Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 12, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
230261 6.8 警告 サン・マイクロシステムズ - iPlanet Web Server の /search におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-0183 2012-12-20 18:19 2007-01-12 Show GitHub Exploit DB Packet Storm
230262 7.5 危険 scriptaty - magic photo storage の Web サイトにおける PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-0182 2012-12-20 18:19 2007-01-12 Show GitHub Exploit DB Packet Storm
230263 7.5 危険 scriptaty - magic photo storage の Web サイトにおける PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-0181 2012-12-20 18:19 2007-01-10 Show GitHub Exploit DB Packet Storm
230264 7.5 危険 PHPKIT - PHPKIT の comment.php における SQL インジェクションの脆弱性 - CVE-2007-0179 2012-12-20 18:19 2007-01-10 Show GitHub Exploit DB Packet Storm
230265 7.5 危険 sina - Sina UC2006 の BRWOSSRE2UC.dll ActiveX コントロールにおけるバッファオーバーフローの脆弱性 - CVE-2007-0174 2012-12-20 18:19 2007-01-10 Show GitHub Exploit DB Packet Storm
230266 7.5 危険 voice of web - AllMyGuests における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-0172 2012-12-20 18:19 2007-01-10 Show GitHub Exploit DB Packet Storm
230267 7.5 危険 voice of web - AllMyLinks の index.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-0171 2012-12-20 18:19 2007-01-10 Show GitHub Exploit DB Packet Storm
230268 7.5 危険 wgs-ppc
ppc search engine
- WGS-PPC における PHP ファイルインクルージョンの脆弱性 - CVE-2007-0167 2012-12-20 18:19 2007-01-9 Show GitHub Exploit DB Packet Storm
230269 7.8 危険 securekit - SecureKit Steganography における認証要求を回避される脆弱性 - CVE-2007-0163 2012-12-20 18:19 2007-01-9 Show GitHub Exploit DB Packet Storm
230270 6.8 警告 unsanity - APE における権限を取得される脆弱性 - CVE-2007-0162 2012-12-20 18:19 2007-01-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 13, 2026, 5:05 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
199821 5.4 MEDIUM
Network
ibm infosphere_information_server IBM InfoSphere Information Server 11.5 and 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended func… CWE-79
Cross-site Scripting
CVE-2020-4162 2024-11-21 14:32 2020-03-10 Show GitHub Exploit DB Packet Storm
199822 5.4 MEDIUM
Network
hcltech connections HCL Connections v5.5, v6.0, and v6.5 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality … CWE-79
Cross-site Scripting
CVE-2020-4084 2024-11-21 14:32 2020-03-10 Show GitHub Exploit DB Packet Storm
199823 7.5 HIGH
Network
ibm spectrum_scale The IBM Spectrum Scale 4.2 and 5.0 file system component is affected by a denial of service security vulnerability. An attacker can force the Spectrum Scale mmfsd/mmsdrserv daemons to unexpectedly ex… CWE-754
 Improper Check for Unusual or Exceptional Conditions
CVE-2020-4217 2024-11-21 14:32 2020-03-10 Show GitHub Exploit DB Packet Storm
199824 5.5 MEDIUM
Local
hcltech connections HCL Connections 6.5 is vulnerable to possible information leakage. Connections could disclose sensitive information via trace logs to a local user. CWE-532
 Inclusion of Sensitive Information in Log Files
CVE-2020-4083 2024-11-21 14:32 2020-03-6 Show GitHub Exploit DB Packet Storm
199825 5.4 MEDIUM
Network
hcltech connections The HCL Connections 5.5 help system is vulnerable to cross-site scripting, caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability using a specially-c… CWE-79
Cross-site Scripting
CVE-2020-4082 2024-11-21 14:32 2020-03-6 Show GitHub Exploit DB Packet Storm
199826 7.8 HIGH
Local
ibm platform_lsf
spectrum_lsf
spectrum_computing_for_high_performance_analytics
IBM Platform LSF 9.1 and 10.1, IBM Spectrum LSF Suite 10.2, and IBM Spectrum Suite for HPA 10.2 could allow a local user to escalate their privileges due to weak file permissions when specific debug … CWE-732
 Incorrect Permission Assignment for Critical Resource
CVE-2020-4278 2024-11-21 14:32 2020-03-6 Show GitHub Exploit DB Packet Storm
199827 5.4 MEDIUM
Network
ibm tivoli_netcool\/omnibus IBM Tivoli Netcool/OMNIbus_GUI 8.1.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality p… CWE-79
Cross-site Scripting
CVE-2020-4198 2024-11-21 14:32 2020-03-3 Show GitHub Exploit DB Packet Storm
199828 2.4 LOW
Physics
ibm tivoli_netcool\/omnibus IBM Tivoli Netcool/OMNIbus_GUI 8.1.0 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 174908. CWE-922
 Insecure Storage of Sensitive Information
CVE-2020-4197 2024-11-21 14:32 2020-03-3 Show GitHub Exploit DB Packet Storm
199829 5.4 MEDIUM
Network
ibm tivoli_netcool\/omnibus IBM Tivoli Netcool/OMNIbus_GUI 8.1.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality p… CWE-79
Cross-site Scripting
CVE-2020-4196 2024-11-21 14:32 2020-03-3 Show GitHub Exploit DB Packet Storm
199830 5.3 MEDIUM
Network
ibm security_information_queue IBM Security Information Queue (ISIQ) 1.0.0, 1.0.1, 1.0.2, 1.0.3, and 1.0.4 uses a cross-domain policy file that includes domains that should not be trusted which could disclose sensitive information… NVD-CWE-noinfo
CVE-2020-4292 2024-11-21 14:32 2020-03-2 Show GitHub Exploit DB Packet Storm