Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 6, 2026, 2 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
230011	6.5	警告	シトリックス・システムズ	-	Citrix MetaFrame における権限を取得される脆弱性	-	CVE-2006-3779	2012-12-20 18:02	2006-07-24	Show	GitHub Exploit DB Packet Storm

230012	7.5	危険	idevSpot	-	IDevSpot PhpLinkExchange の index.php における PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2006-3777	2012-12-20 18:02	2006-07-24	Show	GitHub Exploit DB Packet Storm

230013	7.5	危険	idevSpot	-	IDevSpot PhpHostBot および AutoHost の order/index.php における PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2006-3776	2012-12-20 18:02	2006-07-24	Show	GitHub Exploit DB Packet Storm

230014	7.5	危険	mybulletinboard	-	MyBB の class_session.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2006-3775	2012-12-20 18:02	2006-07-24	Show	GitHub Exploit DB Packet Storm

230015	6.8	警告	Joomla!	-	Joomla! 用の com_performs における PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2006-3774	2012-12-20 18:02	2006-07-24	Show	GitHub Exploit DB Packet Storm

230016	6.8	警告	Mambo Foundation	-	Joomla! および Mambo 用の Bridge コンポーネントにおける PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2006-3773	2012-12-20 18:02	2006-07-10	Show	GitHub Exploit DB Packet Storm

230017	5.1	警告	php-post	-	PHP-Post における管理者権限を取得される脆弱性	-	CVE-2006-3772	2012-12-20 18:02	2006-07-24	Show	GitHub Exploit DB Packet Storm

230018	7.5	危険	imaginex-resource	-	iManage CMS の component.php における PHP リモートファイルインクルージョンの脆弱性	-	CVE-2006-3771	2012-12-20 18:02	2006-07-24	Show	GitHub Exploit DB Packet Storm

230019	7.5	危険	phpfaber	-	phpFaber TopSites の index.php における SQL インジェクションの脆弱性	-	CVE-2006-3770	2012-12-20 18:02	2006-07-24	Show	GitHub Exploit DB Packet Storm

230020	2.6	注意	top xl	-	Top XL におけるクロスサイトスクリプティングの脆弱性	-	CVE-2006-3769	2012-12-20 18:02	2006-07-24	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 6, 2026, 4:08 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
198551	5.4	MEDIUM Network	cisco	data_center_network_manager	A vulnerability in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against …	CWE-79 Cross-site Scripting	CVE-2020-3113	2024-11-21 14:30	2020-02-20	Show	GitHub Exploit DB Packet Storm

198552	8.8	HIGH Network	cisco	data_center_network_manager	A vulnerability in the REST API endpoint of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote attacker to elevate privileges on the application. The vulnerability is due t…	CWE-269 Improper Privilege Management	CVE-2020-3112	2024-11-21 14:30	2020-02-20	Show	GitHub Exploit DB Packet Storm

198553	4.8	MEDIUM Network	cisco	identity_services_engine	A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) Software could allow an authenticated, remote attacker to perform a stored cross-site scripting (XSS) att…	CWE-79 Cross-site Scripting	CVE-2020-3149	2024-11-21 14:30	2020-02-6	Show	GitHub Exploit DB Packet Storm

198554	7.5	HIGH Network	clamav canonical	clamav ubuntu_linux	A vulnerability in the Data-Loss-Prevention (DLP) module in Clam AntiVirus (ClamAV) Software versions 0.102.1 and 0.102.0 could allow an unauthenticated, remote attacker to cause a denial of service …	CWE-125 Out-of-bounds Read	CVE-2020-3123	2024-11-21 14:30	2020-02-6	Show	GitHub Exploit DB Packet Storm

198555	6.5	MEDIUM Adjacent	cisco	firepower_extensible_operating_system fxos ios_xr nx-os ucs_manager	A vulnerability in the Cisco Discovery Protocol implementation for Cisco FXOS Software, Cisco IOS XR Software, and Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to cause a re…	CWE-190 Integer Overflow or Wraparound	CVE-2020-3120	2024-11-21 14:30	2020-02-6	Show	GitHub Exploit DB Packet Storm

198556	8.8	HIGH Adjacent	cisco	nx-os ucs_manager	A vulnerability in the Cisco Discovery Protocol implementation for Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to execute arbitrary code or cause a reload on an affected de…	CWE-787 Out-of-bounds Write	CVE-2020-3119	2024-11-21 14:30	2020-02-6	Show	GitHub Exploit DB Packet Storm

198557	8.8	HIGH Adjacent	cisco	ios_xr	A vulnerability in the Cisco Discovery Protocol implementation for Cisco IOS XR Software could allow an unauthenticated, adjacent attacker to execute arbitrary code or cause a reload on an affected d…	CWE-787 Out-of-bounds Write	CVE-2020-3118	2024-11-21 14:30	2020-02-6	Show	GitHub Exploit DB Packet Storm

198558	8.8	HIGH Adjacent	cisco	ip_conference_phone_7832_firmware ip_conference_phone_7832_with_multiplatform_firmware ip_conference_phone_8832_firmware ip_conference_phone_8832_with_multiplatform_firmware ip_phone_6821…	A vulnerability in the Cisco Discovery Protocol implementation for the Cisco IP Phone could allow an unauthenticated, adjacent attacker to remotely execute code with root privileges or cause a reload…	CWE-20 Improper Input Validation	CVE-2020-3111	2024-11-21 14:30	2020-02-6	Show	GitHub Exploit DB Packet Storm

198559	8.8	HIGH Adjacent	cisco	video_surveillance_8400_ip_camera_firmware video_surveillance_8030_ip_camera_firmware video_surveillance_8020_ip_camera_firmware video_surveillance_8000p_ip_camera_firmware video_surveill…	A vulnerability in the Cisco Discovery Protocol implementation for the Cisco Video Surveillance 8000 Series IP Cameras could allow an unauthenticated, adjacent attacker to execute code remotely or ca…	CWE-20 Improper Input Validation	CVE-2020-3110	2024-11-21 14:30	2020-02-6	Show	GitHub Exploit DB Packet Storm

198560	7.5	HIGH Network	cisco	sg200-50_firmware sg200-50p_firmware sg200-50fp_firmware sg200-26_firmware sg200-26p_firmware sg200-26fp_firmware sg200-18_firmware sg200-10fp_firmware sg200-08_firmware sg…	A vulnerability in the web UI of Cisco Small Business Switches could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is…	CWE-20 Improper Input Validation	CVE-2020-3147	2024-11-21 14:30	2020-01-31	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed