Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 12, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
230511 7.8 危険 Xerox - Xerox WorkCentre および WorkCentre Pro の Web services における重要な情報を取得される脆弱性 - CVE-2006-6430 2012-12-20 18:02 2006-12-10 Show GitHub Exploit DB Packet Storm
230512 5 警告 Xerox - Xerox WorkCentre などにおける特定の設定内容を変更される脆弱性 - CVE-2006-6429 2012-12-20 18:02 2006-12-10 Show GitHub Exploit DB Packet Storm
230513 7.5 危険 Xerox - Xerox WorkCentre などにおけるアクセス権を取得される脆弱性 - CVE-2006-6428 2012-12-20 18:02 2006-12-10 Show GitHub Exploit DB Packet Storm
230514 7.5 危険 Xerox - Xerox WorkCentre および WorkCentre Pro の Web User Interface における任意のコマンドを実行される脆弱性 CWE-78
OSコマンド・インジェクション
CVE-2006-6427 2012-12-20 18:02 2006-12-10 Show GitHub Exploit DB Packet Storm
230515 6.8 警告 thinkedit - ThinkEdit の design/thinkedit/render.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-6426 2012-12-20 18:02 2006-12-10 Show GitHub Exploit DB Packet Storm
230516 6 警告 phpBB - phpBB のプライベートメッセージボックス実装 (privmsg.php) におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-6421 2012-12-20 18:02 2006-12-10 Show GitHub Exploit DB Packet Storm
230517 6.8 警告 Widget Factory Limited - Joomla! 用の Ryan Demmer JCE におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-6420 2012-12-20 18:02 2006-12-10 Show GitHub Exploit DB Packet Storm
230518 7.5 危険 Widget Factory Limited - Joomla! 用の Ryan Demmer JCE における任意のローカルファイルをインクルードされる脆弱性 - CVE-2006-6419 2012-12-20 18:02 2006-12-10 Show GitHub Exploit DB Packet Storm
230519 7.5 危険 phpleague - univert - PhpLeague - Univert PhpLeague における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-6416 2012-12-20 18:02 2006-12-10 Show GitHub Exploit DB Packet Storm
230520 4.6 警告 VMware - VMWare の ActiveX コントロールにおけるバッファオーバーフローの脆弱性 - CVE-2006-6410 2012-12-20 18:02 2006-12-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 12, 2026, 5:06 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
199371 8.8 HIGH
Network
cisco firepower_extensible_operating_system A vulnerability in the Cisco Firepower Chassis Manager (FCM) of Cisco FXOS Software could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack against a use… CWE-352
 Origin Validation Error
CVE-2020-3456 2024-11-21 14:31 2020-10-22 Show GitHub Exploit DB Packet Storm
199372 7.8 HIGH
Local
cisco firepower_extensible_operating_system A vulnerability in the secure boot process of Cisco FXOS Software could allow an authenticated, local attacker to bypass the secure boot mechanisms. The vulnerability is due to insufficient protectio… NVD-CWE-Other
CVE-2020-3455 2024-11-21 14:31 2020-10-22 Show GitHub Exploit DB Packet Storm
199373 8.6 HIGH
Network
cisco firepower_threat_defense
adaptive_security_appliance
adaptive_security_appliance_software
A vulnerability in the web services interface of Cisco Adaptive Security Appliance (ASA) and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to upload ar… CWE-434
 Unrestricted Upload of File with Dangerous Type 
CVE-2020-3436 2024-11-21 14:31 2020-10-22 Show GitHub Exploit DB Packet Storm
199374 6.3 MEDIUM
Local
cisco duo_network_gateway Duo has identified and fixed an issue with the Duo Network Gateway (DNG) product in which some customer-provided SSL certificates and private keys were not excluded from logging. This issue resulted … CWE-522
 Insufficiently Protected Credentials
CVE-2020-3483 2024-11-21 14:31 2020-10-15 Show GitHub Exploit DB Packet Storm
199375 7.8 HIGH
Local
cisco duo_authentication_for_windows_logon_and_rdp The Windows Logon installer prior to 4.1.2 did not properly validate file installation paths. This allows an attacker with local user privileges to coerce the installer to write to arbitrary privileg… NVD-CWE-noinfo
CVE-2020-3427 2024-11-21 14:31 2020-10-15 Show GitHub Exploit DB Packet Storm
199376 6.7 MEDIUM
Local
cisco staros A vulnerability in the CLI of Cisco StarOS operating system for Cisco ASR 5000 Series Routers could allow an authenticated, local attacker to elevate privileges on an affected device. The vulnerabili… CWE-78
OS Command 
CVE-2020-3602 2024-11-21 14:31 2020-10-8 Show GitHub Exploit DB Packet Storm
199377 6.7 MEDIUM
Local
cisco staros A vulnerability in the CLI of Cisco StarOS operating system for Cisco ASR 5000 Series Routers could allow an authenticated, local attacker to elevate privileges on an affected device. The vulnerabili… CWE-78
OS Command 
CVE-2020-3601 2024-11-21 14:31 2020-10-8 Show GitHub Exploit DB Packet Storm
199378 6.5 MEDIUM
Network
cisco vision_dynamic_signage_director A vulnerability in the web-based management interface of Cisco Vision Dynamic Signage Director could allow an unauthenticated, remote attacker to access confidential information or make configuration… CWE-306
Missing Authentication for Critical Function
CVE-2020-3598 2024-11-21 14:31 2020-10-8 Show GitHub Exploit DB Packet Storm
199379 5.4 MEDIUM
Network
cisco nexus_data_broker A vulnerability in the configuration restore feature of Cisco Nexus Data Broker software could allow an unauthenticated, remote attacker to perform a directory traversal attack on an affected device.… CWE-22
Path Traversal
CVE-2020-3597 2024-11-21 14:31 2020-10-8 Show GitHub Exploit DB Packet Storm
199380 7.5 HIGH
Network
cisco expressway
telepresence_video_communication_server
A vulnerability in the Session Initiation Protocol (SIP) of Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) could allow an unauthenticated, remote attacker to cause a … CWE-670
 Always-Incorrect Control Flow Implementation
CVE-2020-3596 2024-11-21 14:31 2020-10-8 Show GitHub Exploit DB Packet Storm