Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 5, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
229291 4.9 警告 Xerox - Xerox WorkCentre および WorkCentre Pro におけるデータを取得される脆弱性 - CVE-2006-6438 2012-12-20 18:02 2006-11-30 Show GitHub Exploit DB Packet Storm
229292 7.8 危険 Xerox - Xerox WorkCentre および WorkCentre Pro の ops3-dmn におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2006-6437 2012-12-20 18:02 2006-11-30 Show GitHub Exploit DB Packet Storm
229293 6.8 警告 Xerox - Xerox WorkCentre および WorkCentre Pro の Network コントローラにおけるクロスサイトスクリプティングの脆弱性 - CVE-2006-6436 2012-12-20 18:02 2006-11-30 Show GitHub Exploit DB Packet Storm
229294 7.5 危険 Xerox - Xerox WorkCentre および WorkCentre Pro の SNMP 実装における重要な情報を取得される脆弱性 - CVE-2006-6435 2012-12-20 18:02 2006-11-30 Show GitHub Exploit DB Packet Storm
229295 7.5 危険 Xerox - Xerox WorkCentre および WorkCentre Pro の Web User Interface における認証の制御を回避される脆弱性 - CVE-2006-6434 2012-12-20 18:02 2006-11-30 Show GitHub Exploit DB Packet Storm
229296 5 警告 Xerox - Xerox WorkCentre および WorkCentre Pro における検出を回避される脆弱性 - CVE-2006-6433 2012-12-20 18:02 2006-12-10 Show GitHub Exploit DB Packet Storm
229297 5 警告 Xerox - Xerox WorkCentre および WorkCentre Pro の Scan-to-mailbox 機能における特定のファイルをダウンロードされる脆弱性 - CVE-2006-6432 2012-12-20 18:02 2006-12-10 Show GitHub Exploit DB Packet Storm
229298 6.8 警告 phpnews - PHPNews の templates/cat_temp.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-6357 2012-12-20 18:02 2006-12-6 Show GitHub Exploit DB Packet Storm
229299 6.8 警告 phpnews - PHPNews の templates/link_temp.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-6356 2012-12-20 18:02 2006-12-6 Show GitHub Exploit DB Packet Storm
229300 7.5 危険 pwp technologies - PWP Technologies The Classified Ad System における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2006-6349 2012-12-20 18:02 2006-12-6 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 6, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
197291 7.3 HIGH
Network 		ibm security_guardium IBM Security Guardium 11.2 performs an operation at a privilege level that is higher than the minimum level required, which creates new weaknesses or amplifies the consequences of other weaknesses. I… CWE-269
 Improper Privilege Management 		CVE-2020-4184 2024-11-21 14:32 2021-03-16 Show GitHub Exploit DB Packet Storm
197292 6.1 MEDIUM
Network 		hcltech digital_experience In Digital Experience 8.5, 9.0, and 9.5, WSRP consumer is vulnerable to cross-site scripting (XSS). CWE-79
Cross-site Scripting 		CVE-2020-4081 2024-11-21 14:32 2021-02-3 Show GitHub Exploit DB Packet Storm
197293 5.4 MEDIUM
Network 		ibm rational_quality_manager
rhapsody_design_manager
rational_engineering_lifecycle_manager
rhapsody_model_manager
engineering_workflow_management
collaborative_lifecycle_management
eng… 		IBM Jazz Foundation products could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vuln… CWE-1021
 Improper Restriction of Rendered UI Layers or Frames 		CVE-2020-4547 2024-11-21 14:32 2021-01-28 Show GitHub Exploit DB Packet Storm
197294 5.4 MEDIUM
Network 		ibm rational_quality_manager
rhapsody_design_manager
rational_engineering_lifecycle_manager
rhapsody_model_manager
engineering_workflow_management
collaborative_lifecycle_management
eng… 		IBM Jazz Foundation products is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potential… CWE-79
Cross-site Scripting 		CVE-2020-4524 2024-11-21 14:32 2021-01-28 Show GitHub Exploit DB Packet Storm
197295 4.3 MEDIUM
Network 		ibm security_guardium IBM Security Guardium 11.2 discloses sensitive information in the response headers that could be used in further attacks against the system. IBM X-Force ID: 174850. CWE-312
 Cleartext Storage of Sensitive Information 		CVE-2020-4189 2024-11-21 14:32 2021-01-28 Show GitHub Exploit DB Packet Storm
197296 4.4 MEDIUM
Local 		ibm security_guardium_insights IBM Security Guardium Insights 2.0.2 stores user credentials in plain in clear text which can be read by a local privileged user. IBM X-Force ID: 184861. CWE-312
 Cleartext Storage of Sensitive Information 		CVE-2020-4604 2024-11-21 14:32 2021-01-14 Show GitHub Exploit DB Packet Storm
197297 4.4 MEDIUM
Local 		ibm security_guardium_insights IBM Security Guardium Insights 2.0.2 stores user credentials in plain in clear text which can be read by a local user. IBM X-Force ID: 184836. CWE-522
 Insufficiently Protected Credentials 		CVE-2020-4602 2024-11-21 14:32 2021-01-14 Show GitHub Exploit DB Packet Storm
197298 5.3 MEDIUM
Network 		ibm security_guardium_insights IBM Security Guardium Insights 2.0.2 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used i… CWE-209
Information Exposure Through an Error Message 		CVE-2020-4600 2024-11-21 14:32 2021-01-14 Show GitHub Exploit DB Packet Storm
197299 5.3 MEDIUM
Network 		ibm security_guardium_insights IBM Security Guardium Insights 2.0.2 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used i… CWE-209
Information Exposure Through an Error Message 		CVE-2020-4599 2024-11-21 14:32 2021-01-14 Show GitHub Exploit DB Packet Storm
197300 4.3 MEDIUM
Network 		ibm security_guardium_insights IBM Security Guardium Insights 2.0.2 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:// link to a user o… CWE-319
Cleartext Transmission of Sensitive Information 		CVE-2020-4597 2024-11-21 14:32 2021-01-14 Show GitHub Exploit DB Packet Storm