Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 30, 2026, 2 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
231131 6.8 警告 Creative Digital Resources - SocketMail の content/fnc-readmail3.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2007-5627 2012-12-20 18:33 2007-10-23 Show GitHub Exploit DB Packet Storm
231132 4.3 警告 simongibson - ASP Site Search SearchSimon Lite の filename.asp におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-5625 2012-12-20 18:33 2007-10-23 Show GitHub Exploit DB Packet Storm
231133 7.5 危険 zehnet - ZZ:FlashChat の admin/inc/help.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2007-5620 2012-12-20 18:33 2007-10-22 Show GitHub Exploit DB Packet Storm
231134 7.2 危険 VMware - VMware Server における権限を取得される脆弱性 CWE-noinfo
情報不足 		CVE-2007-5619 2012-12-20 18:33 2007-10-21 Show GitHub Exploit DB Packet Storm
231135 7.2 危険 VMware - VMware Playerなどの製品における Authorization などのサービスにおける権限を取得される脆弱性 CWE-noinfo
情報不足 		CVE-2007-5618 2012-12-20 18:33 2007-10-21 Show GitHub Exploit DB Packet Storm
231136 10 危険 VMware - VMware Player および Workstation における脆弱性 CWE-noinfo
情報不足 		CVE-2007-5617 2012-12-20 18:33 2007-10-21 Show GitHub Exploit DB Packet Storm
231137 9.3 危険 SonicWALL - SonicWall SSL-VPN NetExtender NELaunchCtrl ActiveX コントロールにおけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2007-5603 2012-12-20 18:33 2007-11-5 Show GitHub Exploit DB Packet Storm
231138 10 危険 swiftview - SwiftView Viewer におけるスタックベースのバッファーオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2007-5602 2012-12-20 18:33 2007-10-2 Show GitHub Exploit DB Packet Storm
231139 4.3 警告 The phpMyAdmin Project - phpMyAdmin におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-5589 2012-12-20 18:33 2007-10-17 Show GitHub Exploit DB Packet Storm
231140 5 警告 XScreenSaver project - xscreensaver におけるロックされたセッションへのアクセス権を取得される脆弱性 CWE-399
リソース管理の問題 		CVE-2007-5585 2012-12-20 18:33 2007-10-19 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 30, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
197441 6.5 MEDIUM
Network 		ibm maximo_for_civil_infrastructure IBM Maximo for Civil Infrastructure 7.6.2 could allow a user to obtain sensitive information due to insecure storeage of authentication credentials. IBM X-Force ID: 196621. CWE-522
 Insufficiently Protected Credentials 		CVE-2021-20445 2024-11-21 14:46 2021-02-19 Show GitHub Exploit DB Packet Storm
197442 6.1 MEDIUM
Network 		ibm maximo_for_civil_infrastructure IBM Maximo for Civil Infrastructure 7.6.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functional… CWE-79
Cross-site Scripting 		CVE-2021-20444 2024-11-21 14:46 2021-02-19 Show GitHub Exploit DB Packet Storm
197443 8.8 HIGH
Network 		ibm maximo_for_civil_infrastructure IBM Maximo for Civil Infrastructure 7.6.2 includes executable functionality (such as a library) from a source that is outside of the intended control sphere. IBM X-Force ID: 196619. CWE-829
 Inclusion of Functionality from Untrusted Control Sphere 		CVE-2021-20443 2024-11-21 14:46 2021-02-19 Show GitHub Exploit DB Packet Storm
197444 7.5 HIGH
Network 		ibm websphere_application_server IBM WebSphere Application Server 8.0, 8.5, and 9.0 could allow a remote attacker to traverse directories. An attacker could send a specially-crafted URL request containing "dot dot" sequences (/../) … CWE-22
Path Traversal 		CVE-2021-20354 2024-11-21 14:46 2021-02-19 Show GitHub Exploit DB Packet Storm
197445 7.2 HIGH
Network 		soliton filezen FileZen (V3.0.0 to V4.2.7 and V5.0.0 to V5.0.2) allows a remote attacker with administrator rights to execute arbitrary OS commands via unspecified vectors. CWE-78
OS Command  		CVE-2021-20655 2024-11-21 14:46 2021-02-17 Show GitHub Exploit DB Packet Storm
197446 5.3 MEDIUM
Network 		nec csdj-b_firmware
csdj-h_firmware
csdj-d_firmware
csdj-a_firmware 		Calsos CSDJ (CSDJ-B 01.08.00 and earlier, CSDJ-H 01.08.00 and earlier, CSDJ-D 01.08.00 and earlier, and CSDJ-A 03.08.00 and earlier) allows remote attackers to bypass access restriction and to obtain… CWE-276
Incorrect Default Permissions  		CVE-2021-20653 2024-11-21 14:46 2021-02-17 Show GitHub Exploit DB Packet Storm
197447 7.5 HIGH
Network 		ibm security_verify_information_queue IBM Security Verify Information Queue 1.0.6 and 1.0.7 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communicatio… CWE-798
 Use of Hard-coded Credentials 		CVE-2021-20412 2024-11-21 14:46 2021-02-13 Show GitHub Exploit DB Packet Storm
197448 8.1 HIGH
Adjacent 		ibm security_verify_information_queue IBM Security Verify Information Queue 1.0.6 and 1.0.7 could allow a user to impersonate another user on the system due to incorrectly updating the session identifier. IBM X-Force ID: 198191. CWE-669
 Incorrect Resource Transfer Between Spheres 		CVE-2021-20411 2024-11-21 14:46 2021-02-13 Show GitHub Exploit DB Packet Storm
197449 5.3 MEDIUM
Network 		ibm security_verify_information_queue IBM Security Verify Information Queue 1.0.6 and 1.0.7 sends user credentials in plain clear text which can be read by an authenticated user using man in the middle techniques. IBM X-Force ID: 198190. CWE-522
 Insufficiently Protected Credentials 		CVE-2021-20410 2024-11-21 14:46 2021-02-13 Show GitHub Exploit DB Packet Storm
197450 7.5 HIGH
Network 		ibm security_verify_information_queue IBM Security Verify Information Queue 1.0.6 and 1.0.7 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attack… CWE-319
Cleartext Transmission of Sensitive Information 		CVE-2021-20409 2024-11-21 14:46 2021-02-13 Show GitHub Exploit DB Packet Storm