technologies SAP	-	SAP SAPgui の mdrmsap.dll における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2008-4387	2012-12-20 18:52	2008-11-10	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 30, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
224691	7.8	HIGH Local	cisco	firepower_management_center	A vulnerability in the CLI of Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local attacker to perform a command injection attack. The vulnerability is due to insufficien…	CWE-78 OS Command	CVE-2019-1699	2024-11-21 13:37	2019-05-4	Show	GitHub Exploit DB Packet Storm

224692	7.2	HIGH Network	cisco	sg200-50_firmware sg200-50p_firmware sg200-50fp_firmware sg200-26_firmware sg200-26p_firmware sg200-26fp_firmware sg200-18_firmware sg200-10fp_firmware sg200-08_firmware sg…	A vulnerability in the Secure Shell (SSH) authentication process of Cisco Small Business Switches software could allow an attacker to bypass client-side certificate authentication and revert to passw…	CWE-295 Improper Certificate Validation	CVE-2019-1859	2024-11-21 13:37	2019-05-4	Show	GitHub Exploit DB Packet Storm

224693	8.8	HIGH Network	cisco	hx220c_m5_firmware hx240c_m5_firmware hx240c_large_form_factor_firmware hx220c_all_nvme_m5_firmware hx220c_af_m5_firmware hx240c_af_m5_firmware hx220c_edge_m5_firmware ucs_b200_m…	A vulnerability in the web-based management interface of Cisco HyperFlex HX-Series could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack and perform ar…	CWE-352 Origin Validation Error	CVE-2019-1857	2024-11-21 13:37	2019-05-4	Show	GitHub Exploit DB Packet Storm

224694	7.4	HIGH Adjacent	cisco	firepower_management_center firepower_threat_defense	Multiple vulnerabilities in the Server Message Block (SMB) Protocol preprocessor detection engine for Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, adjacent or remote …	CWE-400 Uncontrolled Resource Consumption	CVE-2019-1696	2024-11-21 13:37	2019-05-4	Show	GitHub Exploit DB Packet Storm

224695	6.1	MEDIUM Network	cisco	prime_collaboration_assurance	A vulnerability in the web-based management interface of Cisco Prime Collaboration Assurance (PCA) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack again…	CWE-79 Cross-site Scripting	CVE-2019-1856	2024-11-21 13:37	2019-05-4	Show	GitHub Exploit DB Packet Storm

224696	4.3	MEDIUM Network	cisco	telepresence_video_communication_server	A vulnerability in the management web interface of Cisco Expressway Series could allow an authenticated, remote attacker to perform a directory traversal attack against an affected device. The vulner…	CWE-22 Path Traversal	CVE-2019-1854	2024-11-21 13:37	2019-05-4	Show	GitHub Exploit DB Packet Storm

224697	6.1	MEDIUM Network	cisco	network_registrar	A vulnerability in the web-based management interface of Cisco Prime Network Registrar could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of…	CWE-79 Cross-site Scripting	CVE-2019-1852	2024-11-21 13:37	2019-05-4	Show	GitHub Exploit DB Packet Storm

224698	5.3	MEDIUM Network	cisco	email_security_appliance	A vulnerability in certain attachment detection mechanisms of the Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to bypass the filtering functionality of an affe…	CWE-20 Improper Input Validation	CVE-2019-1844	2024-11-21 13:37	2019-05-4	Show	GitHub Exploit DB Packet Storm

224699	5.4	MEDIUM Network	cisco	application_policy_infrastructure_controller	A vulnerability in the web-based management interface of Cisco Application Policy Infrastructure Controller (APIC) could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS…	CWE-79 Cross-site Scripting	CVE-2019-1838	2024-11-21 13:37	2019-05-4	Show	GitHub Exploit DB Packet Storm

224700	7.1	HIGH Local	cisco	nx-os	A vulnerability in the system shell for Cisco Nexus 9000 Series Fabric Switches in Application Centric Infrastructure (ACI) mode could allow an authenticated, local attacker to use symbolic links to …	CWE-59 Link Following	CVE-2019-1836	2024-11-21 13:37	2019-05-4	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed