Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 2, 2026, 4 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
226081	4.3	警告	ヒューレット・パッカード	-	HP Managed Printing Administration におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-5219	2013-05-1 11:22	2013-04-25	Show	GitHub Exploit DB Packet Storm

226082	3.5	注意	IBM	-	複数の IBM 製品で使用される IBM Sametime のクライアントの実装におけるコマンドを送信される脆弱性	CWE-noinfo 情報不足	CVE-2013-0553	2013-05-1 11:21	2013-04-22	Show	GitHub Exploit DB Packet Storm

226083	3.5	注意	IBM	-	IBM Sametime の Sametime Links サーバにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-0533	2013-05-1 11:15	2013-04-22	Show	GitHub Exploit DB Packet Storm

226084	9.3	危険	IBM	-	IBM SPSS SamplePower の olch2x32 ActiveX コントロールにおける任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2013-0593	2013-05-1 11:14	2013-04-26	Show	GitHub Exploit DB Packet Storm

226085	2.3	注意	IBM	-	IBM Application Support Facility for z/OS の IBM Document Connect for Application Support Facility におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-0572	2013-05-1 11:13	2013-04-25	Show	GitHub Exploit DB Packet Storm

226086	2.9	注意	IBM	-	IBM Application Support Facility for z/OS の IBM Document Connect for Application Support Facility におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-0571	2013-05-1 11:11	2013-04-25	Show	GitHub Exploit DB Packet Storm

226087	4.3	警告	IBM	-	IBM Connections におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-0569	2013-05-1 11:04	2013-04-25	Show	GitHub Exploit DB Packet Storm

226088	4.3	警告	シスコシステムズ	-	Cisco Unified Communications Domain Manager の Web フレームワークにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-1227	2013-04-30 19:48	2013-04-29	Show	GitHub Exploit DB Packet Storm

226089	6.1	警告	シスコシステムズ	-	Cisco Nexus 7000 デバイス上で稼働する Cisco NX-OS におけるサービス運用妨害 (DoS) の脆弱性	CWE-119 バッファエラー	CVE-2013-1226	2013-04-30 19:47	2013-04-29	Show	GitHub Exploit DB Packet Storm

226090	4.4	警告	シスコシステムズ	-	Cisco Intrusion Prevention System の SensorApp におけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2013-1219	2013-04-30 19:45	2013-04-29	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 2, 2026, 4:18 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
222611	5.5	MEDIUM Local	ibm	watson_knowledge_catalog infosphere_information_server_on_cloud	IBM InfoSphere Information Server 11.7.1.0 stores a common hard coded encryption key that could be used to decrypt sensitive information. IBM X-Force ID: 159229.	CWE-798 Use of Hard-coded Credentials	CVE-2019-4220	2024-11-21 13:43	2019-06-6	Show	GitHub Exploit DB Packet Storm

222612	8.3	HIGH Adjacent	ibm	infosphere_information_server infosphere_information_server_on_cloud	IBM InfoSphere Information Server 11.7.1 containers are vulnerable to privilege escalation due to an insecurely configured component. IBM X-Force ID: 158975.	NVD-CWE-noinfo	CVE-2019-4185	2024-11-21 13:43	2019-06-6	Show	GitHub Exploit DB Packet Storm

222613	4.3	MEDIUM Network	ibm	maximo_for_life_sciences smartcloud_control_desk tivoli_integration_composer maximo_for_aviation maximo_asset_management maximo_for_utilities maximo_for_transportation maximo_for…	IBM Maximo Asset Management 7.6 Work Centers' application does not validate file type upon upload, allowing attackers to upload malicious files. IBM X-Force ID: 156565.	CWE-434 Unrestricted Upload of File with Dangerous Type	CVE-2019-4056	2024-11-21 13:43	2019-06-6	Show	GitHub Exploit DB Packet Storm

222614	2.1	LOW Physics	ibm	maximo_for_life_sciences smartcloud_control_desk tivoli_integration_composer maximo_for_aviation maximo_asset_management maximo_for_utilities maximo_for_transportation maximo_for…	IBM Maximo Asset Management 7.6 could allow a physical user of the system to obtain sensitive information from a previous user of the same machine. IBM X-Force ID: 156311.	CWE-269 Improper Privilege Management	CVE-2019-4048	2024-11-21 13:43	2019-06-6	Show	GitHub Exploit DB Packet Storm

222615	6.1	MEDIUM Network	ibm	jazz_for_service_management	IBM Jazz for Service Management 1.1.3, 1.1.3.1, and 1.1.3.2 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-craft…	CWE-601 Open Redirect	CVE-2019-4201	2024-11-21 13:43	2019-06-6	Show	GitHub Exploit DB Packet Storm

222616	5.9	MEDIUM Network	ibm	qradar_security_information_and_event_manager	IBM QRadar SIEM 7.2.8 WinCollect could allow an attacker to obtain sensitive information by spoofing a trusted entity using man in the middle techniques due to not validating or incorrectly validatin…	CWE-295 Improper Certificate Validation	CVE-2019-4264	2024-11-21 13:43	2019-05-30	Show	GitHub Exploit DB Packet Storm

222617	7.5	HIGH Network	ibm	api_connect	IBM API Connect 5.0.0.0 through 5.0.8.6 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 159944.	CWE-326 Inadequate Encryption Strength	CVE-2019-4256	2024-11-21 13:43	2019-05-30	Show	GitHub Exploit DB Packet Storm

222618	5.4	MEDIUM Network	ibm	jazz_reporting_service	IBM Jazz Reporting Service 6.0 through 6.0.6.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended funct…	CWE-79 Cross-site Scripting	CVE-2019-4184	2024-11-21 13:43	2019-05-30	Show	GitHub Exploit DB Packet Storm

222619	5.4	MEDIUM Network	ibm	cognos_analytics	IBM Cognos Analytics 11.0, 11.1.0, and 11.1.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functi…	CWE-79 Cross-site Scripting	CVE-2019-4139	2024-11-21 13:43	2019-05-30	Show	GitHub Exploit DB Packet Storm

222620	5.9	MEDIUM Network	ibm	spectrum_control	IBM Tivoli Storage Productivity Center 5.2.13 through 5.3.0.1 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. A…	CWE-522 Insufficiently Protected Credentials	CVE-2019-4138	2024-11-21 13:43	2019-05-30	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed