Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 22, 2026, 2 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
202031 6.1 警告
Network 		IBM - IBM Security Identity Manager 仮想アプライアンスにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2016-9704 2017-02-22 11:09 2016-12-1 Show GitHub Exploit DB Packet Storm
202032 2.4 低
Physics 		IBM - IBM Security Identity Manager 仮想アプライアンスにおける重要な情報を取得される脆弱性 CWE-384
セッションの固定化 		CVE-2016-9703 2017-02-22 11:09 2016-12-1 Show GitHub Exploit DB Packet Storm
202033 3.7 低
Network 		IBM - IBM Security Access Manager における情報を公開される脆弱性 CWE-200
情報漏えい 		CVE-2016-3045 2017-02-22 11:07 2016-12-8 Show GitHub Exploit DB Packet Storm
202034 4 警告
Local 		IBM - IBM Security Key Lifecycle Manager におけるローカルに保存された Web ページを読まれる脆弱性 CWE-200
情報漏えい 		CVE-2016-6097 2017-02-21 16:55 2016-06-29 Show GitHub Exploit DB Packet Storm
202035 6.1 警告
Network 		IBM - IBM Security Key Lifecycle Manager におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2016-6096 2017-02-21 16:55 2016-06-29 Show GitHub Exploit DB Packet Storm
202036 4.3 警告
Network 		IBM - IBM Security Key Lifecycle Manager における環境などに関する重要な情報を含むエラーメッセージを出力される脆弱性 CWE-200
情報漏えい 		CVE-2016-6094 2017-02-21 16:55 2016-06-29 Show GitHub Exploit DB Packet Storm
202037 6.2 警告
Local 		IBM - IBM Security Key Lifecycle Manager における平文で保存されたユーザの認証情報を読まれる脆弱性 CWE-200
情報漏えい 		CVE-2016-6092 2017-02-21 16:55 2016-06-29 Show GitHub Exploit DB Packet Storm
202038 5.4 警告
Network 		IBM - IBM Connections におけるホストヘッダを挿入される脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2016-0310 2017-02-21 16:43 2016-08-9 Show GitHub Exploit DB Packet Storm
202039 4.3 警告
Network 		IBM - IBM Connections におけるリンクを改ざんされる脆弱性 CWE-284
不適切なアクセス制御 		CVE-2016-0308 2017-02-21 16:43 2016-08-9 Show GitHub Exploit DB Packet Storm
202040 4.3 警告
Network 		IBM - IBM Connections における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2016-0307 2017-02-21 16:43 2016-08-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 22, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
292911 - norman security_suite Unspecified vulnerability in Norman Security Suite 10.1 and earlier allows local users to gain privileges via unknown vectors. CWE-264
Permissions, Privileges, and Access Controls 		CVE-2014-0816 2024-11-21 11:02 2014-02-27 Show GitHub Exploit DB Packet Storm
292912 - cisco unified_communications_manager The Certificate Authority Proxy Function (CAPF) CLI implementation in Cisco Unified Communications Manager (Unified CM) 10.0(1) and earlier allows local users to inject commands via unspecified CAPF … CWE-20
 Improper Input Validation  		CVE-2014-0747 2024-11-21 11:02 2014-02-27 Show GitHub Exploit DB Packet Storm
292913 - cisco unified_contact_center_express_editor_software The disaster recovery system (DRS) in Cisco Unified Contact Center Express (Unified CCX) allows remote authenticated users to obtain sensitive information by reading extraneous fields in an HTML docu… CWE-200
Information Exposure 		CVE-2014-0746 2024-11-21 11:02 2014-02-27 Show GitHub Exploit DB Packet Storm
292914 - cisco unified_contact_center_express_editor_software Cross-site request forgery (CSRF) vulnerability in the Unified Serviceability subsystem in Cisco Unified Contact Center Express (Unified CCX) allows remote attackers to hijack the authentication of a… CWE-352
 Origin Validation Error 		CVE-2014-0745 2024-11-21 11:02 2014-02-27 Show GitHub Exploit DB Packet Storm
292915 - cisco unified_communications_manager The Certificate Authority Proxy Function (CAPF) component in Cisco Unified Communications Manager (Unified CM) 10.0(1) and earlier allows remote attackers to bypass authentication and modify register… CWE-287
Improper Authentication 		CVE-2014-0743 2024-11-21 11:02 2014-02-27 Show GitHub Exploit DB Packet Storm
292916 - cisco unified_communications_manager The Certificate Authority Proxy Function (CAPF) CLI implementation in the CSR management feature in Cisco Unified Communications Manager (Unified CM) 10.0(1) and earlier allows local users to read or… CWE-20
 Improper Input Validation  		CVE-2014-0742 2024-11-21 11:02 2014-02-27 Show GitHub Exploit DB Packet Storm
292917 - cisco unified_communications_manager The certificate-import feature in the Certificate Authority Proxy Function (CAPF) CLI implementation in Cisco Unified Communications Manager (Unified CM) 10.0(1) and earlier allows local users to rea… CWE-310
Cryptographic Issues 		CVE-2014-0741 2024-11-21 11:02 2014-02-27 Show GitHub Exploit DB Packet Storm
292918 - cisco unified_communications_manager Cross-site request forgery (CSRF) vulnerability in the Call Detail Records Analysis and Reporting (CAR) interface in the OS Administration component in Cisco Unified Communications Manager (Unified C… CWE-352
 Origin Validation Error 		CVE-2014-0740 2024-11-21 11:02 2014-02-27 Show GitHub Exploit DB Packet Storm
292919 - ibm rational_focal_point Multiple cross-site scripting (XSS) vulnerabilities in the (1) ForwardController and (2) AttributeEditor scripts in IBM Rational Focal Point 6.4.x and 6.5.x before 6.5.2.3 and 6.6.x before 6.6.1 allo… CWE-79
Cross-site Scripting 		CVE-2014-0853 2024-11-21 11:02 2014-02-26 Show GitHub Exploit DB Packet Storm
292920 - ibm rational_focal_point Cross-site scripting (XSS) vulnerability in IBM Rational Focal Point 6.4.x and 6.5.x before 6.5.2.3 and 6.6.x before 6.6.1 allows remote authenticated users to inject arbitrary web script or HTML by … CWE-79
Cross-site Scripting 		CVE-2014-0843 2024-11-21 11:02 2014-02-26 Show GitHub Exploit DB Packet Storm