Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 10, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
230281 7.5 危険 woltlab - WoltLab Burning Book の addentry.php における任意の PHP コードを実行される脆弱性 - CVE-2006-5509 2012-12-20 18:02 2006-10-25 Show GitHub Exploit DB Packet Storm
230282 7.5 危険 woltlab - WoltLab Burning Book の addentry.php における SQL インジェクションの脆弱性 - CVE-2006-5508 2012-12-20 18:02 2006-10-25 Show GitHub Exploit DB Packet Storm
230283 7.5 危険 wiclear - WiClear における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2006-5506 2012-12-20 18:02 2006-10-25 Show GitHub Exploit DB Packet Storm
230284 4.3 警告 Simple Machines - SMF の index.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-5504 2012-12-20 18:02 2006-10-25 Show GitHub Exploit DB Packet Storm
230285 4.3 警告 Simple Machines - SMF の index.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-5503 2012-12-20 18:02 2006-10-25 Show GitHub Exploit DB Packet Storm
230286 5.1 警告 xchangeboard - XchangeBoard の inc/DBInterface.php における SQL インジェクションの脆弱性 - CVE-2006-5500 2012-12-20 18:02 2006-10-25 Show GitHub Exploit DB Packet Storm
230287 6.8 警告 s9y - s9y におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-5499 2012-12-20 18:02 2006-10-25 Show GitHub Exploit DB Packet Storm
230288 4.3 警告 timothy claason - Timothy Claason KnowledgeBank におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-5496 2012-12-20 18:02 2006-10-25 Show GitHub Exploit DB Packet Storm
230289 7.5 危険 trawler - Trawler Web CMS における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-5495 2012-12-20 18:02 2006-10-25 Show GitHub Exploit DB Packet Storm
230290 7.5 危険 PHPNUKE - PHP-Nuke 用の pandaBB モジュールにおける PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2006-5494 2012-12-20 18:02 2006-10-25 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 10, 2026, 4:58 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
198161 6.5 MEDIUM
Network 		ibm spectrum_protect_plus IBM Spectrum Protect Plus 10.1.0 through 10.1.6 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers. By sending a specially crafted HTTP request, a remo… CWE-74
Injection 		CVE-2020-5019 2024-11-21 14:33 2021-01-9 Show GitHub Exploit DB Packet Storm
198162 7.5 HIGH
Network 		ibm spectrum_protect_plus IBM Spectrum Protect Plus 10.1.0 through 10.1.6 may include sensitive information in its URLs increasing the risk of such information being caputured by an attacker. IBM X-Force ID: 193654. CWE-312
 Cleartext Storage of Sensitive Information 		CVE-2020-5018 2024-11-21 14:33 2021-01-9 Show GitHub Exploit DB Packet Storm
198163 5.5 MEDIUM
Local 		ibm spectrum_protect IBM Spectrum Protect Plus 10.1.0 through 10.1.6 may allow a local user to obtain access to information beyond their intended role and permissions. IBM X-Force ID: 193653. NVD-CWE-noinfo
CVE-2020-5017 2024-11-21 14:33 2021-01-9 Show GitHub Exploit DB Packet Storm
198164 4.3 MEDIUM
Network 		ibm engineering_requirements_quality_assistant_on-premises IBM Engineering Requirements Quality Assistant On-Premises could allow an authenticated user to obtain sensitive information due to improper input validation. IBM X-Force ID: 186282. CWE-20
 Improper Input Validation  		CVE-2020-4667 2024-11-21 14:33 2021-01-9 Show GitHub Exploit DB Packet Storm
198165 5.4 MEDIUM
Network 		ibm engineering_requirements_quality_assistant_on-premises IBM Engineering Requirements Quality Assistant On-Premises is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the in… CWE-79
Cross-site Scripting 		CVE-2020-4666 2024-11-21 14:33 2021-01-9 Show GitHub Exploit DB Packet Storm
198166 5.4 MEDIUM
Network 		ibm engineering_requirements_quality_assistant_on-premises IBM Engineering Requirements Quality Assistant On-Premises is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the in… CWE-79
Cross-site Scripting 		CVE-2020-4664 2024-11-21 14:33 2021-01-9 Show GitHub Exploit DB Packet Storm
198167 5.4 MEDIUM
Network 		ibm engineering_requirements_quality_assistant_on-premises IBM Engineering Requirements Quality Assistant On-Premises is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the in… CWE-79
Cross-site Scripting 		CVE-2020-4663 2024-11-21 14:33 2021-01-9 Show GitHub Exploit DB Packet Storm
198168 7.5 HIGH
Network 		ibm emptoris_strategic_supply_management IBM Emptoris Strategic Supply Management 10.1.3 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 190989. CWE-327
 Use of a Broken or Risky Cryptographic Algorithm 		CVE-2020-4898 2024-11-21 14:33 2021-01-8 Show GitHub Exploit DB Packet Storm
198169 5.3 MEDIUM
Network 		ibm emptoris_contract_management
emptoris_spend_analysis 		IBM Emptoris Contract Management and IBM Emptoris Spend Analysis 10.1.0, 10.1.1, and 10.1.3 could allow a remote attacker to obtain sensitive information when a detailed technical error message is re… CWE-209
Information Exposure Through an Error Message 		CVE-2020-4897 2024-11-21 14:33 2021-01-8 Show GitHub Exploit DB Packet Storm
198170 6.5 MEDIUM
Network 		ibm emptoris_sourcing IBM Emptoris Sourcing 10.1.0, 10.1.1, and 10.1.3 is vulnerable to web cache poisoning, caused by improper input validation by modifying HTTP request headers. IBM X-Force ID: 190987. CWE-20
 Improper Input Validation  		CVE-2020-4896 2024-11-21 14:33 2021-01-8 Show GitHub Exploit DB Packet Storm