Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 18, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
245971 6 警告 fcgphilipp - MUJE CMS におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2009-3508 2012-06-26 16:18 2009-10-1 Show GitHub Exploit DB Packet Storm
245972 7.5 危険 AliBabaClone.com - Alibaba Clone の offers_buy.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2009-3504 2012-06-26 16:18 2009-09-30 Show GitHub Exploit DB Packet Storm
245973 7.5 危険 bpowerhouse - BPowerHouse BPHolidayLettings の search.aspx における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2009-3503 2012-06-26 16:18 2009-09-30 Show GitHub Exploit DB Packet Storm
245974 7.5 危険 bpowerhouse - BPowerHouse BPMusic の music.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2009-3502 2012-06-26 16:18 2009-09-30 Show GitHub Exploit DB Packet Storm
245975 7.5 危険 bpowerhouse - BPowerHouse BPStudents の students.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2009-3501 2012-06-26 16:18 2009-09-30 Show GitHub Exploit DB Packet Storm
245976 7.5 危険 bpowerhouse - BPowerHouse BPGames における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2009-3500 2012-06-26 16:18 2009-09-30 Show GitHub Exploit DB Packet Storm
245977 7.5 危険 bpowerhouse - BPowerHouse BPLawyerCaseDocuments の employee.aspx における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2009-3499 2012-06-26 16:18 2009-09-30 Show GitHub Exploit DB Packet Storm
245978 7.5 危険 gotdns - Loggix Project における PHP リモートファイルインクルーションの脆弱性 CWE-94
コード・インジェクション
CVE-2009-3492 2012-06-26 16:18 2009-09-30 Show GitHub Exploit DB Packet Storm
245979 9.3 危険 Core FTP - Core FTP におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2009-3484 2012-06-26 16:18 2009-09-30 Show GitHub Exploit DB Packet Storm
245980 9.3 危険 globalscape - GlobalSCAPE CuteFTP の Create New Site 機能におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2009-3483 2012-06-26 16:18 2009-09-30 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 18, 2026, 4 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
253221 5.3 MEDIUM
Network
cisco mobility_services_engine A vulnerability in the RADIUS authentication module of Cisco Policy Suite could allow an unauthenticated, remote attacker to determine whether a subscriber username is valid. The vulnerability occurs… CWE-203
 Information Exposure Through Discrepancy
CVE-2018-0134 2024-11-21 12:37 2018-02-8 Show GitHub Exploit DB Packet Storm
253222 8.6 HIGH
Network
cisco carrier_routing_system A vulnerability in the forwarding information base (FIB) code of Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause inconsistency between the routing information base (RIB… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2018-0132 2024-11-21 12:37 2018-02-8 Show GitHub Exploit DB Packet Storm
253223 6.1 MEDIUM
Network
cisco data_center_analytics_framework A vulnerability in the web-based management interface of Cisco Data Center Analytics Framework could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting (XSS) attack… CWE-79
Cross-site Scripting
CVE-2018-0129 2024-11-21 12:37 2018-02-8 Show GitHub Exploit DB Packet Storm
253224 6.1 MEDIUM
Network
cisco data_center_analytics_framework A vulnerability in the web-based management interface of Cisco Data Center Analytics Framework could allow an unauthenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack ag… CWE-79
Cross-site Scripting
CVE-2018-0128 2024-11-21 12:37 2018-02-8 Show GitHub Exploit DB Packet Storm
253225 9.8 CRITICAL
Network
cisco rv132w_firmware
rv134w_firmware
A vulnerability in the web interface of Cisco RV132W ADSL2+ Wireless-N VPN Routers and Cisco RV134W VDSL2 Wireless-AC VPN Routers could allow an unauthenticated, remote attacker to view configuration… CWE-306
Missing Authentication for Critical Function
CVE-2018-0127 2024-11-21 12:37 2018-02-8 Show GitHub Exploit DB Packet Storm
253226 9.8 CRITICAL
Network
cisco rv132w_firmware
rv134w_firmware
A vulnerability in the web interface of the Cisco RV132W ADSL2+ Wireless-N VPN and RV134W VDSL2 Wireless-AC VPN Routers could allow an unauthenticated, remote attacker to execute arbitrary code and g… CWE-20
 Improper Input Validation 
CVE-2018-0125 2024-11-21 12:37 2018-02-8 Show GitHub Exploit DB Packet Storm
253227 5.5 MEDIUM
Local
cisco ios_xe
ios
A Path Traversal vulnerability in the diagnostic shell for Cisco IOS and IOS XE Software could allow an authenticated, local attacker to use certain diagnostic shell commands that can overwrite syste… CWE-22
Path Traversal
CVE-2018-0123 2024-11-21 12:37 2018-02-8 Show GitHub Exploit DB Packet Storm
253228 4.4 MEDIUM
Local
cisco staros A vulnerability in the CLI of the Cisco StarOS operating system for Cisco ASR 5000 Series Aggregation Services Routers could allow an authenticated, local attacker to overwrite system files that are … CWE-78
OS Command 
CVE-2018-0122 2024-11-21 12:37 2018-02-8 Show GitHub Exploit DB Packet Storm
253229 4.3 MEDIUM
Network
cisco unified_communications_manager A vulnerability in the web framework of Cisco Unified Communications Manager could allow an authenticated, remote attacker to conduct an SQL injection attack against an affected system. The vulnerabi… CWE-89
SQL Injection
CVE-2018-0120 2024-11-21 12:37 2018-02-8 Show GitHub Exploit DB Packet Storm
253230 4.7 MEDIUM
Network
cisco conference_director A vulnerability in certain authentication controls in the account services of Cisco Spark could allow an authenticated, remote attacker to interact with and view information on an affected device tha… NVD-CWE-noinfo
CVE-2018-0119 2024-11-21 12:37 2018-02-8 Show GitHub Exploit DB Packet Storm