Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 22, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
252481 7.5 危険 osCommerce - osCommerce における複数のディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2011-4543 2011-12-6 16:33 2011-12-5 Show GitHub Exploit DB Packet Storm
252482 7.5 危険 Zabbix - Zabbix の popup.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2011-4674 2011-12-6 16:27 2011-11-24 Show GitHub Exploit DB Packet Storm
252483 7.5 危険 Automattic Inc. - WordPress 用 Jetpack プラグインにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2011-4673 2011-12-6 16:26 2011-12-2 Show GitHub Exploit DB Packet Storm
252484 7.5 危険 Valid - Valid tiny-erp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2011-4672 2011-12-6 16:25 2011-12-2 Show GitHub Exploit DB Packet Storm
252485 7.5 危険 AdRotate Plugin - WordPress 用 AdRotate プラグインにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2011-4671 2011-12-6 16:24 2011-12-2 Show GitHub Exploit DB Packet Storm
252486 10 危険 Iron Mountain - Iron Mountain Connected Backup の Agent service における任意のコードを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2011-2397 2011-12-6 16:22 2011-12-5 Show GitHub Exploit DB Packet Storm
252487 6.4 警告 Widelands - Widelands の io/filesystem/filesystem.cc におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2011-1932 2011-12-6 16:22 2011-12-5 Show GitHub Exploit DB Packet Storm
252488 4.3 警告 Etomite Project - Etomite におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-4264 2011-12-6 12:01 2011-12-6 Show GitHub Exploit DB Packet Storm
252489 7.5 危険 jonkemp - WordPress 用 WordPress Users プラグインの wp-users.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2011-4669 2011-12-5 16:08 2011-12-2 Show GitHub Exploit DB Packet Storm
252490 7.5 危険 IBM - IBM Tivoli Netcool/Reporter における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2011-4668 2011-12-5 16:07 2011-12-2 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 23, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
201891 7.8 HIGH
Local 		qualcomm apq8098_firmware
kamorta_firmware
msm8998_firmware
qcs404_firmware
qcs605_firmware
sda660_firmware
sda845_firmware
sdm630_firmware
sdm636_firmware
sdm660_firmware
sdm670… 		u'XBL SEC clears only ZI region when loading Qualcomm-signed segments can lead to improper access issue' in Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, … NVD-CWE-noinfo
CVE-2020-3611 2024-11-21 14:31 2020-09-8 Show GitHub Exploit DB Packet Storm
201892 6.5 MEDIUM
Network 		cisco jabber A vulnerability in Cisco Jabber software could allow an authenticated, remote attacker to gain access to sensitive information. The vulnerability is due to improper validation of message contents. An… CWE-20
 Improper Input Validation  		CVE-2020-3498 2024-11-21 14:31 2020-09-4 Show GitHub Exploit DB Packet Storm
201893 6.8 MEDIUM
Adjacent 		cisco rv340w_firmware
rv340_firmware
rv345_firmware
rv345p_firmware 		Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV340 Series Routers could allow an authenticated, remote attacker with administrative credentials to execute ar… CWE-20
 Improper Input Validation  		CVE-2020-3453 2024-11-21 14:31 2020-09-4 Show GitHub Exploit DB Packet Storm
201894 4.7 MEDIUM
Network 		cisco rv340w_firmware
rv340_firmware
rv345_firmware
rv345p_firmware 		Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV340 Series Routers could allow an authenticated, remote attacker with administrative credentials to execute ar… CWE-20
 Improper Input Validation  		CVE-2020-3451 2024-11-21 14:31 2020-09-4 Show GitHub Exploit DB Packet Storm
201895 6.5 MEDIUM
Network 		cisco asyncos A vulnerability in the web-based management interface of Cisco AsyncOS software for Cisco Email Security Appliance (ESA), Cisco Content Security Management Appliance (SMA), and Cisco Web Security App… CWE-522
 Insufficiently Protected Credentials 		CVE-2020-3547 2024-11-21 14:31 2020-09-4 Show GitHub Exploit DB Packet Storm
201896 5.3 MEDIUM
Network 		cisco asyncos A vulnerability in the web-based management interface of Cisco AsyncOS software for Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to access sensitive informatio… CWE-20
 Improper Input Validation  		CVE-2020-3546 2024-11-21 14:31 2020-09-4 Show GitHub Exploit DB Packet Storm
201897 6.7 MEDIUM
Local 		cisco firepower_extensible_operating_system A vulnerability in Cisco FXOS Software could allow an authenticated, local attacker with administrative credentials to cause a buffer overflow condition. The vulnerability is due to incorrect bounds … CWE-787
 Out-of-bounds Write 		CVE-2020-3545 2024-11-21 14:31 2020-09-4 Show GitHub Exploit DB Packet Storm
201898 5.3 MEDIUM
Network 		cisco webex_training A vulnerability in Cisco Webex Training could allow an authenticated, remote attacker to join a password-protected meeting without providing the meeting password. The vulnerability is due to improper… CWE-20
 Improper Input Validation  		CVE-2020-3542 2024-11-21 14:31 2020-09-4 Show GitHub Exploit DB Packet Storm
201899 4.4 MEDIUM
Local 		cisco webex_meetings
webex_teams 		A vulnerability in the media engine component of Cisco Webex Meetings Client for Windows, Cisco Webex Meetings Desktop App for Windows, and Cisco Webex Teams for Windows could allow an authenticated,… CWE-532
 Inclusion of Sensitive Information in Log Files 		CVE-2020-3541 2024-11-21 14:31 2020-09-4 Show GitHub Exploit DB Packet Storm
201900 5.7 MEDIUM
Network 		cisco jabber A vulnerability in Cisco Jabber for Windows software could allow an authenticated, remote attacker to gain access to sensitive information. The vulnerability is due to improper validation of message … CWE-200
Information Exposure 		CVE-2020-3537 2024-11-21 14:31 2020-09-4 Show GitHub Exploit DB Packet Storm