Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 4, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
249591 7.8 危険 シスコシステムズ - Cisco IOS XR の NETIO および IPV4_IO プロセスにおけるサービス運用妨害 (CPU 資源の消費) の脆弱性 CWE-20
不適切な入力確認 		CVE-2011-3295 2012-05-8 11:28 2012-05-2 Show GitHub Exploit DB Packet Storm
249592 6.8 警告 シスコシステムズ - Cisco Secure Access Control Server におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2011-3293 2012-05-8 11:28 2012-05-2 Show GitHub Exploit DB Packet Storm
249593 3.6 注意 シスコシステムズ - Cisco IOS における No Service Password-Recovery 機能を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2011-3289 2012-05-8 11:25 2012-05-2 Show GitHub Exploit DB Packet Storm
249594 5 警告 シスコシステムズ - Cisco Adaptive Security Appliances 5500 series デバイスにおける CRLF インジェクションの脆弱性 CWE-20
CWE-94
CVE-2011-3285 2012-05-8 11:24 2012-05-2 Show GitHub Exploit DB Packet Storm
249595 5 警告 シスコシステムズ - Cisco Carrier Routing System におけるサービス運用妨害 (メトロサブシステムクラッシュ) の脆弱性 CWE-20
不適切な入力確認 		CVE-2011-3283 2012-05-8 11:24 2012-05-2 Show GitHub Exploit DB Packet Storm
249596 5.4 警告 シスコシステムズ - Cisco IOS の HTTP クライアントにおけるサービス運用妨害 (デバイスクラッシュ) の脆弱性 CWE-20
不適切な入力確認 		CVE-2011-2586 2012-05-8 11:23 2011-10-19 Show GitHub Exploit DB Packet Storm
249597 5 警告 シスコシステムズ - Cisco Unified Contact Center Express におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2011-2583 2012-05-8 11:22 2012-05-2 Show GitHub Exploit DB Packet Storm
249598 7.8 危険 シスコシステムズ - Cisco IOS におけるサービス運用妨害 (メモリ消費) の脆弱性 CWE-399
リソース管理の問題 		CVE-2011-2578 2012-05-8 11:22 2012-05-2 Show GitHub Exploit DB Packet Storm
249599 7.8 危険 シスコシステムズ - Cisco Adaptive Security Appliances 5500 シリーズデバイスにおけるサービス運用妨害 (DoS) の脆弱性 CWE-189
数値処理の問題 		CVE-2012-0378 2012-05-8 11:20 2012-05-3 Show GitHub Exploit DB Packet Storm
249600 5 警告 シスコシステムズ - Cisco Unified Communications Manager の voice-sipstack コンポーネントにおけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2012-0376 2012-05-8 11:19 2012-05-3 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 4, 2026, 4:17 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
209591 7.2 HIGH
Network 		mimosa b5_firmware
b5c_firmware
c5c_firmware 		The web console for Mimosa B5, B5c, and C5x firmware through 2.8.0.2 allows authenticated command injection in the Throughput, WANStats, PhyStats, and QosStats API classes. An attacker with access to… CWE-78
OS Command  		CVE-2020-25206 2024-11-21 14:17 2021-07-21 Show GitHub Exploit DB Packet Storm
209592 6.1 MEDIUM
Network 		mimosa b5_firmware
b5c_firmware
c5c_firmware 		The web console for Mimosa B5, B5c, and C5x firmware through 2.8.0.2 is vulnerable to stored XSS in the set_banner() function of /var/www/core/controller/index.php. An unauthenticated attacker may se… CWE-79
Cross-site Scripting 		CVE-2020-25205 2024-11-21 14:17 2021-07-21 Show GitHub Exploit DB Packet Storm
209593 7.8 HIGH
Local 		bookingcore booking_core The “Subscribe” feature in Ultimate Booking System Booking Core 1.7.0 is vulnerable to CSV formula injection. The input containing the excel formula is not being sanitized by the application. As a re… CWE-1236
 Improper Neutralization of Formula Elements in a CSV File 		CVE-2020-25445 2024-11-21 14:17 2021-07-15 Show GitHub Exploit DB Packet Storm
209594 5.4 MEDIUM
Network 		bookingcore booking_core Cross Site Scripting (XSS) vulnerability in Booking Core - Ultimate Booking System Booking Core 1.7.0 via the (1) "About Yourself” section under the “My Profile” page, " (2) “Hotel Policy” field unde… CWE-79
Cross-site Scripting 		CVE-2020-25444 2024-11-21 14:17 2021-07-15 Show GitHub Exploit DB Packet Storm
209595 5.4 MEDIUM
Network 		mozilo mozilocms A stored cross site scripting (XSS) vulnerability in moziloCMS 2.0 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the "Content" parameter. CWE-79
Cross-site Scripting 		CVE-2020-25394 2024-11-21 14:17 2021-07-10 Show GitHub Exploit DB Packet Storm
209596 5.4 MEDIUM
Network 		cszcms csz_cms A cross site scripting (XSS) vulnerability in CSZ CMS 1.2.9 allows attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the 'New Article' field under the 'Article' pl… CWE-79
Cross-site Scripting 		CVE-2020-25392 2024-11-21 14:17 2021-07-10 Show GitHub Exploit DB Packet Storm
209597 5.4 MEDIUM
Network 		cszcms csz_cms A cross site scripting vulnerability in CSZ CMS 1.2.9 allows attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the 'New Pages' field under the 'Pages Content' modu… CWE-79
Cross-site Scripting 		CVE-2020-25391 2024-11-21 14:17 2021-07-10 Show GitHub Exploit DB Packet Storm
209598 9.8 CRITICAL
Network 		monstra monstra A local file inclusion vulnerability was discovered in the captcha function in Monstra 3.0.4 which allows remote attackers to execute arbitrary PHP code. CWE-829
 Inclusion of Functionality from Untrusted Control Sphere 		CVE-2020-25414 2024-11-21 14:17 2021-06-18 Show GitHub Exploit DB Packet Storm
209599 7.5 HIGH
Network 		online_shopping_alphaware_project online_shopping_alphaware The id paramater in Online Shopping Alphaware 1.0 has been discovered to be vulnerable to an Error-Based blind SQL injection in the /alphaware/details.php path. This allows an attacker to retrieve al… CWE-89
SQL Injection 		CVE-2020-25362 2024-11-21 14:17 2021-06-3 Show GitHub Exploit DB Packet Storm
209600 6.5 MEDIUM
Network 		online_examination_system_project online_examination_system Projectworlds Online Examination System 1.0 is vulnerable to CSRF, which allows a remote attacker to delete the existing user. CWE-352
 Origin Validation Error 		CVE-2020-25411 2024-11-21 14:17 2021-05-24 Show GitHub Exploit DB Packet Storm