Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 1, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
257231 5 警告 アップル
サイバートラスト株式会社
VMware
サン・マイクロシステムズ
レッドハット
- Sun Java SE および OpenJDK の Java Runtime Environment (JRE) における ディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2009-3728 2010-02-23 11:51 2009-11-9 Show GitHub Exploit DB Packet Storm
257232 9.3 危険 マイクロソフト - Microsoft Internet Explorer における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2010-0248 2010-02-22 12:15 2010-01-21 Show GitHub Exploit DB Packet Storm
257233 9.3 危険 マイクロソフト - Microsoft Internet Explorer における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2010-0244 2010-02-22 12:15 2010-01-21 Show GitHub Exploit DB Packet Storm
257234 9.3 危険 マイクロソフト - Microsoft Internet Explorer の URL 検証における任意のローカルプログラムを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2010-0027 2010-02-22 12:15 2010-01-21 Show GitHub Exploit DB Packet Storm
257235 9.3 危険 マイクロソフト - Microsoft Internet Explorer における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2010-0247 2010-02-22 12:14 2010-01-21 Show GitHub Exploit DB Packet Storm
257236 9.3 危険 マイクロソフト - Microsoft Internet Explorer における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2010-0246 2010-02-22 12:14 2010-01-21 Show GitHub Exploit DB Packet Storm
257237 9.3 危険 マイクロソフト - Microsoft Internet Explorer における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2010-0245 2010-02-22 12:13 2010-01-21 Show GitHub Exploit DB Packet Storm
257238 4.3 警告 マイクロソフト - Microsoft Internet Explorer の XSS フィルタにおけるクロスサイトスクリプティングの脆弱性 CWE-DesignError
CVE-2009-4074 2010-02-22 12:13 2009-11-25 Show GitHub Exploit DB Packet Storm
257239 6.6 警告 マイクロソフト - Microsoft Windows の kernel における権限昇格の脆弱性 CWE-20
不適切な入力確認
CVE-2010-0232 2010-02-22 12:12 2010-01-20 Show GitHub Exploit DB Packet Storm
257240 10 危険 Rockwell Automation - Rockwell Automation Allen-Bradley MicroLogix PLC に複数の脆弱性 CWE-noinfo
情報不足
CVE-2009-3739 2010-02-19 14:22 2010-01-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 1, 2026, 4:12 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
269201 6.1 MEDIUM
Network
ibm sterling_b2b_integrator Cross-site scripting (XSS) vulnerability in IBM Sterling B2B Integrator 5.2 before 5020500_14 and 5.2 06 before 5020602_1 allows remote attackers to inject arbitrary web script or HTML via unspecifie… CWE-79
Cross-site Scripting
CVE-2016-3057 2024-11-21 11:49 2016-11-30 Show GitHub Exploit DB Packet Storm
269202 5.4 MEDIUM
Network
ibm rational_engineering_lifecycle_manager
rational_rhapsody_design_manager
rational_quality_manager
rational_software_architect_design_manager
rational_doors_next_generation
rational_team…
Cross-site scripting (XSS) vulnerability in IBM Rational Collaborative Lifecycle Management 4.0 before 4.0.7 iFix11 and 5.0 before 5.0.2 iFix17, Rational Quality Manager 4.0 before 4.0.7 iFix11 and 5… CWE-79
Cross-site Scripting
CVE-2016-3014 2024-11-21 11:49 2016-11-30 Show GitHub Exploit DB Packet Storm
269203 3.5 LOW
Network
ibm connections Cross-site request forgery (CSRF) vulnerability in IBM Connections 4.0 through CR4, 4.5 through CR5, and 5.0 before CR4 allows remote authenticated users to hijack the authentication of arbitrary use… CWE-352
 Origin Validation Error
CVE-2016-3009 2024-11-21 11:49 2016-11-30 Show GitHub Exploit DB Packet Storm
269204 4.6 MEDIUM
Network
ibm connections Cross-site request forgery (CSRF) vulnerability in IBM Connections 4.0 through CR4, 4.5 through CR5, and 5.0 before CR4 allows remote authenticated users to hijack the authentication of arbitrary use… CWE-352
 Origin Validation Error
CVE-2016-3004 2024-11-21 11:49 2016-11-30 Show GitHub Exploit DB Packet Storm
269205 2.1 LOW
Physics
ibm connections IBM Connections 4.0 through CR4, 4.5 through CR5, and 5.0 before CR4 allows physically proximate attackers to obtain sensitive information by reading cached data on a client device. CWE-200
Information Exposure
CVE-2016-3002 2024-11-21 11:49 2016-11-30 Show GitHub Exploit DB Packet Storm
269206 8.8 HIGH
Network
ibm bigfix_remote_control Cross-site request forgery (CSRF) vulnerability in IBM BigFix Remote Control before 9.1.3 allows remote attackers to hijack the authentication of arbitrary users for requests that insert XSS sequence… CWE-352
 Origin Validation Error
CVE-2016-2963 2024-11-21 11:49 2016-11-30 Show GitHub Exploit DB Packet Storm
269207 4.3 MEDIUM
Network
ibm connections IBM Connections 4.0 through CR4, 4.5 through CR5, and 5.0 before CR4 allows remote authenticated users to obtain sensitive information by reading an "archaic" e-mail address in a response. CWE-200
Information Exposure
CVE-2016-2958 2024-11-21 11:49 2016-11-30 Show GitHub Exploit DB Packet Storm
269208 4.3 MEDIUM
Network
ibm connections IBM Connections 4.0 through CR4, 4.5 through CR5, and 5.0 before CR4 allows remote authenticated users to obtain sensitive information by reading a stack trace in a response. CWE-200
Information Exposure
CVE-2016-2957 2024-11-21 11:49 2016-11-30 Show GitHub Exploit DB Packet Storm
269209 3.7 LOW
Network
ibm connections IBM Connections 4.0 through CR4, 4.5 through CR5, and 5.0 before CR4 does not require SSL, which allows remote attackers to obtain sensitive cleartext information by sniffing the network. CWE-310
Cryptographic Issues
CVE-2016-2953 2024-11-21 11:49 2016-11-30 Show GitHub Exploit DB Packet Storm
269210 3.7 LOW
Network
ibm bigfix_remote_control IBM BigFix Remote Control before 9.1.3 does not enable the HSTS protection mechanism, which makes it easier for remote attackers to obtain sensitive information by leveraging use of HTTP. CWE-200
Information Exposure
CVE-2016-2952 2024-11-21 11:49 2016-11-30 Show GitHub Exploit DB Packet Storm