Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":May 31, 2026, 2 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 225381 | 4.3 | 警告 | IBM | - | IBM Sterling B2B Integrator および Sterling File Gateway におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2013-0455 | 2013-07-3 15:56 | 2013-06-6 | Show | GitHub Exploit DB Packet Storm |
| 225382 | 4.3 | 警告 | シスコシステムズ | - | Cisco TelePresence TC ソフトウェアの SIP の実装における意図しない NOTIFY メッセージの使用を誘発される脆弱性 |
CWE-noinfo
情報不足 |
CVE-2013-3401 | 2013-07-3 15:48 | 2013-07-1 | Show | GitHub Exploit DB Packet Storm |
| 225383 | 6.6 | 警告 | シスコシステムズ | - | Cisco Desktop Collaboration Experience DX650 の不特定の Android API におけるバッファオーバーフローの脆弱性 |
CWE-119
バッファエラー |
CVE-2013-3399 | 2013-07-3 15:45 | 2013-07-1 | Show | GitHub Exploit DB Packet Storm |
| 225384 | 6.8 | 警告 | シスコシステムズ | - | 複数の Cisco セキュリティ アプライアンスの Web フレームワークにおけるクロスサイトリクエストフォージェリの脆弱性 |
CWE-352
同一生成元ポリシー違反 |
CVE-2013-3395 | 2013-07-3 15:36 | 2013-07-1 | Show | GitHub Exploit DB Packet Storm |
| 225385 | 5.8 | 警告 | Atlassian | - | Atlassian Crowd における任意のファイルを読まれる脆弱性 |
CWE-20
不適切な入力確認 |
CVE-2013-3925 | 2013-07-3 15:16 | 2013-06-19 | Show | GitHub Exploit DB Packet Storm |
| 225386 | 6.8 | 警告 | Services project | - | Drupal 用 Services モジュールにおけるクロスサイトリクエストフォージェリの脆弱性 |
CWE-352
同一生成元ポリシー違反 |
CVE-2013-2158 | 2013-07-3 14:56 | 2013-06-5 | Show | GitHub Exploit DB Packet Storm |
| 225387 | 6.9 | 警告 | FreeBSD | - | FreeBSD のカーネルにおけるファイルシステムの書き込み権限を回避される脆弱性 |
CWE-264
認可・権限・アクセス制御 |
CVE-2013-2171 | 2013-07-3 13:55 | 2013-06-18 | Show | GitHub Exploit DB Packet Storm |
| 225388 | 10 | 危険 | Digital Alert Systems Monroe Electronics |
- | Digital Alert Systems DASDEC EAS および Monroe Electronics R189 One-Net EAS におけるアクセス権を取得される脆弱性 |
CWE-264
認可・権限・アクセス制御 |
CVE-2013-4735 | 2013-07-2 16:52 | 2013-04-24 | Show | GitHub Exploit DB Packet Storm |
| 225389 | 7.5 | 危険 | Digital Alert Systems Monroe Electronics |
- | Digital Alert Systems DASDEC EAS および Monroe Electronics R189 One-Net EAS における非管理者アクセス権を取得される脆弱性 |
CWE-noinfo
情報不足 |
CVE-2013-4734 | 2013-07-2 16:50 | 2013-04-24 | Show | GitHub Exploit DB Packet Storm |
| 225390 | 7.8 | 危険 | Digital Alert Systems Monroe Electronics |
- | Digital Alert Systems DASDEC EAS および Monroe Electronics R189 One-Net EAS における重要な情報を取得される脆弱性 |
CWE-264
認可・権限・アクセス制御 |
CVE-2013-4733 | 2013-07-2 16:49 | 2013-04-24 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:May 31, 2026, 4:16 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 197441 | 5.4 |
MEDIUM
Network |
ibm |
rational_engineering_lifecycle_manager rational_team_concert engineering_workflow_management engineering_lifecycle_management engineering_insights engineering_requirements_quality_assi… |
IBM Jazz Foundation Products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentia… |
CWE-79
Cross-site Scripting |
CVE-2021-20518 | 2024-11-21 14:46 | 2021-03-31 | Show | GitHub Exploit DB Packet Storm |
| 197442 | 5.4 |
MEDIUM
Network |
ibm |
rational_engineering_lifecycle_manager rational_team_concert engineering_workflow_management engineering_lifecycle_management engineering_insights engineering_requirements_quality_assi… |
IBM Jazz Foundation Products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentia… |
CWE-79
Cross-site Scripting |
CVE-2021-20506 | 2024-11-21 14:46 | 2021-03-31 | Show | GitHub Exploit DB Packet Storm |
| 197443 | 5.4 |
MEDIUM
Network |
ibm |
rational_engineering_lifecycle_manager rational_team_concert engineering_workflow_management engineering_lifecycle_management engineering_insights engineering_requirements_quality_assi… |
IBM Jazz Foundation Products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentia… |
CWE-79
Cross-site Scripting |
CVE-2021-20504 | 2024-11-21 14:46 | 2021-03-31 | Show | GitHub Exploit DB Packet Storm |
| 197444 | 5.4 |
MEDIUM
Network |
ibm |
rational_engineering_lifecycle_manager rational_team_concert engineering_workflow_management engineering_lifecycle_management engineering_insights engineering_requirements_quality_assi… |
IBM Jazz Foundation Products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentia… |
CWE-79
Cross-site Scripting |
CVE-2021-20503 | 2024-11-21 14:46 | 2021-03-31 | Show | GitHub Exploit DB Packet Storm |
| 197445 | 7.1 |
HIGH
Network |
ibm |
rational_engineering_lifecycle_manager rational_team_concert engineering_workflow_management engineering_lifecycle_management engineering_insights engineering_requirements_quality_assi… |
IBM Jazz Foundation Products are vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive informati… |
CWE-611
XXE |
CVE-2021-20502 | 2024-11-21 14:46 | 2021-03-31 | Show | GitHub Exploit DB Packet Storm |
| 197446 | 5.4 |
MEDIUM
Network |
ibm |
rational_engineering_lifecycle_manager rational_team_concert engineering_workflow_management engineering_lifecycle_management engineering_insights engineering_requirements_quality_assi… |
IBM Jazz Foundation Products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentia… |
CWE-79
Cross-site Scripting |
CVE-2021-20447 | 2024-11-21 14:46 | 2021-03-31 | Show | GitHub Exploit DB Packet Storm |
| 197447 | 5.4 |
MEDIUM
Network |
ibm |
rational_engineering_lifecycle_manager rational_team_concert engineering_workflow_management engineering_lifecycle_management engineering_insights engineering_requirements_quality_assi… |
IBM Jazz Foundation Products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentia… |
CWE-79
Cross-site Scripting |
CVE-2021-20352 | 2024-11-21 14:46 | 2021-03-31 | Show | GitHub Exploit DB Packet Storm |
| 197448 | 7.1 |
HIGH
Network |
ibm | cloud_pak_for_automation | IBM Cloud Pak for Automation 20.0.2 and 20.0.3 IF002 are vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to ex… |
CWE-611
XXE |
CVE-2021-20482 | 2024-11-21 14:46 | 2021-03-31 | Show | GitHub Exploit DB Packet Storm |
| 197449 | 7.2 |
HIGH
Network |
linuxfoundation | container_network_interface | An improper limitation of path name flaw was found in containernetworking/cni in versions before 0.8.1. When specifying the plugin to load in the 'type' field in the network configuration, it is poss… |
CWE-22
Path Traversal |
CVE-2021-20206 | 2024-11-21 14:46 | 2021-03-27 | Show | GitHub Exploit DB Packet Storm |
| 197450 | 5.3 |
MEDIUM
Network |
redhat netapp quarkus oracle |
resteasy oncommand_insight quarkus communications_cloud_native_core_console |
A flaw was found in RESTEasy in all versions of RESTEasy up to 4.6.0.Final. The endpoint class and method names are returned as part of the exception response when RESTEasy cannot convert one of the … | - | CVE-2021-20289 | 2024-11-21 14:46 | 2021-03-27 | Show | GitHub Exploit DB Packet Storm |