Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 2, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
240041 7.5 危険 MODX - MODx 用の MuddyDogPaws FileDownload スニペットにおける任意のファイルをダウンロードされる脆弱性 - CVE-2007-0659 2012-09-25 16:47 2007-02-1 Show GitHub Exploit DB Packet Storm
240042 10 危険 MicroWorld Technologies Inc. - MicroWorld Technologies eScan の MWAGENT.EXE における任意のコマンドを実行される脆弱性 - CVE-2007-0655 2012-09-25 16:47 2007-05-2 Show GitHub Exploit DB Packet Storm
240043 5.1 警告 MailEnable - MailEnable Professional におけるクロスサイトリクエストフォージェリの脆弱性 - CVE-2007-0652 2012-09-25 16:47 2007-02-15 Show GitHub Exploit DB Packet Storm
240044 4.3 警告 MailEnable - MailEnable Professional におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-0651 2012-09-25 16:47 2007-02-15 Show GitHub Exploit DB Packet Storm
240045 6.8 警告 makeindex - teTeX の makeindex 用の mkind.c におけるバッファオーバーフローの脆弱性 - CVE-2007-0650 2012-09-25 16:47 2007-02-1 Show GitHub Exploit DB Packet Storm
240046 4.3 警告 OpenEMR - OpenEMR の interface/globals.php における任意のプログラム変数を上書きされる脆弱性 CWE-94
コード・インジェクション 		CVE-2007-0649 2012-09-25 16:47 2007-01-31 Show GitHub Exploit DB Packet Storm
240047 7.5 危険 GuppYTeam - GuppY の error.php における任意の PHP コードを挿入される脆弱性 - CVE-2007-0639 2012-09-25 16:47 2007-01-31 Show GitHub Exploit DB Packet Storm
240048 2.1 注意 inotify - inotify における脆弱性 - CVE-2007-0636 2012-09-25 16:47 2007-01-31 Show GitHub Exploit DB Packet Storm
240049 4.9 警告 michael still - Michael Still gtalkbot における重要な情報を取得される脆弱性 - CVE-2007-0627 2012-09-25 16:47 2007-01-31 Show GitHub Exploit DB Packet Storm
240050 4.9 警告 NoMachine - NoMachine NX Server の nxconfigure.sh におけるサーバ設定キーを変更される脆弱性 - CVE-2007-0625 2012-09-25 16:47 2007-01-29 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 3, 2026, 4:18 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
267211 6.5 MEDIUM
Local 		ibm tivoli_storage_manager
tivoli_storage_manager_for_virtual_environments_data_protection_for_vmware 		IBM Tivoli Storage Manager discloses unencrypted login credentials to Vmware vCenter that could be obtained by a local user. CWE-255
Credentials Management 		CVE-2016-6110 2024-11-21 11:55 2017-02-2 Show GitHub Exploit DB Packet Storm
267212 7.5 HIGH
Network 		ibm urbancode_deploy IBM UrbanCode Deploy could allow an authenticated user with access to the REST endpoints to access API and CLI getResource secured role properties. CWE-200
Information Exposure 		CVE-2016-6068 2024-11-21 11:55 2017-02-2 Show GitHub Exploit DB Packet Storm
267213 3.1 LOW
Network 		ibm forms_experience_builder IBM Forms Experience Builder could be susceptible to a server-side request forgery (SSRF) from the application design interface allowing for some information disclosure of internal resources. CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2016-6001 2024-11-21 11:55 2017-02-2 Show GitHub Exploit DB Packet Storm
267214 3.7 LOW
Network 		ibm sterling_selling_and_fulfillment_foundation IBM Sterling Order Management transmits the session identifier within the URL. When a user is unable to view a certain view due to not being allowed permissions, the website responds with an error pa… CWE-200
Information Exposure 		CVE-2016-5953 2024-11-21 11:55 2017-02-2 Show GitHub Exploit DB Packet Storm
267215 5.4 MEDIUM
Network 		ibm kenexa_lms IBM Kenexa LMS on Cloud is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially le… CWE-79
Cross-site Scripting 		CVE-2016-5942 2024-11-21 11:55 2017-02-2 Show GitHub Exploit DB Packet Storm
267216 5.7 MEDIUM
Network 		ibm kenexa_lms IBM Kenexa LMS on Cloud could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing dot dot sequences (/../) to view arbitra… CWE-22
Path Traversal 		CVE-2016-5941 2024-11-21 11:55 2017-02-2 Show GitHub Exploit DB Packet Storm
267217 5.4 MEDIUM
Network 		ibm kenexa_lms IBM Kenexa LMS on Cloud is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially le… CWE-79
Cross-site Scripting 		CVE-2016-5940 2024-11-21 11:55 2017-02-2 Show GitHub Exploit DB Packet Storm
267218 3.3 LOW
Local 		ibm kenexa_lms IBM Kenexa LMS on Cloud allows web pages to be stored locally which can be read by another user on the system. CWE-200
Information Exposure 		CVE-2016-5938 2024-11-21 11:55 2017-02-2 Show GitHub Exploit DB Packet Storm
267219 6.1 MEDIUM
Network 		ibm inotes IBM iNotes is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to cred… CWE-79
Cross-site Scripting 		CVE-2016-5881 2024-11-21 11:55 2017-02-2 Show GitHub Exploit DB Packet Storm
267220 5.3 MEDIUM
Network 		ibm security_key_lifecycle_manager IBM Tivoli Key Lifecycle Manager 2.5 and 2.6 can be deployed with active debugging code that can disclose sensitive information. CWE-200
Information Exposure 		CVE-2016-6117 2024-11-21 11:55 2017-02-2 Show GitHub Exploit DB Packet Storm