Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 18, 2026, 2:16 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
249691 4.3 警告 zimplit - Zimplit CMS におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-4513 2012-03-27 18:42 2010-12-9 Show GitHub Exploit DB Packet Storm
249692 7.2 危険 Cobbler project - Cobbler における詳細不明な脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2010-4512 2012-03-27 18:42 2010-04-23 Show GitHub Exploit DB Packet Storm
249693 10 危険 シックス・アパート株式会社 - Movable Type における詳細不明な脆弱性 CWE-noinfo
情報不足
CVE-2010-4511 2012-03-27 18:42 2010-12-9 Show GitHub Exploit DB Packet Storm
249694 10 危険 シックス・アパート株式会社 - Movable Type における詳細不明な脆弱性 CWE-noinfo
情報不足
CVE-2010-4509 2012-03-27 18:42 2010-12-9 Show GitHub Exploit DB Packet Storm
249695 10 危険 Mozilla Foundation - Mozilla Firefox の WebSockets 実装における脆弱性 CWE-noinfo
情報不足
CVE-2010-4508 2012-03-27 18:42 2010-12-9 Show GitHub Exploit DB Packet Storm
249696 9.3 危険 clear - ClearSpot の iSpot における管理者の認証をクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2010-4507 2012-03-27 18:42 2010-12-30 Show GitHub Exploit DB Packet Storm
249697 6.8 警告 injader - Injader の login.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-4505 2012-03-27 18:42 2010-12-8 Show GitHub Exploit DB Packet Storm
249698 4.3 警告 Intelliants - eSyndiCat Directory におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-4504 2012-03-27 18:42 2010-12-8 Show GitHub Exploit DB Packet Storm
249699 7.5 危険 aigaion - Aigaion の indexlight.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-4503 2012-03-27 18:42 2010-12-8 Show GitHub Exploit DB Packet Storm
249700 7.2 危険 CA Technologies - CA Internet Security Suite Plus の KmxSbx.sys における整数オーバーフローの脆弱性 CWE-189
数値処理の問題
CVE-2010-4502 2012-03-27 18:42 2010-12-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 18, 2026, 4:12 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
200091 5.5 MEDIUM
Local
ibm spectrum_scale IBM Spectrum Scale 5.0.0 through 5.0.5.5 and 5.1.0 through 5.1.0.2 uses an inadequate account lockout setting that could allow a local user er to brute force Rest API account credentials. IBM X-Force… CWE-307
mproper Restriction of Excessive Authentication Attempts
CVE-2020-4891 2024-11-21 14:33 2021-03-16 Show GitHub Exploit DB Packet Storm
200092 4.4 MEDIUM
Local
ibm spectrum_scale IBM Spectrum Scale 5.0.0 through 5.0.5.5 and 5.1.0 through 5.1.0.2 could allow a local user with a valid role to the REST API to cause a denial of service due to weak or absense of rate limiting. IBM… NVD-CWE-Other
CVE-2020-4890 2024-11-21 14:33 2021-03-16 Show GitHub Exploit DB Packet Storm
200093 5.5 MEDIUM
Local
ibm spectrum_scale IBM Spectrum Scale 5.0.0 through 5.0.5.5 and 5.1.0 through 5.1.0.2 could allow a local user to poison log files which could impact support and development efforts. IBM X-Force ID: 190450. CWE-74
Injection
CVE-2020-4851 2024-11-21 14:33 2021-03-16 Show GitHub Exploit DB Packet Storm
200094 7.5 HIGH
Network
ibm datapower_gateway IBM DataPower Gateway 10.0.0.0 through 10.0.1.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 189965. CWE-327
 Use of a Broken or Risky Cryptographic Algorithm
CVE-2020-4831 2024-11-21 14:33 2021-03-13 Show GitHub Exploit DB Packet Storm
200095 7.8 HIGH
Local
ibm
netapp
db2
oncommand_insight
IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 db2fm is vulnerable to a buffer overflow, caused by improper bounds checking which could allow a loca… CWE-120
Classic Buffer Overflow
CVE-2020-5025 2024-11-21 14:33 2021-03-12 Show GitHub Exploit DB Packet Storm
200096 7.5 HIGH
Network
ibm
netapp
db2
oncommand_insight
IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow an unauthenticated attacker to cause a denial of service due a hang in the SSL handshake … NVD-CWE-noinfo
CVE-2020-5024 2024-11-21 14:33 2021-03-12 Show GitHub Exploit DB Packet Storm
200097 4.4 MEDIUM
Local
ibm
netapp
db2
oncommand_insight
IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow a local user to read and write specific files due to weak file permissions. IBM X-Force I… CWE-276
Incorrect Default Permissions 
CVE-2020-4976 2024-11-21 14:33 2021-03-12 Show GitHub Exploit DB Packet Storm
200098 6.5 MEDIUM
Network
ibm websphere_application_server IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a remote attacker to traverse directories on the system. When application security is disabled and JAX-RPC applications are present… CWE-22
Path Traversal
CVE-2020-5016 2024-11-21 14:33 2021-03-11 Show GitHub Exploit DB Packet Storm
200099 5.5 MEDIUM
Local
ibm spss_modeler A vulnerability exists in IBM SPSS Modeler Subscription Installer that allows a user with create symbolic link permission to write arbitrary file in another protected path during product installation… CWE-59
Link Following
CVE-2020-4717 2024-11-21 14:33 2021-03-11 Show GitHub Exploit DB Packet Storm
200100 6.7 MEDIUM
Local
ibm datapower_gateway IBM DataPower Gateway V10 and V2018 could allow a local attacker with administrative privileges to execute arbitrary code on the system using a server-side requesr forgery attack. IBM X-Force ID: 193… CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2020-5014 2024-11-21 14:33 2021-03-9 Show GitHub Exploit DB Packet Storm