Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 27, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
226901 4 警告 オラクル - Oracle Siebel CRM における Siebel Core - Server Infrastructure の処理に関する脆弱性 CWE-noinfo
情報不足
CVE-2012-3168 2013-01-21 16:13 2013-01-15 Show GitHub Exploit DB Packet Storm
226902 4 警告 オラクル - Oracle Siebel CRM における Siebel UI Framework の処理に関する脆弱性 CWE-noinfo
情報不足
CVE-2012-1700 2013-01-21 16:13 2013-01-15 Show GitHub Exploit DB Packet Storm
226903 4.3 警告 オラクル - Oracle PeopleSoft Products の PeopleSoft PeopleTools における PeopleBooks - PSOL の処理に関する脆弱性 CWE-noinfo
情報不足
CVE-2012-1755 2013-01-21 14:44 2013-01-15 Show GitHub Exploit DB Packet Storm
226904 4.3 警告 オラクル - Oracle PeopleSoft Products の PeopleSoft PeopleTools における Portal の処理に関する脆弱性 CWE-noinfo
情報不足
CVE-2012-5059 2013-01-21 14:44 2013-01-15 Show GitHub Exploit DB Packet Storm
226905 3.5 注意 オラクル - Oracle PeopleSoft Products の PeopleSoft PeopleTools における Rich Text Editor の処理に関する脆弱性 CWE-noinfo
情報不足
CVE-2012-3192 2013-01-21 14:44 2013-01-15 Show GitHub Exploit DB Packet Storm
226906 4.3 警告 オラクル - Oracle Fusion Middleware の Oracle Application Server Single Sign-On における脆弱性 CWE-noinfo
情報不足
CVE-2012-1677 2013-01-21 11:05 2013-01-15 Show GitHub Exploit DB Packet Storm
226907 4.3 警告 オラクル - Oracle Fusion Middleware の Oracle Access Manager における OAM Webgate の処理に関する脆弱性 CWE-noinfo
情報不足
CVE-2012-5097 2013-01-21 11:05 2013-01-15 Show GitHub Exploit DB Packet Storm
226908 3.5 注意 オラクル - Oracle JD Edwards Products の JD Edwards EnterpriseOne Tools における脆弱性 CWE-noinfo
情報不足
CVE-2012-1678 2013-01-18 16:19 2013-01-15 Show GitHub Exploit DB Packet Storm
226909 2.1 注意 オラクル - Oracle Sun Solaris 11 の kernel における脆弱性 CWE-noinfo
情報不足
CVE-2012-3178 2013-01-18 16:16 2013-01-15 Show GitHub Exploit DB Packet Storm
226910 9 危険 オラクル - Oracle Database Server の Spatial における脆弱性 CWE-noinfo
情報不足
CVE-2012-3220 2013-01-18 16:12 2013-01-15 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 27, 2026, 4:52 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
202301 5.4 MEDIUM
Network
hcltech connections The HCL Connections 5.5 help system is vulnerable to cross-site scripting, caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability using a specially-c… CWE-79
Cross-site Scripting
CVE-2020-4082 2024-11-21 14:32 2020-03-6 Show GitHub Exploit DB Packet Storm
202302 7.8 HIGH
Local
ibm platform_lsf
spectrum_lsf
spectrum_computing_for_high_performance_analytics
IBM Platform LSF 9.1 and 10.1, IBM Spectrum LSF Suite 10.2, and IBM Spectrum Suite for HPA 10.2 could allow a local user to escalate their privileges due to weak file permissions when specific debug … CWE-732
 Incorrect Permission Assignment for Critical Resource
CVE-2020-4278 2024-11-21 14:32 2020-03-6 Show GitHub Exploit DB Packet Storm
202303 5.4 MEDIUM
Network
ibm tivoli_netcool\/omnibus IBM Tivoli Netcool/OMNIbus_GUI 8.1.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality p… CWE-79
Cross-site Scripting
CVE-2020-4198 2024-11-21 14:32 2020-03-3 Show GitHub Exploit DB Packet Storm
202304 2.4 LOW
Physics
ibm tivoli_netcool\/omnibus IBM Tivoli Netcool/OMNIbus_GUI 8.1.0 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 174908. CWE-922
 Insecure Storage of Sensitive Information
CVE-2020-4197 2024-11-21 14:32 2020-03-3 Show GitHub Exploit DB Packet Storm
202305 5.4 MEDIUM
Network
ibm tivoli_netcool\/omnibus IBM Tivoli Netcool/OMNIbus_GUI 8.1.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality p… CWE-79
Cross-site Scripting
CVE-2020-4196 2024-11-21 14:32 2020-03-3 Show GitHub Exploit DB Packet Storm
202306 5.3 MEDIUM
Network
ibm security_information_queue IBM Security Information Queue (ISIQ) 1.0.0, 1.0.1, 1.0.2, 1.0.3, and 1.0.4 uses a cross-domain policy file that includes domains that should not be trusted which could disclose sensitive information… NVD-CWE-noinfo
CVE-2020-4292 2024-11-21 14:32 2020-03-2 Show GitHub Exploit DB Packet Storm
202307 8.6 HIGH
Network
ibm security_information_queue IBM Security Information Queue (ISIQ) 1.0.0, 1.0.1, 1.0.2, 1.0.3, and 1.0.4 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication,… CWE-798
 Use of Hard-coded Credentials
CVE-2020-4283 2024-11-21 14:32 2020-03-2 Show GitHub Exploit DB Packet Storm
202308 9.8 CRITICAL
Network
ibm spectrum_protect IBM Spectrum Protect Plus 10.1.0 and 10.1.5 could allow a remote attacker to execute arbitrary code on the system. By using a specially crafted HTTP command, an attacker could exploit this vulnerabil… CWE-78
OS Command 
CVE-2020-4222 2024-11-21 14:32 2020-02-25 Show GitHub Exploit DB Packet Storm
202309 9.8 CRITICAL
Network
ibm spectrum_protect IBM Spectrum Protect Plus 10.1.0 and 10.1.5 could allow a remote attacker to execute arbitrary code on the system. By using a specially crafted HTTP command, an attacker could exploit this vulnerabil… CWE-78
OS Command 
CVE-2020-4213 2024-11-21 14:32 2020-02-25 Show GitHub Exploit DB Packet Storm
202310 9.8 CRITICAL
Network
ibm spectrum_protect IBM Spectrum Protect Plus 10.1.0 and 10.1.5 could allow a remote attacker to execute arbitrary code on the system. By using a specially crafted HTTP command, an attacker could exploit this vulnerabil… CWE-20
 Improper Input Validation 
CVE-2020-4212 2024-11-21 14:32 2020-02-25 Show GitHub Exploit DB Packet Storm