Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 18, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
225871 4.9 警告 マイクロソフト - Microsoft Windows のカーネルモードドライバ内の win32k.sys における権限昇格の脆弱性 CWE-362
競合状態 		CVE-2013-1253 2013-02-14 17:11 2013-02-12 Show GitHub Exploit DB Packet Storm
225872 4.9 警告 マイクロソフト - Microsoft Windows のカーネルモードドライバ内の win32k.sys における権限昇格の脆弱性 CWE-362
競合状態 		CVE-2013-1252 2013-02-14 17:11 2013-02-12 Show GitHub Exploit DB Packet Storm
225873 4.9 警告 マイクロソフト - Microsoft Windows のカーネルモードドライバ内の win32k.sys における権限昇格の脆弱性 CWE-362
競合状態 		CVE-2013-1251 2013-02-14 17:11 2013-02-12 Show GitHub Exploit DB Packet Storm
225874 4.9 警告 マイクロソフト - Microsoft Windows のカーネルモードドライバ内の win32k.sys における権限昇格の脆弱性 CWE-362
競合状態 		CVE-2013-1250 2013-02-14 17:11 2013-02-12 Show GitHub Exploit DB Packet Storm
225875 4.9 警告 マイクロソフト - Microsoft Windows のカーネルモードドライバ内の win32k.sys における権限昇格の脆弱性 CWE-362
競合状態 		CVE-2013-1249 2013-02-14 17:11 2013-02-12 Show GitHub Exploit DB Packet Storm
225876 4.9 警告 マイクロソフト - Microsoft Windows のカーネルモードドライバ内の win32k.sys における権限昇格の脆弱性 CWE-362
競合状態 		CVE-2013-1248 2013-02-14 17:11 2013-02-12 Show GitHub Exploit DB Packet Storm
225877 7.2 危険 マイクロソフト - Microsoft Windows Server 2008 R2 および Windows 7 における権限昇格の脆弱性 CWE-399
リソース管理の問題 		CVE-2013-0076 2013-02-14 16:53 2013-02-12 Show GitHub Exploit DB Packet Storm
225878 9.3 危険 マイクロソフト - Microsoft Internet Explorer 6 から 10 の VML の実装における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2013-0030 2013-02-14 16:53 2013-02-12 Show GitHub Exploit DB Packet Storm
225879 10 危険 マイクロソフト - Microsoft .NET Framework における任意のコードを実行される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-0073 2013-02-14 16:53 2013-02-12 Show GitHub Exploit DB Packet Storm
225880 9.3 危険 マイクロソフト - Microsoft Internet Explorer 6 から 9 における任意のコードを実行される脆弱性 CWE-399
リソース管理の問題 		CVE-2013-0029 2013-02-14 16:53 2013-02-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 19, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
200261 5.5 MEDIUM
Local 		ibm spectrum_protect IBM Spectrum Protect Plus 10.1.0 through 10.1.6 may allow a local user to obtain access to information beyond their intended role and permissions. IBM X-Force ID: 193653. NVD-CWE-noinfo
CVE-2020-5017 2024-11-21 14:33 2021-01-9 Show GitHub Exploit DB Packet Storm
200262 4.3 MEDIUM
Network 		ibm engineering_requirements_quality_assistant_on-premises IBM Engineering Requirements Quality Assistant On-Premises could allow an authenticated user to obtain sensitive information due to improper input validation. IBM X-Force ID: 186282. CWE-20
 Improper Input Validation  		CVE-2020-4667 2024-11-21 14:33 2021-01-9 Show GitHub Exploit DB Packet Storm
200263 5.4 MEDIUM
Network 		ibm engineering_requirements_quality_assistant_on-premises IBM Engineering Requirements Quality Assistant On-Premises is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the in… CWE-79
Cross-site Scripting 		CVE-2020-4666 2024-11-21 14:33 2021-01-9 Show GitHub Exploit DB Packet Storm
200264 5.4 MEDIUM
Network 		ibm engineering_requirements_quality_assistant_on-premises IBM Engineering Requirements Quality Assistant On-Premises is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the in… CWE-79
Cross-site Scripting 		CVE-2020-4664 2024-11-21 14:33 2021-01-9 Show GitHub Exploit DB Packet Storm
200265 5.4 MEDIUM
Network 		ibm engineering_requirements_quality_assistant_on-premises IBM Engineering Requirements Quality Assistant On-Premises is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the in… CWE-79
Cross-site Scripting 		CVE-2020-4663 2024-11-21 14:33 2021-01-9 Show GitHub Exploit DB Packet Storm
200266 7.5 HIGH
Network 		ibm emptoris_strategic_supply_management IBM Emptoris Strategic Supply Management 10.1.3 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 190989. CWE-327
 Use of a Broken or Risky Cryptographic Algorithm 		CVE-2020-4898 2024-11-21 14:33 2021-01-8 Show GitHub Exploit DB Packet Storm
200267 5.3 MEDIUM
Network 		ibm emptoris_contract_management
emptoris_spend_analysis 		IBM Emptoris Contract Management and IBM Emptoris Spend Analysis 10.1.0, 10.1.1, and 10.1.3 could allow a remote attacker to obtain sensitive information when a detailed technical error message is re… CWE-209
Information Exposure Through an Error Message 		CVE-2020-4897 2024-11-21 14:33 2021-01-8 Show GitHub Exploit DB Packet Storm
200268 6.5 MEDIUM
Network 		ibm emptoris_sourcing IBM Emptoris Sourcing 10.1.0, 10.1.1, and 10.1.3 is vulnerable to web cache poisoning, caused by improper input validation by modifying HTTP request headers. IBM X-Force ID: 190987. CWE-20
 Improper Input Validation  		CVE-2020-4896 2024-11-21 14:33 2021-01-8 Show GitHub Exploit DB Packet Storm
200269 5.4 MEDIUM
Network 		ibm emptoris_strategic_supply_management IBM Emptoris Strategic Supply Management 10.1.0, 10.1.1, and 10.1.3 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus… CWE-79
Cross-site Scripting 		CVE-2020-4895 2024-11-21 14:33 2021-01-8 Show GitHub Exploit DB Packet Storm
200270 5.9 MEDIUM
Network 		ibm emptoris_strategic_supply_management IBM Emptoris Strategic Supply Management 10.1.0, 10.1.1, and 10.1.3 transmits sensitive information in HTTP GET request parameters. This may lead to information disclosure via man in the middle metho… CWE-319
Cleartext Transmission of Sensitive Information 		CVE-2020-4893 2024-11-21 14:33 2021-01-8 Show GitHub Exploit DB Packet Storm