Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":June 22, 2026, 6:01 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 224941 | 4.9 | 警告 | WordPress.org | - | WordPress の wp-includes/capabilities.php におけるアクセス制限を回避される脆弱性 |
CWE-264
認可・権限・アクセス制御 |
CVE-2010-5296 | 2014-01-22 18:43 | 2010-09-4 | Show | GitHub Exploit DB Packet Storm |
| 224942 | 4.3 | 警告 | WordPress.org | - | WordPress の wp-admin/plugins.php におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2010-5295 | 2014-01-22 18:41 | 2010-11-14 | Show | GitHub Exploit DB Packet Storm |
| 224943 | 4.3 | 警告 | WordPress.org | - | WordPress の wp-admin/includes/file.php におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2010-5294 | 2014-01-22 18:38 | 2010-11-14 | Show | GitHub Exploit DB Packet Storm |
| 224944 | 5.8 | 警告 | WordPress.org | - | WordPress の wp-includes/comment.php におけるスパム制限を回避される脆弱性 |
CWE-264
認可・権限・アクセス制御 |
CVE-2010-5293 | 2014-01-22 18:35 | 2010-11-30 | Show | GitHub Exploit DB Packet Storm |
| 224945 | 4.3 | 警告 | シスコシステムズ | - | Cisco Secure Access Control System のポータルにおけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2014-0668 | 2014-01-22 16:37 | 2014-01-21 | Show | GitHub Exploit DB Packet Storm |
| 224946 | 2.6 | 注意 | TYPO3 Association | - | TYPO3 の Extbase Framework の ActionController ベースクラスにおけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2013-7078 | 2014-01-22 16:32 | 2013-12-10 | Show | GitHub Exploit DB Packet Storm |
| 224947 | 3.3 | 注意 | libimobiledevice | - | libimobiledevice の userpref.c における任意のファイルを上書きされる脆弱性 |
CWE-59
リンク解釈の問題 |
CVE-2013-2142 | 2014-01-22 16:31 | 2013-08-14 | Show | GitHub Exploit DB Packet Storm |
| 224948 | 2.6 | 注意 | Drupal | - | Drupal におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2013-0244 | 2014-01-22 16:31 | 2013-01-16 | Show | GitHub Exploit DB Packet Storm |
| 224949 | 2.7 | 注意 | Fabrice Bellard Xen プロジェクト |
- | Xen および QEMU の qemu-xen の qdisk PV ディスクバックエンドにおけるサービス運用妨害 (DoS) の脆弱性 |
CWE-399
リソース管理の問題 |
CVE-2013-4375 | 2014-01-22 16:22 | 2013-10-10 | Show | GitHub Exploit DB Packet Storm |
| 224950 | 1.9 | 注意 | Linux | - | Linux Kernel の drivers/net/hamradio/yam.c の yam_ioctl 関数における重要な情報を取得される脆弱性 |
CWE-399
リソース管理の問題 |
CVE-2014-1446 | 2014-01-22 16:05 | 2014-01-15 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:June 22, 2026, 4 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 201331 | 5.4 |
MEDIUM
Network |
ibm |
rational_doors_next_generation rational_quality_manager collaborative_lifecycle_management engineering_test_management rational_engineering_lifecycle_manager engineering_lifecycle_mana… |
IBM Jazz Foundation and IBM Engineering products are vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentia… |
CWE-918
Server-Side Request Forgery (SSRF) |
CVE-2021-20347 | 2024-11-21 14:46 | 2021-06-3 | Show | GitHub Exploit DB Packet Storm |
| 201332 | 5.4 |
MEDIUM
Network |
ibm |
rational_doors_next_generation rational_quality_manager collaborative_lifecycle_management engineering_test_management rational_engineering_lifecycle_manager engineering_lifecycle_mana… |
IBM Jazz Foundation and IBM Engineering products are vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentia… |
CWE-918
Server-Side Request Forgery (SSRF) |
CVE-2021-20346 | 2024-11-21 14:46 | 2021-06-3 | Show | GitHub Exploit DB Packet Storm |
| 201333 | 5.4 |
MEDIUM
Network |
ibm |
rational_doors_next_generation rational_quality_manager collaborative_lifecycle_management engineering_test_management rational_engineering_lifecycle_manager engineering_lifecycle_mana… |
IBM Jazz Foundation and IBM Engineering products are vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentia… |
CWE-918
Server-Side Request Forgery (SSRF) |
CVE-2021-20345 | 2024-11-21 14:46 | 2021-06-3 | Show | GitHub Exploit DB Packet Storm |
| 201334 | 5.4 |
MEDIUM
Network |
ibm |
rational_doors_next_generation rational_quality_manager collaborative_lifecycle_management engineering_test_management rational_engineering_lifecycle_manager engineering_lifecycle_mana… |
IBM Jazz Foundation and IBM Engineering products are vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentia… |
CWE-918
Server-Side Request Forgery (SSRF) |
CVE-2021-20343 | 2024-11-21 14:46 | 2021-06-3 | Show | GitHub Exploit DB Packet Storm |
| 201335 | 5.4 |
MEDIUM
Network |
ibm |
rational_doors_next_generation rational_quality_manager collaborative_lifecycle_management engineering_test_management rational_engineering_lifecycle_manager engineering_lifecycle_mana… |
IBM Jazz Foundation and IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended fu… |
CWE-79
Cross-site Scripting |
CVE-2021-20338 | 2024-11-21 14:46 | 2021-06-3 | Show | GitHub Exploit DB Packet Storm |
| 201336 | 5.3 |
MEDIUM
Network |
ibm | security_verify_access | IBM Security Verify Access 20.07 could disclose sensitive information in HTTP server headers that could be used in further attacks against the system. IBM X-Force ID: 199398. |
CWE-200
Information Exposure |
CVE-2021-20585 | 2024-11-21 14:46 | 2021-06-1 | Show | GitHub Exploit DB Packet Storm |
| 201337 | 7.5 |
HIGH
Network |
ibm |
application_gateway security_verify_access |
IBM Security Verify Access 20.07 could allow a remote attacker to send a specially crafted HTTP GET request that could cause the application to crash. |
NVD-CWE-noinfo
|
CVE-2021-20576 | 2024-11-21 14:46 | 2021-06-1 | Show | GitHub Exploit DB Packet Storm |
| 201338 | 3.3 |
LOW
Local |
ibm |
application_gateway security_verify_access |
IBM Security Verify Access 20.07 allows web pages to be stored locally which can be read by another user on the system. X-Force ID: 199278. |
CWE-922
Insecure Storage of Sensitive Information |
CVE-2021-20575 | 2024-11-21 14:46 | 2021-06-1 | Show | GitHub Exploit DB Packet Storm |
| 201339 | 4.3 |
MEDIUM
Network |
redhat |
process_automation descision_manager jbpm |
A flaw was found in the BPMN editor in version jBPM 7.51.0.Final. Any authenticated user from any project can see the name of Ruleflow Groups from other projects, despite the user not having access t… |
NVD-CWE-noinfo
|
CVE-2021-20306 | 2024-11-21 14:46 | 2021-06-1 | Show | GitHub Exploit DB Packet Storm |
| 201340 | 7.1 |
HIGH
Network |
openstack redhat |
neutron openstack_platform |
A flaw was found in openstack-neutron's default Open vSwitch firewall rules. By sending carefully crafted packets, anyone in control of a server instance connected to the virtual switch can impersona… | - | CVE-2021-20267 | 2024-11-21 14:46 | 2021-05-29 | Show | GitHub Exploit DB Packet Storm |