Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 25, 2026, 2:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
255351	4.3	警告	The PHP Group サイバートラスト株式会社ターボリナックスヒューレット・パッカードレッドハット	-	PHP の exif_read_data 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2009-2687	2010-12-15 12:39	2009-08-5	Show	GitHub Exploit DB Packet Storm

255352	9.3	危険	アップルサイバートラスト株式会社レッドハットオラクル Info-ZIP	-	UnZip の NEEDBITS マクロにおける無効なバッファ領域を参照してしまう問題	CWE-119 バッファエラー	CVE-2008-0888	2010-12-15 12:37	2008-03-17	Show	GitHub Exploit DB Packet Storm

255353	6	警告	PostgreSQL.org サイバートラスト株式会社レッドハットターボリナックスオラクル	-	PostgreSQL における任意の Tcl コードを実行される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-1170	2010-12-15 12:35	2010-05-17	Show	GitHub Exploit DB Packet Storm

255354	8.5	危険	PostgreSQL.org サイバートラスト株式会社レッドハットターボリナックスオラクル	-	PostgreSQL における任意の Perl コードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-1169	2010-12-15 12:31	2010-05-17	Show	GitHub Exploit DB Packet Storm

255355	6.5	警告	Openswan レッドハット	-	Openswan のクライアント内にある programs/pluto/xauth.c における任意のコマンドを実行される脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2010-3753	2010-12-14 14:24	2010-09-27	Show	GitHub Exploit DB Packet Storm

255356	6.5	警告	Openswan レッドハット	-	Openswan のクライアント内にある programs/pluto/xauth.c における任意のコマンドを実行される脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2010-3752	2010-12-14 14:22	2010-09-27	Show	GitHub Exploit DB Packet Storm

255357	6.5	警告	Openswan レッドハット	-	Openswan のクライアント内にある programs/pluto/xauth.c におけるバッファオーバーフローの脆弱性	CWE-94 コード・インジェクション	CVE-2010-3308	2010-12-14 14:20	2010-09-27	Show	GitHub Exploit DB Packet Storm

255358	6.5	警告	Openswan レッドハット	-	Openswan のクライアント内にある programs/pluto/xauth.c におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-3302	2010-12-14 14:15	2010-09-27	Show	GitHub Exploit DB Packet Storm

255359	4.3	警告	freedesktop.org レッドハット	-	Poppler の PDF パーサ内にある poppler/Function.cc におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2010-3703	2010-12-13 16:04	2010-11-5	Show	GitHub Exploit DB Packet Storm

255360	8.3	危険	Linux レッドハット	-	Linux kernel の sctp_auth_asoc_get_hmac 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2010-3705	2010-12-13 15:57	2010-10-20	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 25, 2026, 4:01 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
202301	8.8	HIGH Network	cisco	data_center_network_manager	A vulnerability in the Device Manager application of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote attacker to inject arbitrary commands on the affected device. The vu…	CWE-78 OS Command	CVE-2020-3377	2024-11-21 14:30	2020-07-31	Show	GitHub Exploit DB Packet Storm

202302	9.8	CRITICAL Network	cisco	data_center_network_manager	A vulnerability in the Device Manager application of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to bypass authentication and execute arbitrary actions on…	CWE-306 Missing Authentication for Critical Function	CVE-2020-3376	2024-11-21 14:30	2020-07-31	Show	GitHub Exploit DB Packet Storm

202303	9.8	CRITICAL Network	cisco	sd-wan ios_xe_sd-wan	A vulnerability in Cisco SD-WAN Solution Software could allow an unauthenticated, remote attacker to cause a buffer overflow on an affected device. The vulnerability is due to insufficient input vali…	CWE-20 Improper Input Validation	CVE-2020-3375	2024-11-21 14:30	2020-07-31	Show	GitHub Exploit DB Packet Storm

202304	9.9	CRITICAL Network	cisco	sd-wan	A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to bypass authorization, enabling them to access sensitive informa…	CWE-863 Incorrect Authorization	CVE-2020-3374	2024-11-21 14:30	2020-07-31	Show	GitHub Exploit DB Packet Storm

202305	7.8	HIGH Local	cisco	sd-wan_firmware vbond_orchestrator vsmart_controller	A vulnerability in Cisco SD-WAN Solution Software could allow an authenticated, local attacker to elevate privileges to Administrator on the underlying operating system. The vulnerability is due to i…	CWE-20 Improper Input Validation	CVE-2020-3379	2024-11-21 14:30	2020-07-17	Show	GitHub Exploit DB Packet Storm

202306	5.8	MEDIUM Network	cisco	email_security_appliance	A vulnerability in URL filtering of Cisco Content Security Management Appliance (SMA) could allow an unauthenticated, remote attacker to bypass URL filtering on an affected device. The vulnerability …	CWE-20 Improper Input Validation	CVE-2020-3370	2024-11-21 14:30	2020-07-17	Show	GitHub Exploit DB Packet Storm

202307	5.4	MEDIUM Network	cisco	sd-wan_firmware	A vulnerability in the web-based management interface of the Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user …	CWE-79 Cross-site Scripting	CVE-2020-3406	2024-11-21 14:30	2020-07-17	Show	GitHub Exploit DB Packet Storm

202308	7.3	HIGH Network	cisco	sd-wan_firmware	A vulnerability in the web UI of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to gain read and write access to information that is stored on an affected system. The vul…	CWE-611 XXE	CVE-2020-3405	2024-11-21 14:30	2020-07-17	Show	GitHub Exploit DB Packet Storm

202309	6.5	MEDIUM Network	cisco	sd-wan_firmware	A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to conduct path traversal attacks and obtain read access to sensit…	CWE-22 Path Traversal	CVE-2020-3401	2024-11-21 14:30	2020-07-17	Show	GitHub Exploit DB Packet Storm

202310	7.8	HIGH Local	cisco	sd-wan_firmware	A vulnerability in the CLI of Cisco SD-WAN vManage Software could allow an authenticated, local attacker to inject arbitrary commands that are executed with root privileges. The vulnerability is due …	CWE-287 Improper Authentication	CVE-2020-3388	2024-11-21 14:30	2020-07-17	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed