Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 28, 2026, noon

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
251691 7.5 危険 LANDesk - Lenovo ThinkManagement Console の ServerSetup web サービスにおける任意のコードを実行される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-1195 2012-02-21 16:43 2012-02-18 Show GitHub Exploit DB Packet Storm
251692 4.3 警告 Craig Barratt - BackupPC の RestoreFile.pm におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-5081 2012-02-21 16:42 2012-02-18 Show GitHub Exploit DB Packet Storm
251693 4.3 警告 Craig Barratt - BackupPC の View.pm におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-4923 2012-02-21 16:41 2012-02-18 Show GitHub Exploit DB Packet Storm
251694 9.3 危険 TYPO3 Association - TYPO3 の workspaces system エクステンションにおける PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2011-4614 2012-02-21 16:40 2011-12-16 Show GitHub Exploit DB Packet Storm
251695 4.3 警告 Craig Barratt - BackupPC の CGI/Browse.pm におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-3361 2012-02-21 16:34 2012-02-18 Show GitHub Exploit DB Packet Storm
251696 7.5 危険 Earl Miles - Drupal 用 Views モジュールにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2011-4113 2012-02-21 16:33 2012-02-17 Show GitHub Exploit DB Packet Storm
251697 2.1 注意 Robert Ancell - LightDM における任意のファイルの所有権を変更される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2011-4105 2012-02-21 16:26 2012-02-17 Show GitHub Exploit DB Packet Storm
251698 6.4 警告 マイクロソフト - Microsoft Windows Server 2008 における無効なドメイン名の継続的な名前解決を可能にされる脆弱性 CWE-Other
その他 		CVE-2012-1194 2012-02-21 16:25 2012-02-17 Show GitHub Exploit DB Packet Storm
251699 6.4 警告 PowerDNS - PowerDNS における無効なドメイン名の継続的な名前解決を可能にされる脆弱性 CWE-DesignError
CVE-2012-1193 2012-02-21 16:24 2012-02-17 Show GitHub Exploit DB Packet Storm
251700 6.4 警告 Stichting NLnet Labs - Unbound における無効なドメイン名の継続的な名前解決を可能にされる脆弱性 CWE-DesignError
CVE-2012-1192 2012-02-21 16:22 2012-02-17 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
265761 7.3 HIGH
Local 		ibm security_appscan IBM AppScan Enterprise Edition could allow a remote attacker to execute arbitrary code on the system, caused by improper handling of objects in memory. By persuading a victim to open specially-crafte… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-6042 2024-11-21 11:55 2017-02-2 Show GitHub Exploit DB Packet Storm
265762 5.0 MEDIUM
Network 		ibm rational_collaborative_lifecycle_management IBM Jazz Foundation could allow an authenticated user to take over a previously logged in user due to session expiration not being enforced. CWE-384
 Session Fixation 		CVE-2016-6040 2024-11-21 11:55 2017-02-2 Show GitHub Exploit DB Packet Storm
265763 5.4 MEDIUM
Network 		ibm jazz_reporting_service IBM Jazz Reporting Service (JRS) is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality poten… CWE-79
Cross-site Scripting 		CVE-2016-6039 2024-11-21 11:55 2017-02-2 Show GitHub Exploit DB Packet Storm
265764 6.8 MEDIUM
Network 		ibm tivoli_storage_manager_for_virtual_environments_data_protection_for_vmware IBM Tivoli Storage Manager for Virtual Environments (VMware) could disclose the Windows domain credentials to a user with a high level of privileges. CWE-200
Information Exposure 		CVE-2016-6034 2024-11-21 11:55 2017-02-2 Show GitHub Exploit DB Packet Storm
265765 5.4 MEDIUM
Network 		ibm rational_collaborative_lifecycle_management IBM Jazz Foundation is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leadin… CWE-79
Cross-site Scripting 		CVE-2016-6030 2024-11-21 11:55 2017-02-2 Show GitHub Exploit DB Packet Storm
265766 4.3 MEDIUM
Network 		ibm rational_collaborative_lifecycle_management IBM Jazz technology based products might allow an attacker to view work item titles that they do not have privilege to view. CWE-264
Permissions, Privileges, and Access Controls 		CVE-2016-6028 2024-11-21 11:55 2017-02-2 Show GitHub Exploit DB Packet Storm
265767 6.1 MEDIUM
Network 		ibm sterling_b2b_integrator IBM Sterling B2B Integrator Standard Edition could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a … CWE-601
Open Redirect 		CVE-2016-6020 2024-11-21 11:55 2017-02-2 Show GitHub Exploit DB Packet Storm
265768 6.1 MEDIUM
Network 		ibm tririga_application_platform IBM TRIRIGA Application Platform is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality poten… CWE-79
Cross-site Scripting 		CVE-2016-6000 2024-11-21 11:55 2017-02-2 Show GitHub Exploit DB Packet Storm
265769 6.5 MEDIUM
Network 		ibm infosphere_information_server IBM InfoSphere Information Server contains a vulnerability that would allow an authenticated user to browse any file on the engine tier, and examine its contents. CWE-200
Information Exposure 		CVE-2016-5994 2024-11-21 11:55 2017-02-2 Show GitHub Exploit DB Packet Storm
265770 6.3 MEDIUM
Network 		ibm security_privileged_identity_manager IBM Security Privileged Identity Manager Virtual Appliance allows an authenticated user to upload malicious files that would be automatically executed by the server. CWE-284
Improper Access Control 		CVE-2016-5990 2024-11-21 11:55 2017-02-2 Show GitHub Exploit DB Packet Storm