Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 10, 2026, 2 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
230241 4.6 警告 Canonical - PPC 用の Ubuntu Linux におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2006-5648 2012-12-20 18:02 2006-12-13 Show GitHub Exploit DB Packet Storm
230242 6.4 警告 ソフォス - Sophos Anti-Virus などのプラットフォーム用の Anti-Virus におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2006-5647 2012-12-20 18:02 2006-11-1 Show GitHub Exploit DB Packet Storm
230243 5 警告 ソフォス - Sophos Anti-Virus などのプラットフォーム用の Anti-Virus におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2006-5646 2012-12-20 18:02 2006-11-1 Show GitHub Exploit DB Packet Storm
230244 5 警告 ソフォス - Sophos Anti-Virus 用などの Anti-Virus におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2006-5645 2012-12-20 18:02 2006-11-1 Show GitHub Exploit DB Packet Storm
230245 7.5 危険 techno dreams - Techno Dreams Announcement の MainAnnounce2.asp における SQL インジェクションの脆弱性 - CVE-2006-5641 2012-12-20 18:02 2006-10-31 Show GitHub Exploit DB Packet Storm
230246 7.5 危険 techno dreams - Techno Dreams Guest Book の guestbookview.asp における SQL インジェクションの脆弱性 - CVE-2006-5640 2012-12-20 18:02 2006-10-31 Show GitHub Exploit DB Packet Storm
230247 7.5 危険 phpmyring - PHPMyRing の cherche.php における SQL インジェクションの脆弱性 - CVE-2006-5638 2012-12-20 18:02 2006-10-31 Show GitHub Exploit DB Packet Storm
230248 5.1 警告 sws - SWS の common.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-5636 2012-12-20 18:02 2006-10-31 Show GitHub Exploit DB Packet Storm
230249 7.5 危険 web wiz forums - Web Wiz Forums の forum/search.asp における SQL インジェクションの脆弱性 - CVE-2006-5635 2012-12-20 18:02 2006-10-31 Show GitHub Exploit DB Packet Storm
230250 6.8 警告 phpprofiles - phpProfiles における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2006-5634 2012-12-20 18:02 2006-10-31 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 10, 2026, 4:58 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
198161 6.5 MEDIUM
Network 		ibm spectrum_protect_plus IBM Spectrum Protect Plus 10.1.0 through 10.1.6 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers. By sending a specially crafted HTTP request, a remo… CWE-74
Injection 		CVE-2020-5019 2024-11-21 14:33 2021-01-9 Show GitHub Exploit DB Packet Storm
198162 7.5 HIGH
Network 		ibm spectrum_protect_plus IBM Spectrum Protect Plus 10.1.0 through 10.1.6 may include sensitive information in its URLs increasing the risk of such information being caputured by an attacker. IBM X-Force ID: 193654. CWE-312
 Cleartext Storage of Sensitive Information 		CVE-2020-5018 2024-11-21 14:33 2021-01-9 Show GitHub Exploit DB Packet Storm
198163 5.5 MEDIUM
Local 		ibm spectrum_protect IBM Spectrum Protect Plus 10.1.0 through 10.1.6 may allow a local user to obtain access to information beyond their intended role and permissions. IBM X-Force ID: 193653. NVD-CWE-noinfo
CVE-2020-5017 2024-11-21 14:33 2021-01-9 Show GitHub Exploit DB Packet Storm
198164 4.3 MEDIUM
Network 		ibm engineering_requirements_quality_assistant_on-premises IBM Engineering Requirements Quality Assistant On-Premises could allow an authenticated user to obtain sensitive information due to improper input validation. IBM X-Force ID: 186282. CWE-20
 Improper Input Validation  		CVE-2020-4667 2024-11-21 14:33 2021-01-9 Show GitHub Exploit DB Packet Storm
198165 5.4 MEDIUM
Network 		ibm engineering_requirements_quality_assistant_on-premises IBM Engineering Requirements Quality Assistant On-Premises is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the in… CWE-79
Cross-site Scripting 		CVE-2020-4666 2024-11-21 14:33 2021-01-9 Show GitHub Exploit DB Packet Storm
198166 5.4 MEDIUM
Network 		ibm engineering_requirements_quality_assistant_on-premises IBM Engineering Requirements Quality Assistant On-Premises is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the in… CWE-79
Cross-site Scripting 		CVE-2020-4664 2024-11-21 14:33 2021-01-9 Show GitHub Exploit DB Packet Storm
198167 5.4 MEDIUM
Network 		ibm engineering_requirements_quality_assistant_on-premises IBM Engineering Requirements Quality Assistant On-Premises is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the in… CWE-79
Cross-site Scripting 		CVE-2020-4663 2024-11-21 14:33 2021-01-9 Show GitHub Exploit DB Packet Storm
198168 7.5 HIGH
Network 		ibm emptoris_strategic_supply_management IBM Emptoris Strategic Supply Management 10.1.3 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 190989. CWE-327
 Use of a Broken or Risky Cryptographic Algorithm 		CVE-2020-4898 2024-11-21 14:33 2021-01-8 Show GitHub Exploit DB Packet Storm
198169 5.3 MEDIUM
Network 		ibm emptoris_contract_management
emptoris_spend_analysis 		IBM Emptoris Contract Management and IBM Emptoris Spend Analysis 10.1.0, 10.1.1, and 10.1.3 could allow a remote attacker to obtain sensitive information when a detailed technical error message is re… CWE-209
Information Exposure Through an Error Message 		CVE-2020-4897 2024-11-21 14:33 2021-01-8 Show GitHub Exploit DB Packet Storm
198170 6.5 MEDIUM
Network 		ibm emptoris_sourcing IBM Emptoris Sourcing 10.1.0, 10.1.1, and 10.1.3 is vulnerable to web cache poisoning, caused by improper input validation by modifying HTTP request headers. IBM X-Force ID: 190987. CWE-20
 Improper Input Validation  		CVE-2020-4896 2024-11-21 14:33 2021-01-8 Show GitHub Exploit DB Packet Storm