Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 5, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
251321	7.2	危険	マイクロソフト	-	Microsoft Windows の win32k.sys における権限昇格の脆弱性	CWE-399 リソース管理の問題	CVE-2011-1239	2011-05-9 11:51	2011-04-12	Show	GitHub Exploit DB Packet Storm

251322	7.2	危険	マイクロソフト	-	Microsoft Windows の win32k.sys における権限昇格の脆弱性	CWE-399 リソース管理の問題	CVE-2011-1238	2011-05-9 11:50	2011-04-12	Show	GitHub Exploit DB Packet Storm

251323	7.2	危険	マイクロソフト	-	Microsoft Windows の win32k.sys における権限昇格の脆弱性	CWE-399 リソース管理の問題	CVE-2011-1237	2011-05-9 11:49	2011-04-12	Show	GitHub Exploit DB Packet Storm

251324	7.2	危険	マイクロソフト	-	Microsoft Windows の win32k.sys における権限昇格の脆弱性	CWE-399 リソース管理の問題	CVE-2011-1236	2011-05-9 11:48	2011-04-12	Show	GitHub Exploit DB Packet Storm

251325	7.2	危険	マイクロソフト	-	Microsoft Windows の win32k.sys における権限昇格の脆弱性	CWE-399 リソース管理の問題	CVE-2011-1235	2011-05-9 11:46	2011-04-12	Show	GitHub Exploit DB Packet Storm

251326	6.8	警告	freedesktop.org サイバートラスト株式会社 foolabs OpenOffice.org Project レッドハット	-	xpdf および poppler などの製品で利用される PDF パーサの FoFiType1::parse 関数における任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2010-3704	2011-05-9 11:29	2010-10-7	Show	GitHub Exploit DB Packet Storm

251327	6.8	警告	freedesktop.org サイバートラスト株式会社 foolabs OpenOffice.org Project レッドハット	-	xpdf および poppler などの製品で利用される PDF パーサの Gfx::getPos 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2010-3702	2011-05-9 11:26	2010-10-7	Show	GitHub Exploit DB Packet Storm

251328	7.5	危険	サイバートラスト株式会社 The Perl Foundation レッドハットオラクル	-	Perl の Safe モジュールにおける任意のコードを挿入または実行される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-1168	2011-05-9 11:13	2010-06-7	Show	GitHub Exploit DB Packet Storm

251329	9.3	危険	サン・マイクロシステムズサイバートラスト株式会社 Mozilla Foundation レッドハットオラクル	-	Mozilla NSS の正規表現の解析における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2009-2404	2011-05-9 11:11	2009-08-1	Show	GitHub Exploit DB Packet Storm

251330	7.5	危険	アップルサイバートラスト株式会社 xmlsoft.org レッドハットオラクル	-	libxslt の pattern.c におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2008-1767	2011-05-9 11:07	2008-05-21	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 5, 2026, 4:51 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
196831	7.5	HIGH Network	ibm	sterling_b2b_integrator	IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 6.0.3.2 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-For…	CWE-327 Use of a Broken or Risky Cryptographic Algorithm	CVE-2020-4937	2024-11-21 14:33	2020-11-20	Show	GitHub Exploit DB Packet Storm

196832	7.8	HIGH Local	ibm	db2	IBM DB2 Accessories Suite for Linux, UNIX, and Windows, DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow a local authenticated attacker to exe…	CWE-426 Untrusted Search Path	CVE-2020-4739	2024-11-21 14:33	2020-11-20	Show	GitHub Exploit DB Packet Storm

196833	4.7	MEDIUM Local	ibm fedoraproject oracle	vios aix fedora communications_cloud_native_core_binding_support_function communications_cloud_native_core_policy communications_cloud_native_core_network_exposure_function	IBM Power9 (AIX 7.1, 7.2, and VIOS 3.1) processors could allow a local user to obtain sensitive information from the data in the L1 cache under extenuating circumstances. IBM X-Force ID: 189296.	NVD-CWE-noinfo	CVE-2020-4788	2024-11-21 14:33	2020-11-20	Show	GitHub Exploit DB Packet Storm

196834	5.4	MEDIUM Network	ibm	jazz_reporting_service	IBM Jazz Reporting Service 6.0.6, 6.0.6.1, 7.0, and 7.0.1 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering …	CWE-79 Cross-site Scripting	CVE-2020-4718	2024-11-21 14:33	2020-11-20	Show	GitHub Exploit DB Packet Storm

196835	7.8	HIGH Local	ibm	db2	IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to a buffer overflow, caused by improper bounds checking which could allow a local attacker to exe…	CWE-120 Classic Buffer Overflow	CVE-2020-4701	2024-11-21 14:33	2020-11-20	Show	GitHub Exploit DB Packet Storm

196836	4.3	MEDIUM Network	ibm	sterling_file_gateway	IBM Sterling File Gateway 6.0.0.0 through 6.0.3.2 and 2.2.0.0 through 2.2.6.5 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie val…	NVD-CWE-noinfo	CVE-2020-4763	2024-11-21 14:33	2020-11-17	Show	GitHub Exploit DB Packet Storm

196837	4.8	MEDIUM Network	ibm	sterling_b2b_integrator	IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.2 and 5.2.0.0 through 5.2.6.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript c…	CWE-79 Cross-site Scripting	CVE-2020-4705	2024-11-21 14:33	2020-11-17	Show	GitHub Exploit DB Packet Storm

196838	8.8	HIGH Network	ibm	sterling_b2b_integrator	IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.2 and 5.2.0.0 through 5.2.6.5 could allow an authenticated user belonging to a specific user group to create a user or group with ad…	NVD-CWE-noinfo	CVE-2020-4700	2024-11-21 14:33	2020-11-17	Show	GitHub Exploit DB Packet Storm

196839	6.5	MEDIUM Network	ibm	sterling_b2b_integrator	IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.2 and 5.2.0.0 through 5.2.6.5 could allow an authenticated user to obtain sensitive information from the Dashboard UI. IBM X-Force I…	NVD-CWE-noinfo	CVE-2020-4692	2024-11-21 14:33	2020-11-17	Show	GitHub Exploit DB Packet Storm

196840	5.4	MEDIUM Network	ibm	business_automation_workflow	IBM Business Automation Workflow 20.0.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functional…	CWE-79 Cross-site Scripting	CVE-2020-4672	2024-11-21 14:33	2020-11-17	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed