Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 27, 2026, noon

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
252621 7.5 危険 NetArt Media - NetArt Media iBoutique における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-5020 2011-12-9 13:56 2011-11-2 Show GitHub Exploit DB Packet Storm
252622 7.5 危険 Cramer Development - Digital Interchange Document Library における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-5021 2011-12-9 13:56 2011-11-2 Show GitHub Exploit DB Packet Storm
252623 7.5 危険 Jextensions - Joomla! 用 JExtensions JE Story Submit コンポーネントにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-5022 2011-12-9 13:55 2011-11-2 Show GitHub Exploit DB Packet Storm
252624 7.5 危険 Cramer Development - Digital Interchange Calendar における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-5023 2011-12-9 13:54 2011-11-2 Show GitHub Exploit DB Packet Storm
252625 6 警告 CuteSITE - CuteSITE CMS における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-5024 2011-12-9 13:54 2011-11-2 Show GitHub Exploit DB Packet Storm
252626 4.3 警告 CuteSITE - CuteSITE CMS におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-5025 2011-12-9 13:50 2011-11-2 Show GitHub Exploit DB Packet Storm
252627 6.8 警告 Lightbox Technologies Inc. - Science Fair In A Box における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-5026 2011-12-9 13:50 2011-11-2 Show GitHub Exploit DB Packet Storm
252628 4.3 警告 Lightbox Technologies Inc. - Science Fair In A Box におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-5027 2011-12-9 13:49 2011-11-2 Show GitHub Exploit DB Packet Storm
252629 7.5 危険 Jextensions - Joomla! 用 JExtensions JE Job のコンポーネントにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-5028 2011-12-9 13:48 2011-11-2 Show GitHub Exploit DB Packet Storm
252630 7.5 危険 codefabrik gmbh - Ecomat CMS における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-5029 2011-12-9 13:47 2011-11-2 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 27, 2026, 4:52 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
259081 6.0 MEDIUM
Local 		cisco nx-os
unified_computing_system
lan_switch_software 		A vulnerability in the CLI of Cisco NX-OS System Software could allow an authenticated, local attacker to read the contents of arbitrary files. The vulnerability is due to insufficient input validati… CWE-20
 Improper Input Validation  		CVE-2017-12338 2024-11-21 12:09 2017-11-30 Show GitHub Exploit DB Packet Storm
259082 4.2 MEDIUM
Local 		cisco nx-os
unified_computing_system 		A vulnerability in the TCL scripting subsystem of Cisco NX-OS System Software could allow an authenticated, local attacker to escape the interactive TCL shell and gain unauthorized access to the unde… CWE-20
 Improper Input Validation  		CVE-2017-12336 2024-11-21 12:09 2017-11-30 Show GitHub Exploit DB Packet Storm
259083 6.3 MEDIUM
Local 		cisco nx-os
unified_computing_system 		A vulnerability in the CLI of Cisco NX-OS System Software could allow an authenticated, local attacker to perform a command injection attack. The vulnerability is due to insufficient input validation… CWE-77
Command Injection 		CVE-2017-12335 2024-11-21 12:09 2017-11-30 Show GitHub Exploit DB Packet Storm
259084 6.7 MEDIUM
Local 		cisco nx-os
unified_computing_system 		A vulnerability in the CLI of Cisco NX-OS System Software could allow an authenticated, local attacker to perform a command injection attack. An attacker would need valid administrator credentials to… CWE-20
 Improper Input Validation  		CVE-2017-12334 2024-11-21 12:09 2017-11-30 Show GitHub Exploit DB Packet Storm
259085 6.7 MEDIUM
Local 		cisco nx-os
unified_computing_system 		A vulnerability in Cisco NX-OS System Software could allow an authenticated, local attacker to bypass signature verification when loading a software image. The vulnerability is due to insufficient NX… CWE-347
 Improper Verification of Cryptographic Signature 		CVE-2017-12333 2024-11-21 12:09 2017-11-30 Show GitHub Exploit DB Packet Storm
259086 4.4 MEDIUM
Local 		cisco unified_computing_system
nx-os 		A vulnerability in Cisco NX-OS System Software patch installation could allow an authenticated, local attacker to write a file to arbitrary locations. The vulnerability is due to insufficient restric… CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2017-12332 2024-11-21 12:09 2017-11-30 Show GitHub Exploit DB Packet Storm
259087 6.7 MEDIUM
Local 		cisco nx-os
unified_computing_system 		A vulnerability in Cisco NX-OS System Software could allow an authenticated, local attacker to bypass signature verification when loading a software patch. The vulnerability is due to insufficient NX… CWE-347
 Improper Verification of Cryptographic Signature 		CVE-2017-12331 2024-11-21 12:09 2017-11-30 Show GitHub Exploit DB Packet Storm
259088 6.3 MEDIUM
Local 		cisco nx-os A vulnerability in the CLI of Cisco NX-OS System Software could allow an authenticated, local attacker to perform a command injection attack. The vulnerability is due to insufficient input validation… CWE-77
Command Injection 		CVE-2017-12330 2024-11-21 12:09 2017-11-30 Show GitHub Exploit DB Packet Storm
259089 6.3 MEDIUM
Local 		cisco nx-os
unified_computing_system
firepower_extensible_operating_system 		A vulnerability in the CLI of Cisco Firepower Extensible Operating System (FXOS) and NX-OS System Software could allow an authenticated, local attacker to perform a command injection attack. The vuln… CWE-77
Command Injection 		CVE-2017-12329 2024-11-21 12:09 2017-11-30 Show GitHub Exploit DB Packet Storm
259090 5.8 MEDIUM
Network 		cisco ip_phone_8800_series_firmware A vulnerability in Session Initiation Protocol (SIP) call handling in Cisco IP Phone 8800 Series devices could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition b… CWE-20
 Improper Input Validation  		CVE-2017-12328 2024-11-21 12:09 2017-11-30 Show GitHub Exploit DB Packet Storm