Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 9, 2026, 10 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
230101 7.5 危険 uapplication - Uapplication UPhotoGallery における SQL インジェクションの脆弱性 - CVE-2006-6247 2012-12-20 18:02 2006-12-4 Show GitHub Exploit DB Packet Storm
230102 6.8 警告 s9y - Serendipity におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2006-6242 2012-12-20 18:02 2006-12-3 Show GitHub Exploit DB Packet Storm
230103 4 警告 telnet ftp server - Sorin Chitu Telnet-FTP Server におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2006-6241 2012-12-20 18:02 2006-12-3 Show GitHub Exploit DB Packet Storm
230104 4 警告 telnet ftp server - Sorin Chitu Telnet-FTP Server におけるディレクトリトラバーサルの脆弱性 - CVE-2006-6240 2012-12-20 18:02 2006-12-3 Show GitHub Exploit DB Packet Storm
230105 7.5 危険 woltlab - Woltlab Burning Board Lite の thread.php における SQL インジェクションの脆弱性 - CVE-2006-6237 2012-12-20 18:02 2006-12-3 Show GitHub Exploit DB Packet Storm
230106 7.5 危険 postnuke software foundation - PostNuke の Downloads モジュールにおける SQL インジェクションの脆弱性 - CVE-2006-6233 2012-12-20 18:02 2006-12-2 Show GitHub Exploit DB Packet Storm
230107 5 警告 vubb - vuBB における重要な情報を取得される脆弱性 - CVE-2006-6231 2012-12-20 18:02 2006-12-1 Show GitHub Exploit DB Packet Storm
230108 7.5 危険 vubb - vuBB における SQL インジェクションの脆弱性 - CVE-2006-6230 2012-12-20 18:02 2006-12-1 Show GitHub Exploit DB Packet Storm
230109 7.5 危険 puntal - Puntal のインストールスクリプトにおける PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-6224 2012-12-20 18:02 2006-12-1 Show GitHub Exploit DB Packet Storm
230110 10 危険 シマンテック - Symantec Veritas NetBackup の NetBackup bpcd デーモンにおけるスタックベースのバッファオーバーフローの脆弱性 - CVE-2006-6222 2012-12-20 18:02 2006-12-13 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 9, 2026, 5:07 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
197991 7.5 HIGH
Network
ibm api_connect IBM API Connect V10 is impacted by insecure communications during database replication. As the data replication happens over insecure communication channels, an attacker can view unencrypted data lea… CWE-319
Cleartext Transmission of Sensitive Information
CVE-2020-4695 2024-11-21 14:33 2021-03-9 Show GitHub Exploit DB Packet Storm
197992 8.2 HIGH
Network
sonicwall directory_services_connector SonicWall SSO-agent default configuration uses NetAPI to probe the associated IP's in the network, this client probing method allows a potential attacker to capture the password hash of the privilege… CWE-287
Improper Authentication
CVE-2020-5148 2024-11-21 14:33 2021-03-5 Show GitHub Exploit DB Packet Storm
197993 5.4 MEDIUM
Network
ibm rational_quality_manager
rational_team_concert
rational_doors_next_generation
doors_next
engineering_workflow_management
engineering_test_management
engineering_lifecycle_management…
IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially … CWE-79
Cross-site Scripting
CVE-2020-4975 2024-11-21 14:33 2021-03-5 Show GitHub Exploit DB Packet Storm
197994 5.4 MEDIUM
Network
ibm rational_quality_manager
rational_team_concert
rational_doors_next_generation
doors_next
engineering_workflow_management
engineering_test_management
engineering_lifecycle_management…
IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially … CWE-79
Cross-site Scripting
CVE-2020-4866 2024-11-21 14:33 2021-03-5 Show GitHub Exploit DB Packet Storm
197995 5.4 MEDIUM
Network
ibm rational_quality_manager
rational_team_concert
rational_doors_next_generation
doors_next
engineering_workflow_management
engineering_test_management
engineering_lifecycle_management…
IBM Engineering products are vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality poten… CWE-79
Cross-site Scripting
CVE-2020-4863 2024-11-21 14:33 2021-03-5 Show GitHub Exploit DB Packet Storm
197996 5.4 MEDIUM
Network
ibm rational_quality_manager
rational_team_concert
rational_doors_next_generation
doors_next
engineering_workflow_management
engineering_test_management
engineering_lifecycle_management…
IBM Engineering products are vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality poten… CWE-79
Cross-site Scripting
CVE-2020-4857 2024-11-21 14:33 2021-03-5 Show GitHub Exploit DB Packet Storm
197997 5.4 MEDIUM
Network
ibm rational_quality_manager
rational_team_concert
rational_doors_next_generation
doors_next
engineering_workflow_management
engineering_test_management
engineering_lifecycle_management…
IBM Engineering products are vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality poten… CWE-79
Cross-site Scripting
CVE-2020-4856 2024-11-21 14:33 2021-03-5 Show GitHub Exploit DB Packet Storm
197998 3.3 LOW
Local
ibm cloud_application_performance_management The IBM Application Performance Monitoring UI (IBM Cloud APM 8.1.4) allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 187975. CWE-922
 Insecure Storage of Sensitive Information
CVE-2020-4726 2024-11-21 14:33 2021-03-3 Show GitHub Exploit DB Packet Storm
197999 3.5 LOW
Network
ibm cloud_application_performance_management IBM Monitoring (IBM Cloud APM 8.1.4 ) could allow an authenticated user to modify HTML content by sending a specially crafted HTTP request to the APM UI, which could mislead another user. IBM X-Force… NVD-CWE-Other
CVE-2020-4725 2024-11-21 14:33 2021-03-3 Show GitHub Exploit DB Packet Storm
198000 4.9 MEDIUM
Network
ibm cloud_application_performance_management The IBM Cloud APM 8.1.4 server will issue a DNS request to resolve any hostname specified in the Cloud Event Management Webhook URL configuration definition. This could enable an authenticated user w… CWE-706
 Use of Incorrectly-Resolved Name or Reference
CVE-2020-4719 2024-11-21 14:33 2021-03-3 Show GitHub Exploit DB Packet Storm