Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":April 30, 2026, 10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
251801	2.1	注意	The PHP Group サイバートラスト株式会社ターボリナックスレッドハット	-	PHP における同じ Web サーバ上でホストされた別サイトの振る舞いを変更される脆弱性	CWE-134 書式文字列の問題	CVE-2009-0754	2010-10-19 15:17	2009-03-3	Show	GitHub Exploit DB Packet Storm

251802	5	警告	The PHP Group アップルターボリナックスレッドハット	-	PHP の JSON_parser 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2009-1271	2010-10-19 15:16	2009-04-8	Show	GitHub Exploit DB Packet Storm

251803	7.5	危険	アップルサイバートラスト株式会社ターボリナックスサン・マイクロシステムズレッドハット	-	FreeType2 における一つずれエラーの脆弱性	CWE-189 数値処理の問題	CVE-2008-1808	2010-10-19 15:15	2008-06-17	Show	GitHub Exploit DB Packet Storm

251804	7.5	危険	アップルサイバートラスト株式会社ターボリナックスサン・マイクロシステムズレッドハット	-	FreeType2 におけるメモリ破壊の脆弱性	CWE-189 数値処理の問題	CVE-2008-1807	2010-10-19 15:15	2008-06-17	Show	GitHub Exploit DB Packet Storm

251805	7.5	危険	アップルサイバートラスト株式会社ターボリナックスサン・マイクロシステムズレッドハット	-	FreeType2 におけるヒープベースのバッファオーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2008-1806	2010-10-19 15:15	2008-06-17	Show	GitHub Exploit DB Packet Storm

251806	2.6	注意	The PHP Group サイバートラスト株式会社ターボリナックスレッドハット	-	PHP におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-5814	2010-10-19 15:14	2008-12-19	Show	GitHub Exploit DB Packet Storm

251807	9.3	危険	Google	-	Google Chrome の Gears プラグインにおける任意のコードを実行される脆弱性	CWE-Other その他	CVE-2009-3932	2010-10-19 15:02	2009-11-5	Show	GitHub Exploit DB Packet Storm

251808	4.3	警告	Google	-	Google Chrome の src/webkit/glue/webframeloaderclient_impl.cc におけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2009-3934	2010-10-19 15:02	2009-11-5	Show	GitHub Exploit DB Packet Storm

251809	9.3	危険	Google	-	Google Chrome のブラックリストにおける危険なファイルのダウンロードを強制される脆弱性	CWE-20 不適切な入力確認	CVE-2009-3931	2010-10-19 15:01	2009-11-5	Show	GitHub Exploit DB Packet Storm

251810	7.5	危険	Google	-	Google Chrome における X.509 証明書の処理に関する任意の SSL サーバになりすまされる脆弱性	CWE-310 暗号の問題	CVE-2009-3456	2010-10-19 15:01	2009-09-29	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:April 30, 2026, 4:58 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
197361	7.5	HIGH Network	cisco	email_security_appliance	A vulnerability in the email message scanning of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to bypass configured filters on the de…	CWE-20 Improper Input Validation	CVE-2020-3133	2024-11-21 14:30	2020-09-23	Show	GitHub Exploit DB Packet Storm

197362	6.5	MEDIUM Network	cisco	unity_connection	A vulnerability in the web management interface of Cisco Unity Connection could allow an authenticated remote attacker to overwrite files on the underlying filesystem. The vulnerability is due to ins…	CWE-20 Improper Input Validation	CVE-2020-3130	2024-11-21 14:30	2020-09-23	Show	GitHub Exploit DB Packet Storm

197363	6.5	MEDIUM Network	cisco	hosted_collaboration_mediation_fulfillment	A vulnerability in the web-based interface of Cisco Hosted Collaboration Mediation Fulfillment (HCM-F) could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) a…	CWE-352 Origin Validation Error	CVE-2020-3124	2024-11-21 14:30	2020-09-23	Show	GitHub Exploit DB Packet Storm

197364	4.7	MEDIUM Network	cisco	web_security_appliance content_security_management_appliance	A vulnerability in the API Framework of Cisco AsyncOS for Cisco Web Security Appliance (WSA) and Cisco Content Security Management Appliance (SMA) could allow an unauthenticated, remote attacker to i…	NVD-CWE-Other	CVE-2020-3117	2024-11-21 14:30	2020-09-23	Show	GitHub Exploit DB Packet Storm

197365	5.5	MEDIUM Local	cisco	webex_meetings_server webex_meetings_online	A vulnerability in the way Cisco Webex applications process Universal Communications Format (UCF) files could allow an attacker to cause a denial of service (DoS) condition. The vulnerability is due …	CWE-20 Improper Input Validation	CVE-2020-3116	2024-11-21 14:30	2020-09-23	Show	GitHub Exploit DB Packet Storm

197366	6.5	MEDIUM Network	cisco	enterprise_network_function_virtualization_infrastructure	A vulnerability in the directory permissions of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, remote attacker to perform a directory traversal attack on a limited…	CWE-22 Path Traversal	CVE-2020-3365	2024-11-21 14:30	2020-09-4	Show	GitHub Exploit DB Packet Storm

197367	8.8	HIGH Adjacent	cisco	nx-os	A vulnerability in the Data Management Engine (DME) of Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to execute arbitrary code with administrative privileges or cause a denia…	CWE-787 Out-of-bounds Write	CVE-2020-3415	2024-11-21 14:30	2020-08-28	Show	GitHub Exploit DB Packet Storm

197368	8.6	HIGH Network	cisco	nx-os	A vulnerability in the Border Gateway Protocol (BGP) Multicast VPN (MVPN) implementation of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a BGP session to repeatedly r…	CWE-20 Improper Input Validation	CVE-2020-3398	2024-11-21 14:30	2020-08-28	Show	GitHub Exploit DB Packet Storm

197369	8.6	HIGH Network	cisco	nx-os	A vulnerability in the Border Gateway Protocol (BGP) Multicast VPN (MVPN) implementation of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause an affected device to unexpec…	CWE-20 Improper Input Validation	CVE-2020-3397	2024-11-21 14:30	2020-08-28	Show	GitHub Exploit DB Packet Storm

197370	7.8	HIGH Local	cisco	nx-os	A vulnerability in the Enable Secret feature of Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series Switches in standalone NX-OS mode could allow an authenticated, local attacker to issue th…	CWE-862 Missing Authorization	CVE-2020-3394	2024-11-21 14:30	2020-08-28	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed