Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 4, 2026, 4 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
228971 7.2 危険 rPath, Inc - rPath Linux 用の rMake における権限を取得される脆弱性 - CVE-2007-0536 2012-12-20 18:19 2007-01-25 Show GitHub Exploit DB Packet Storm
228972 7.5 危険 vote pro - Vote! Pro における任意の PHP コードを実行される脆弱性 - CVE-2007-0535 2012-12-20 18:19 2007-01-25 Show GitHub Exploit DB Packet Storm
228973 5 警告 tuan do - Tuan Do Uploader における管理者パスワードハッシュを取得される脆弱性 - CVE-2007-0532 2012-12-20 18:19 2007-01-25 Show GitHub Exploit DB Packet Storm
228974 6.8 警告 WebsiteBaker Org - Website Baker の class.login.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2007-0527 2012-12-20 18:19 2007-01-25 Show GitHub Exploit DB Packet Storm
228975 3.3 注意 sony ericsson - Sony Ericsson K700i および W810i 電話機におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2007-0521 2012-12-20 18:19 2007-01-25 Show GitHub Exploit DB Packet Storm
228976 7.5 危険 unique ads - UDS の banner.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2007-0520 2012-12-20 18:19 2007-01-25 Show GitHub Exploit DB Packet Storm
228977 3.5 注意 xmb software - XMB U2U Instant Messenger の memcp.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2007-0519 2012-12-20 18:19 2007-01-25 Show GitHub Exploit DB Packet Storm
228978 7.5 危険 Scriptsez.net - Scriptsez Smart PHP Subscriber におけるエンコードされたパスワードを取得される脆弱性 - CVE-2007-0518 2012-12-20 18:19 2007-01-25 Show GitHub Exploit DB Packet Storm
228979 7.5 危険 Scriptsez.net - Scriptsez Random PHP Quote におけるパスワード情報を取得される脆弱性 - CVE-2007-0517 2012-12-20 18:19 2007-01-25 Show GitHub Exploit DB Packet Storm
228980 4.9 警告 yana framework - Yana Framework における任意のゲストブックプロファイルを変更される脆弱性 CWE-noinfo
情報不足
CVE-2007-0516 2012-12-20 18:19 2007-01-25 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 4, 2026, 4:06 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
197271 5.5 MEDIUM
Local
vmware workstation
fusion
esxi
VMware ESXi (6.7 before ESXi670-202004101-SG and 6.5 before ESXi650-202005401-SG), VMware Workstation (15.x before 15.5.2) and VMware Fusion (11.x before 11.5.2) contain a denial-of-service vulnerabi… CWE-617
 Reachable Assertion
CVE-2020-3958 2024-11-21 14:32 2020-05-30 Show GitHub Exploit DB Packet Storm
197272 7.0 HIGH
Local
vmware fusion
horizon_client
remote_console
VMware Fusion (11.x before 11.5.5), VMware Remote Console for Mac (11.x and prior) and VMware Horizon Client for Mac (5.x and prior) contain a local privilege escalation vulnerability due to a Time-o… CWE-367
 Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2020-3957 2024-11-21 14:32 2020-05-30 Show GitHub Exploit DB Packet Storm
197273 6.1 MEDIUM
Network
ibm business_process_manager
business_automation_workflow
IBM Business Automation Workflow 18 and 19, and IBM Business Process Manager 8.0, 8.5, and 8.6 could allow a remote attacker to bypass security restrictions, caused by a reverse tabnabbing flaw. An a… NVD-CWE-Other
CVE-2020-4490 2024-11-21 14:32 2020-05-29 Show GitHub Exploit DB Packet Storm
197274 7.0 HIGH
Local
ibm mq_for_hpe_nonstop IBM MQ on HPE NonStop 8.0.4 and 8.1.0 is vulnerable to a privilege escalation attack when running in restricted mode. IBM X-Force ID: 178427. NVD-CWE-noinfo
CVE-2020-4352 2024-11-21 14:32 2020-05-29 Show GitHub Exploit DB Packet Storm
197275 5.4 MEDIUM
Network
ibm planning_analytics_local IBM Planning Analytics Local 2.0.0 through 2.0.9 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended fun… CWE-79
Cross-site Scripting
CVE-2020-4306 2024-11-21 14:32 2020-05-29 Show GitHub Exploit DB Packet Storm
197276 2.7 LOW
Network
ibm security_identity_governance_and_intelligence IBM Security Identity Governance and Intelligence 5.2.6 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This informat… CWE-209
Information Exposure Through an Error Message
CVE-2020-4248 2024-11-21 14:32 2020-05-29 Show GitHub Exploit DB Packet Storm
197277 5.4 MEDIUM
Network
ibm jazz_reporting_service IBM Jazz Reporting Service 6.0.6, 6.0.6.1, and 7.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended f… CWE-79
Cross-site Scripting
CVE-2020-4419 2024-11-21 14:32 2020-05-29 Show GitHub Exploit DB Packet Storm
197278 6.5 MEDIUM
Network
ibm security_identity_governance_and_intelligence IBM Security Identity Governance and Intelligence 5.2.6 could disclose highly sensitive information to other authenticated users on the sytem due to incorrect authorization. IBM X-Force ID: 175485. CWE-863
 Incorrect Authorization
CVE-2020-4249 2024-11-21 14:32 2020-05-29 Show GitHub Exploit DB Packet Storm
197279 7.1 HIGH
Network
ibm security_identity_governance_and_intelligence IBM Security Identity Governance and Intelligence 5.2.6 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to … CWE-611
XXE
CVE-2020-4246 2024-11-21 14:32 2020-05-29 Show GitHub Exploit DB Packet Storm
197280 7.5 HIGH
Network
ibm security_identity_governance_and_intelligence IBM Security Identity Governance and Intelligence 5.2.6 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-For… CWE-521
Weak Password Requirements 
CVE-2020-4245 2024-11-21 14:32 2020-05-29 Show GitHub Exploit DB Packet Storm