Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 3, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228201 4.3 警告 SAP - SAP Basis コンポーネントの BC-MID-ICF におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-3495 2012-12-20 18:19 2007-06-29 Show GitHub Exploit DB Packet Storm
228202 7.5 危険 Progress Software Corporation - Progress Software OpenEdge の _mprosrv におけるバッファオーバーフローの脆弱性 - CVE-2007-3491 2012-12-20 18:19 2007-06-29 Show GitHub Exploit DB Packet Storm
228203 4.3 警告 Yandex - Yandex Server におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-3485 2012-12-20 18:19 2007-06-28 Show GitHub Exploit DB Packet Storm
228204 10 危険 BlackBerry - Research in Motion BlackBerry Enterprise Server におけるマルウェアを読み込む脆弱性 - CVE-2007-3483 2012-12-20 18:19 2007-06-28 Show GitHub Exploit DB Packet Storm
228205 7.8 危険 VideoLAN - VideoLAN VLC Media Player の input.c におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-3468 2012-12-20 18:19 2007-06-27 Show GitHub Exploit DB Packet Storm
228206 7.8 危険 VideoLAN - VideoLAN VLC Media Player の stats.c における整数オーバーフローの脆弱性 - CVE-2007-3467 2012-12-20 18:19 2007-06-27 Show GitHub Exploit DB Packet Storm
228207 10 危険 sofaware - Check Point SofaWare Safe@Office における特定のデフォルトパスワードを含む脆弱性 - CVE-2007-3465 2012-12-20 18:19 2007-06-27 Show GitHub Exploit DB Packet Storm
228208 8.5 危険 sofaware - Check Point SofaWare Safe@Office における権限を取得される脆弱性 - CVE-2007-3464 2012-12-20 18:19 2007-06-27 Show GitHub Exploit DB Packet Storm
228209 6 警告 sofaware - Check Point SofaWare Safe@Office におけるクロスサイトリクエストフォージェリの脆弱性 - CVE-2007-3462 2012-12-20 18:19 2007-06-27 Show GitHub Exploit DB Packet Storm
228210 10 危険 トレンドマイクロ - Trend Micro OfficeScan Corporate Edition の cgiChkMasterPwd.exe におけるパスワード要件を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2007-3455 2012-12-20 18:19 2007-06-26 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 4, 2026, 4:06 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
196721 7.5 HIGH
Network 		ibm curam_social_program_management A path traversal vulnerability may impact IBM Curam Social Program Management 7.0.9 and 7.0.10, which could allow a remote attacker to traverse directories on the system. An attacker could send a spe… CWE-22
Path Traversal 		CVE-2020-4776 2024-11-21 14:33 2020-10-12 Show GitHub Exploit DB Packet Storm
196722 5.4 MEDIUM
Network 		ibm curam_social_program_management A cross-site scripting (XSS) vulnerability may impact IBM Curam Social Program Management 7.0.9 and 7.0.10. This vulnerability allows attackers to inject malicious scripts into web applications for t… CWE-79
Cross-site Scripting 		CVE-2020-4775 2024-11-21 14:33 2020-10-12 Show GitHub Exploit DB Packet Storm
196723 5.4 MEDIUM
Network 		ibm curam_social_program_management An XPath vulnerability may impact IBM Curam Social Program Management 7.0.9 and 7.0.10, caused by the improper handling of user-supplied input. By sending a specially-crafted input, a remote attacker… CWE-91
Blind XPath Injection 		CVE-2020-4774 2024-11-21 14:33 2020-10-12 Show GitHub Exploit DB Packet Storm
196724 6.5 MEDIUM
Network 		ibm curam_social_program_management A cross-site request forgery (CSRF) vulnerability may impact IBM Curam Social Program Management 7.0.9 and 7.0.10, which is an attack that forces a user to execute unwanted actions on the web applica… CWE-352
 Origin Validation Error 		CVE-2020-4773 2024-11-21 14:33 2020-10-12 Show GitHub Exploit DB Packet Storm
196725 8.1 HIGH
Network 		ibm curam_social_program_management An XML External Entity Injection (XXE) vulnerability may impact IBM Curam Social Program Management 7.0.9 and 7.0.10. A remote attacker could exploit this vulnerability to expose sensitive informatio… CWE-611
XXE 		CVE-2020-4772 2024-11-21 14:33 2020-10-12 Show GitHub Exploit DB Packet Storm
196726 5.3 MEDIUM
Adjacent 		ibm security_access_manager
security_verify_access 		IBM Security Access Manager 9.0.7 and IBM Security Verify Access 10.0.0 could allow an attacker to obtain sensitive using timing side channel attacks which could aid in further attacks against the sy… CWE-203
 Information Exposure Through Discrepancy 		CVE-2020-4699 2024-11-21 14:33 2020-10-12 Show GitHub Exploit DB Packet Storm
196727 5.3 MEDIUM
Adjacent 		ibm security_access_manager
security_verify_access 		IBM Security Access Manager 9.0.7 and IBM Security Verify Access 10.0.0 could allow an attacker to obtain sensitive using timing side channel attacks which could aid in further attacks against the sy… CWE-203
 Information Exposure Through Discrepancy 		CVE-2020-4661 2024-11-21 14:33 2020-10-12 Show GitHub Exploit DB Packet Storm
196728 5.3 MEDIUM
Adjacent 		ibm security_access_manager
security_verify_access 		IBM Security Access Manager 9.0.7 and IBM Security Verify Access 10.0.0 could allow an attacker to obtain sensitive using timing side channel attacks which could aid in further attacks against the sy… CWE-203
 Information Exposure Through Discrepancy 		CVE-2020-4660 2024-11-21 14:33 2020-10-12 Show GitHub Exploit DB Packet Storm
196729 5.3 MEDIUM
Network 		sonicwall sonicos
sonicosv 		SonicOS SSLVPN login page allows a remote unauthenticated attacker to perform firewall management administrator username enumeration based on the server responses. This vulnerability affected SonicOS… CWE-203
 Information Exposure Through Discrepancy 		CVE-2020-5143 2024-11-21 14:33 2020-10-12 Show GitHub Exploit DB Packet Storm
196730 6.1 MEDIUM
Network 		sonicwall sonicos
sonicosv 		A stored cross-site scripting (XSS) vulnerability exists in the SonicOS SSLVPN web interface. A remote unauthenticated attacker is able to store and potentially execute arbitrary JavaScript code in t… CWE-79
Cross-site Scripting 		CVE-2020-5142 2024-11-21 14:33 2020-10-12 Show GitHub Exploit DB Packet Storm