Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 2, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
225161 4 警告 ヒューレット・パッカード - HP System Management Homepage におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2013-2358 2013-07-23 14:59 2013-07-18 Show GitHub Exploit DB Packet Storm
225162 4 警告 ヒューレット・パッカード - HP System Management Homepage におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2013-2357 2013-07-23 14:59 2013-07-18 Show GitHub Exploit DB Packet Storm
225163 5 警告 ヒューレット・パッカード - HP System Management Homepage における重要な情報を取得される脆弱性 CWE-noinfo
情報不足 		CVE-2013-2356 2013-07-23 14:58 2013-07-18 Show GitHub Exploit DB Packet Storm
225164 5 警告 ヒューレット・パッカード - HP System Management Homepage におけるアクセス制限を回避される脆弱性 CWE-noinfo
情報不足 		CVE-2012-5217 2013-07-23 14:55 2013-07-18 Show GitHub Exploit DB Packet Storm
225165 6.8 警告 Markus Blaschke - TYPO3 用 TEQneers SEO Enhancements エクステンションにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2013-4871 2013-07-23 14:44 2013-06-3 Show GitHub Exploit DB Packet Storm
225166 7.5 危険 News Search Project - TYPO3 用 News Search エクステンションにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2013-4870 2013-07-23 14:43 2013-01-28 Show GitHub Exploit DB Packet Storm
225167 4.3 警告 NashTech - Easy PHP Calendar の index.php および datePicker.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-1955 2013-07-23 14:38 2013-04-12 Show GitHub Exploit DB Packet Storm
225168 4.3 警告 マカフィー - McAfee ePolicy Orchestrator におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2013-0141 2013-07-22 18:52 2013-04-22 Show GitHub Exploit DB Packet Storm
225169 7.9 危険 マカフィー - McAfee ePolicy Orchestrator における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2013-0140 2013-07-22 18:50 2013-04-22 Show GitHub Exploit DB Packet Storm
225170 4.3 警告 Moxiecode Systems AB
SWFUpload Project
WordPress.org		 - WordPress および TinyMCE Image Manager などの製品で使用される SWFUpload におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-3414 2013-07-22 16:58 2012-05-17 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 2, 2026, 4:18 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
197401 4.3 MEDIUM
Network 		ibm jazz_team_server IBM Jazz Team Server 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system,… CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2021-20544 2024-11-21 14:46 2022-06-25 Show GitHub Exploit DB Packet Storm
197402 5.4 MEDIUM
Network 		ibm jazz_team_server IBM Jazz Team Server 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's We… CWE-79
Cross-site Scripting 		CVE-2021-20543 2024-11-21 14:46 2022-06-25 Show GitHub Exploit DB Packet Storm
197403 4.3 MEDIUM
Network 		ibm jazz_team_server IBM Jazz Team Server 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system,… CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2021-20421 2024-11-21 14:46 2022-06-25 Show GitHub Exploit DB Packet Storm
197404 5.3 MEDIUM
Network 		ibm jazz_team_server IBM Jazz Team Server 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 could allow a remote attacker to obtain sensitive information, caused by the failure to set the HTTPOnly flag. A remote attacker could explo… CWE-732
 Incorrect Permission Assignment for Critical Resource 		CVE-2021-20355 2024-11-21 14:46 2022-06-25 Show GitHub Exploit DB Packet Storm
197405 7.5 HIGH
Network 		ibm cloud_pak_system IBM Cloud Pak System 2.3.0 through 2.3.3.3 Interim Fix 1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 19749… CWE-327
 Use of a Broken or Risky Cryptographic Algorithm 		CVE-2021-20479 2024-11-21 14:46 2022-05-10 Show GitHub Exploit DB Packet Storm
197406 6.5 MEDIUM
Network 		ibm
netapp 		cognos_analytics
oncommand_insight 		IBM Cognos Analytics PowerPlay (IBM Cognos Analytics 11.1.7, 11.2.0, and 11.1.7) could be vulnerable to an XML Bomb attack by a malicious authenticated user. IBM X-Force ID: 196813. CWE-776
XML Entity Expansion 		CVE-2021-20464 2024-11-21 14:46 2022-04-23 Show GitHub Exploit DB Packet Storm
197407 6.5 MEDIUM
Local 		qemu qemu It was discovered that the update for the virt:rhel module in the RHSA-2020:4676 (https://access.redhat.com/errata/RHSA-2020:4676) erratum released as part of Red Hat Enterprise Linux 8.3 failed to i… CWE-125
Out-of-bounds Read 		CVE-2021-20295 2024-11-21 14:46 2022-04-2 Show GitHub Exploit DB Packet Storm
197408 3.7 LOW
Network 		redhat openshift_container_platform
openshift_machine-config-operator 		It was found in OpenShift Container Platform 4 that ignition config, served by the Machine Config Server, can be accessed externally from clusters without authentication. The MCS endpoint (port 22623… CWE-306
Missing Authentication for Critical Function 		CVE-2021-20238 2024-11-21 14:46 2022-04-2 Show GitHub Exploit DB Packet Storm
197409 6.1 MEDIUM
Network 		redhat keycloak A POST based reflected Cross Site Scripting vulnerability on has been identified in Keycloak. CWE-79
Cross-site Scripting 		CVE-2021-20323 2024-11-21 14:46 2022-03-26 Show GitHub Exploit DB Packet Storm
197410 6.1 MEDIUM
Local 		theforeman openscap An improper authorization handling flaw was found in Foreman. The OpenSCAP plugin for the smart-proxy allows foreman clients to execute actions that should be limited to the Foreman Server. This flaw… CWE-863
 Incorrect Authorization 		CVE-2021-20290 2024-11-21 14:46 2022-03-26 Show GitHub Exploit DB Packet Storm