Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 7, 2026, 12:09 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
250171 7.5 危険 The PHP Group - PHP の is_a 関数における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2011-3379 2011-11-10 16:27 2011-08-22 Show GitHub Exploit DB Packet Storm
250172 7.5 危険 SIR - Gnuboard の bbs/tb.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2011-4066 2011-11-10 16:26 2011-11-4 Show GitHub Exploit DB Packet Storm
250173 6.3 警告 Conky - Conky における任意のファイルを上書きされる脆弱性 CWE-59
リンク解釈の問題 		CVE-2011-3616 2011-11-10 16:26 2011-11-4 Show GitHub Exploit DB Packet Storm
250174 6.9 警告 GNOME Project
レッドハット		 - GNOME NetworkManager における任意のコマンドを実行される脆弱性 CWE-Other
その他 		CVE-2011-3364 2011-11-10 16:24 2011-11-4 Show GitHub Exploit DB Packet Storm
250175 3.6 注意 pureftpd - pure-FTPd のディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2011-3171 2011-11-10 16:24 2011-11-4 Show GitHub Exploit DB Packet Storm
250176 6.8 警告 ヒューレット・パッカード - HP-UX Containers における権限を取得される脆弱性 CWE-noinfo
情報不足 		CVE-2011-3164 2011-11-10 16:23 2011-10-26 Show GitHub Exploit DB Packet Storm
250177 7.5 危険 e107.org - e107 CMS の install_.php における任意の PHP コードを挿入される脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2011-1513 2011-11-10 16:23 2011-11-4 Show GitHub Exploit DB Packet Storm
250178 7.5 危険 Deon George - phpLDAPadmin の lib/functions.php 内の masort 関数における任意の PHP コードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2011-4075 2011-11-9 16:42 2011-11-2 Show GitHub Exploit DB Packet Storm
250179 4.3 警告 Deon George - phpLDAPadmin の cmd.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-4074 2011-11-9 16:42 2011-11-2 Show GitHub Exploit DB Packet Storm
250180 6.4 警告 ヒューレット・パッカード - HP OpenView Network Node Manager (OV NNM) における任意のコードを実行される脆弱性 CWE-noinfo
情報不足 		CVE-2011-3167 2011-11-9 16:38 2011-11-1 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 7, 2026, 4:22 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
197811 5.4 MEDIUM
Network 		ibm intelligent_operations_center
intelligent_operations_center_for_emergency_management
water_operations_for_waternamics 		IBM Intelligent Operations Center for Emergency Management, Intelligent Operations Center (IOC), and IBM Water Operations for Waternamics are vulnerable to cross-site scripting. This vulnerability al… CWE-79
Cross-site Scripting 		CVE-2020-4318 2024-11-21 14:32 2020-07-28 Show GitHub Exploit DB Packet Storm
197812 5.4 MEDIUM
Network 		ibm intelligent_operations_center
intelligent_operations_center_for_emergency_management
water_operations_for_waternamics 		IBM Intelligent Operations Center for Emergency Management, Intelligent Operations Center (IOC), and IBM Water Operations for Waternamics are vulnerable to cross-site scripting. This vulnerability al… CWE-79
Cross-site Scripting 		CVE-2020-4317 2024-11-21 14:32 2020-07-28 Show GitHub Exploit DB Packet Storm
197813 4.3 MEDIUM
Network 		ibm verify_gateway IBM Verify Gateway (IVG) 1.0.0 and 1.0.1 could disclose potentially sensitive information to an authenticated user due to world readable log files. IBM X-Force ID: 179484. CWE-532
 Inclusion of Sensitive Information in Log Files 		CVE-2020-4405 2024-11-21 14:32 2020-07-27 Show GitHub Exploit DB Packet Storm
197814 5.4 MEDIUM
Network 		ibm filenet_content_manager IBM FileNet Content Manager 5.5.3 and 5.5.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended function… CWE-79
Cross-site Scripting 		CVE-2020-4447 2024-11-21 14:32 2020-07-24 Show GitHub Exploit DB Packet Storm
197815 7.5 HIGH
Network 		ibm verify_gateway IBM Verify Gateway (IVG) 1.0.0 and 1.0.1 uses an inadequate account lockout setting that could allow a remote attacker to brute force account credentials. IBM X-Force ID: 179478. CWE-307
mproper Restriction of Excessive Authentication Attempts 		CVE-2020-4400 2024-11-21 14:32 2020-07-23 Show GitHub Exploit DB Packet Storm
197816 6.5 MEDIUM
Network 		ibm verify_gateway IBM Verify Gateway (IVG) 1.0.0 and 1.0.1 could allow an authenticated user to send malformed requests to cause a denial of service against the server. IBM X-Force ID: 179476. NVD-CWE-noinfo
CVE-2020-4399 2024-11-21 14:32 2020-07-23 Show GitHub Exploit DB Packet Storm
197817 5.9 MEDIUM
Network 		ibm verify_gateway IBM Verify Gateway (IVG) 1.0.0 and 1.0.1 transmits sensitive information in plain text which could be obtained by an attacker using man in the middle techniques. IBM X-Force ID: 179428. CWE-319
Cleartext Transmission of Sensitive Information 		CVE-2020-4397 2024-11-21 14:32 2020-07-23 Show GitHub Exploit DB Packet Storm
197818 9.8 CRITICAL
Network 		ibm verify_gateway IBM Verify Gateway (IVG) 1.0.0 and 1.0.1 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external… CWE-798
 Use of Hard-coded Credentials 		CVE-2020-4385 2024-11-21 14:32 2020-07-23 Show GitHub Exploit DB Packet Storm
197819 7.8 HIGH
Local 		ibm verify_gateway IBM Verify Gateway (IVG) 1.0.0 and 1.0.1 stores user credentials in plain in clear text which can be read by a local user. IBM X-Force ID: 179009 CWE-522
 Insufficiently Protected Credentials 		CVE-2020-4372 2024-11-21 14:32 2020-07-23 Show GitHub Exploit DB Packet Storm
197820 3.3 LOW
Local 		ibm verify_gateway IBM Verify Gateway (IVG) 1.0.0 and 1.0.1 contains sensitive information in leftover debug code that could be used aid a local user in further attacks against the system. IBM X-Force ID: 179008. CWE-922
 Insecure Storage of Sensitive Information 		CVE-2020-4371 2024-11-21 14:32 2020-07-23 Show GitHub Exploit DB Packet Storm