Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 18, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
230361 5.8 警告 The Tor Project - Tor における任意のストリームへセルを挿入される脆弱性 - CVE-2007-4098 2012-12-20 18:33 2007-07-30 Show GitHub Exploit DB Packet Storm
230362 6.4 警告 The Tor Project - Tor における仕様に反して重要な情報を取得される脆弱性 - CVE-2007-4097 2012-12-20 18:33 2007-07-30 Show GitHub Exploit DB Packet Storm
230363 5.8 警告 The Tor Project - Tor におけるバッファオーバーフローの脆弱性 - CVE-2007-4096 2012-12-20 18:33 2007-07-30 Show GitHub Exploit DB Packet Storm
230364 6.8 警告 rsync.samba.org - rsync の sender.c における任意のコードを実行される脆弱性 - CVE-2007-4091 2012-12-20 18:33 2007-08-15 Show GitHub Exploit DB Packet Storm
230365 4.3 警告 vikingboard - Vikingboard におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-4090 2012-12-20 18:33 2007-07-30 Show GitHub Exploit DB Packet Storm
230366 4.3 警告 wp-feedstats - WordPress 用の WP-FeedStats プラグインにおけるクロスサイトスクリプティングの脆弱性 - CVE-2007-4104 2012-12-20 18:33 2006-08-17 Show GitHub Exploit DB Packet Storm
230367 7.5 危険 wikiwebweaver - WikiWebWeaver の index.php における任意のコードを実行される脆弱性 - CVE-2007-4182 2012-12-20 18:33 2007-08-7 Show GitHub Exploit DB Packet Storm
230368 5.8 警告 The Tor Project - Tor における torrc 設定ファイルを変更される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2007-4174 2012-12-20 18:33 2007-08-7 Show GitHub Exploit DB Packet Storm
230369 5 警告 WordPress.org - WordPress 用の Unnamed テーマなどの index.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-4166 2012-12-20 18:33 2007-08-7 Show GitHub Exploit DB Packet Storm
230370 4.3 警告 WordPress.org
xu yiyang
- WordPress 用の Blue Memories テーマの index.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-4165 2012-12-20 18:33 2007-08-7 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 19, 2026, 4:16 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
200231 5.3 MEDIUM
Network
ibm cloud_pak_for_security IBM Cloud Pak for Security (CP4S) 1.4.0.0 could allow a remote user to obtain sensitive information from HTTP response headers that could be used in further attacks against the system. CWE-200
Information Exposure
CVE-2020-4815 2024-11-21 14:33 2021-01-27 Show GitHub Exploit DB Packet Storm
200232 5.3 MEDIUM
Network
ibm cloud_pak_for_security IBM Cloud Pak for Security (CP4S) 1.3.0.1 and 1.4.0.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This informatio… CWE-209
Information Exposure Through an Error Message
CVE-2020-4628 2024-11-21 14:33 2021-01-27 Show GitHub Exploit DB Packet Storm
200233 8.2 HIGH
Network
ibm websphere_application_server IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to … CWE-611
XXE
CVE-2020-4949 2024-11-21 14:33 2021-01-27 Show GitHub Exploit DB Packet Storm
200234 3.3 LOW
Local
ibm spectrum_scale IBM Spectrum Scale 5.0.0 through 5.0.5.4 and 5.1.0 could allow a local user to poison log files which could impact support and development efforts. IBM X-Force ID: 190971. NVD-CWE-noinfo
CVE-2020-4889 2024-11-21 14:33 2021-01-27 Show GitHub Exploit DB Packet Storm
200235 7.5 HIGH
Network
ibm mq_internet_pass-thru IBM MQ Internet Pass-Thru 2.1 and 9.2 could allow a remote user to cause a denial of service by sending malformed MQ data requests which would consume all available resources. IBM X-Force ID: 188093. CWE-400
 Uncontrolled Resource Consumption
CVE-2020-4766 2024-11-21 14:33 2021-01-23 Show GitHub Exploit DB Packet Storm
200236 5.9 MEDIUM
Network
ibm security_identity_governance_and_intelligence IBM Security Identity Governance and Intelligence 5.2.6 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An atta… CWE-319
Cleartext Transmission of Sensitive Information
CVE-2020-4969 2024-11-21 14:33 2021-01-21 Show GitHub Exploit DB Packet Storm
200237 6.5 MEDIUM
Adjacent
ibm security_identity_governance_and_intelligence IBM Security Identity Governance and Intelligence 5.2.6 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 192427. CWE-327
 Use of a Broken or Risky Cryptographic Algorithm
CVE-2020-4968 2024-11-21 14:33 2021-01-21 Show GitHub Exploit DB Packet Storm
200238 4.3 MEDIUM
Network
ibm security_identity_governance_and_intelligence IBM Security Identity Governance and Intelligence 5.2.6 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:… CWE-59
Link Following
CVE-2020-4966 2024-11-21 14:33 2021-01-21 Show GitHub Exploit DB Packet Storm
200239 9.8 CRITICAL
Network
ibm security_identity_governance_and_intelligence IBM Security Identity Governance and Intelligence 5.2.6 does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources. IBM… CWE-306
Missing Authentication for Critical Function
CVE-2020-4958 2024-11-21 14:33 2021-01-21 Show GitHub Exploit DB Packet Storm
200240 7.8 HIGH
Local
ibm spectrum_lsf
spectrum_lsf_suite
IBM Spectrum LSF 10.1 and IBM Spectrum LSF Suite 10.2 could allow a user on the local network who has privileges to submit LSF jobs to execute arbitrary commands. IBM X-Force ID: 192586. CWE-287
CWE-798
Improper Authentication
 Use of Hard-coded Credentials
CVE-2020-4983 2024-11-21 14:33 2021-01-21 Show GitHub Exploit DB Packet Storm