Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":July 1, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
228601 4.3 警告 Open-Xchange - Open-Xchange App Suite の Hazelcast クラスタ API におけるアクセス権を取得される脆弱性 CWE-200
情報漏えい
CVE-2013-5935 2013-09-26 19:05 2013-09-10 Show GitHub Exploit DB Packet Storm
228602 4 警告 Open-Xchange - Open-Xchange App Suite におけるクラスタを展開される脆弱性 CWE-255
証明書・パスワード管理
CVE-2013-5934 2013-09-26 18:59 2013-09-10 Show GitHub Exploit DB Packet Storm
228603 7.5 危険 Open-Xchange - Open-Xchange App Suite の Hazelcast クラスタ API における重要な情報を取得される脆弱性 CWE-287
不適切な認証
CVE-2013-5200 2013-09-26 18:36 2013-09-10 Show GitHub Exploit DB Packet Storm
228604 6.9 警告 Motorola Solutions, Inc
Google
- Republic Wireless 用 Motorola Defy XT スマートフォン上で稼働する Android におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2013-5933 2013-09-26 18:29 2013-09-24 Show GitHub Exploit DB Packet Storm
228605 6.9 警告 Motorola Solutions, Inc
Google
- Republic Wireless 用 Motorola Defy XT スマートフォン上で稼働する Android における権限を取得される脆弱性 CWE-16
環境設定
CVE-2013-4777 2013-09-26 18:05 2013-09-24 Show GitHub Exploit DB Packet Storm
228606 4 警告 ヒューレット・パッカード - HP System Management Homepage にスタックバッファオーバーフローの脆弱性 CWE-noinfo
情報不足
CVE-2013-4821 2013-09-26 17:46 2013-09-18 Show GitHub Exploit DB Packet Storm
228607 6.9 警告 IBM - IBM Rational ClearCase の RemoteClient コンポーネントにおける権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2013-5373 2013-09-26 17:32 2013-09-16 Show GitHub Exploit DB Packet Storm
228608 1.9 注意 IBM - 複数の IBM 製品におけるアクセス権を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2013-4025 2013-09-26 17:32 2013-09-23 Show GitHub Exploit DB Packet Storm
228609 4.3 警告 IBM - 複数の IBM 製品におけるセッション Cookie を読まれる脆弱性 CWE-200
情報漏えい
CVE-2013-4024 2013-09-26 17:31 2013-09-23 Show GitHub Exploit DB Packet Storm
228610 3.5 注意 IBM - 複数の IBM 製品におけるアクセス制限を回避される脆弱性 CWE-255
証明書・パスワード管理
CVE-2013-4022 2013-09-26 17:31 2013-09-23 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:July 1, 2026, 4:27 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
275781 6.1 MEDIUM
Network
ibm sterling_b2b_integrator Cross-site scripting (XSS) vulnerability in IBM Sterling B2B Integrator 5.2 before 5020500_14 and 5.2 06 before 5020602_1 allows remote attackers to inject arbitrary web script or HTML via unspecifie… CWE-79
Cross-site Scripting
CVE-2016-3057 2024-11-21 11:49 2016-11-30 Show GitHub Exploit DB Packet Storm
275782 5.4 MEDIUM
Network
ibm rational_engineering_lifecycle_manager
rational_rhapsody_design_manager
rational_quality_manager
rational_software_architect_design_manager
rational_doors_next_generation
rational_team…
Cross-site scripting (XSS) vulnerability in IBM Rational Collaborative Lifecycle Management 4.0 before 4.0.7 iFix11 and 5.0 before 5.0.2 iFix17, Rational Quality Manager 4.0 before 4.0.7 iFix11 and 5… CWE-79
Cross-site Scripting
CVE-2016-3014 2024-11-21 11:49 2016-11-30 Show GitHub Exploit DB Packet Storm
275783 3.5 LOW
Network
ibm connections Cross-site request forgery (CSRF) vulnerability in IBM Connections 4.0 through CR4, 4.5 through CR5, and 5.0 before CR4 allows remote authenticated users to hijack the authentication of arbitrary use… CWE-352
 Origin Validation Error
CVE-2016-3009 2024-11-21 11:49 2016-11-30 Show GitHub Exploit DB Packet Storm
275784 4.6 MEDIUM
Network
ibm connections Cross-site request forgery (CSRF) vulnerability in IBM Connections 4.0 through CR4, 4.5 through CR5, and 5.0 before CR4 allows remote authenticated users to hijack the authentication of arbitrary use… CWE-352
 Origin Validation Error
CVE-2016-3004 2024-11-21 11:49 2016-11-30 Show GitHub Exploit DB Packet Storm
275785 2.1 LOW
Physics
ibm connections IBM Connections 4.0 through CR4, 4.5 through CR5, and 5.0 before CR4 allows physically proximate attackers to obtain sensitive information by reading cached data on a client device. CWE-200
Information Exposure
CVE-2016-3002 2024-11-21 11:49 2016-11-30 Show GitHub Exploit DB Packet Storm
275786 8.8 HIGH
Network
ibm bigfix_remote_control Cross-site request forgery (CSRF) vulnerability in IBM BigFix Remote Control before 9.1.3 allows remote attackers to hijack the authentication of arbitrary users for requests that insert XSS sequence… CWE-352
 Origin Validation Error
CVE-2016-2963 2024-11-21 11:49 2016-11-30 Show GitHub Exploit DB Packet Storm
275787 4.3 MEDIUM
Network
ibm connections IBM Connections 4.0 through CR4, 4.5 through CR5, and 5.0 before CR4 allows remote authenticated users to obtain sensitive information by reading an "archaic" e-mail address in a response. CWE-200
Information Exposure
CVE-2016-2958 2024-11-21 11:49 2016-11-30 Show GitHub Exploit DB Packet Storm
275788 4.3 MEDIUM
Network
ibm connections IBM Connections 4.0 through CR4, 4.5 through CR5, and 5.0 before CR4 allows remote authenticated users to obtain sensitive information by reading a stack trace in a response. CWE-200
Information Exposure
CVE-2016-2957 2024-11-21 11:49 2016-11-30 Show GitHub Exploit DB Packet Storm
275789 3.7 LOW
Network
ibm connections IBM Connections 4.0 through CR4, 4.5 through CR5, and 5.0 before CR4 does not require SSL, which allows remote attackers to obtain sensitive cleartext information by sniffing the network. CWE-310
Cryptographic Issues
CVE-2016-2953 2024-11-21 11:49 2016-11-30 Show GitHub Exploit DB Packet Storm
275790 3.7 LOW
Network
ibm bigfix_remote_control IBM BigFix Remote Control before 9.1.3 does not enable the HSTS protection mechanism, which makes it easier for remote attackers to obtain sensitive information by leveraging use of HTTP. CWE-200
Information Exposure
CVE-2016-2952 2024-11-21 11:49 2016-11-30 Show GitHub Exploit DB Packet Storm