Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 6, 2026, 4 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
226651	7.5	危険	polypager	-	PolyPager における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-3506	2012-12-20 18:52	2008-08-6	Show	GitHub Exploit DB Packet Storm

226652	4.3	警告	polypager	-	PolyPager におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-3505	2012-12-20 18:52	2008-08-6	Show	GitHub Exploit DB Packet Storm

226653	5	警告	webgui	-	Plain Black WebGUI の RSSFromParent における重要な情報を取得される脆弱性	CWE-287 不適切な認証	CVE-2008-3503	2012-12-20 18:52	2008-06-20	Show	GitHub Exploit DB Packet Storm

226654	5	警告	RealVNC	-	RealVNC Windows Client の vncviewer.exe におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2008-3493	2012-12-20 18:52	2008-08-6	Show	GitHub Exploit DB Packet Storm

226655	7.5	危険	scripts24	-	Scripts24 iPost および iTGP の go.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-3491	2012-12-20 18:52	2008-08-6	Show	GitHub Exploit DB Packet Storm

226656	7.5	危険	phpx	-	PHPX の includes/functions.inc.php の checkCookie 関数における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-3489	2012-12-20 18:52	2008-08-6	Show	GitHub Exploit DB Packet Storm

226657	7.5	危険	phpauctions	-	PHPAuction GPL の profile.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-3487	2012-12-20 18:52	2008-08-6	Show	GitHub Exploit DB Packet Storm

226658	4.3	警告	screwturn	-	ScrewTurn Wiki におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-3483	2012-12-20 18:52	2008-08-5	Show	GitHub Exploit DB Packet Storm

226659	2.6	注意	The phpMyAdmin Project	-	phpMyAdmin におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-3457	2012-12-20 18:52	2008-07-28	Show	GitHub Exploit DB Packet Storm

226660	6.4	警告	The phpMyAdmin Project	-	phpMyAdmin におけるなりすましされる脆弱性	CWE-59 リンク解釈の問題	CVE-2008-3456	2012-12-20 18:52	2008-07-28	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 6, 2026, 4:08 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
197361	4.3	MEDIUM Network	ibm	security_secret_server	IBM Security Secret Server prior to 10.9 could allow an attacker to bypass SSL security due to improper certificate validation. IBM X-Force ID: 178180.	CWE-295 Improper Certificate Validation	CVE-2020-4340	2024-11-21 14:32	2020-09-23	Show	GitHub Exploit DB Packet Storm

197362	4.3	MEDIUM Network	ibm	security_secret_server	IBM Security Secret Server proir to 10.9 could allow a remote attacker to bypass security restrictions, caused by improper input validation. IBM X-Force ID: 177515.	CWE-20 Improper Input Validation	CVE-2020-4324	2024-11-21 14:32	2020-09-23	Show	GitHub Exploit DB Packet Storm

197363	8.8	HIGH Network	ibm	data_risk_manager	IBM Data Risk Manager (iDNA) 2.0.6 could allow a remote authenticated attacker to upload arbitrary files, caused by the improper validation of file extensions. By sending a specially-crafted HTTP req…	CWE-434 Unrestricted Upload of File with Dangerous Type	CVE-2020-4620	2024-11-21 14:32	2020-09-22	Show	GitHub Exploit DB Packet Storm

197364	6.5	MEDIUM Network	ibm	data_risk_manager	IBM Data Risk Manager (iDNA) 2.0.6 stores user credentials in plain in clear text which can be read by an authenticated user. IBM X-Force ID: 184976.	CWE-312 Cleartext Storage of Sensitive Information	CVE-2020-4619	2024-11-21 14:32	2020-09-22	Show	GitHub Exploit DB Packet Storm

197365	4.9	MEDIUM Network	ibm	data_risk_manager	IBM Data Risk Manager (iDNA) 2.0.6 could allow a privileged user to cause a denial of service due to improper input validation. IBM X-Force ID: 184937.	CWE-20 Improper Input Validation	CVE-2020-4618	2024-11-21 14:32	2020-09-22	Show	GitHub Exploit DB Packet Storm

197366	8.1	HIGH Network	ibm	data_risk_manager	IBM Data Risk Manager (iDNA) 2.0.6 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website tru…	CWE-352 Origin Validation Error	CVE-2020-4617	2024-11-21 14:32	2020-09-22	Show	GitHub Exploit DB Packet Storm

197367	5.3	MEDIUM Network	ibm	data_risk_manager	IBM Data Risk Manager (iDNA) 2.0.6 could disclose sensitive username information to an attacker using a specially crafted HTTP request. IBM X-Force ID: 184929.	NVD-CWE-noinfo	CVE-2020-4616	2024-11-21 14:32	2020-09-22	Show	GitHub Exploit DB Packet Storm

197368	5.4	MEDIUM Network	ibm	data_risk_manager	IBM Data Risk Manager (iDNA) 2.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality pot…	CWE-79 Cross-site Scripting	CVE-2020-4615	2024-11-21 14:32	2020-09-22	Show	GitHub Exploit DB Packet Storm

197369	7.5	HIGH Network	ibm	data_risk_manager	IBM Data Risk Manager (iDNA) 2.0.6 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt sensitive information. IBM X-Force ID: 184927.	CWE-327 Use of a Broken or Risky Cryptographic Algorithm	CVE-2020-4614	2024-11-21 14:32	2020-09-22	Show	GitHub Exploit DB Packet Storm

197370	7.5	HIGH Network	ibm	data_risk_manager	IBM Data Risk Manager (iDNA) 2.0.6 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 184925.	CWE-327 Use of a Broken or Risky Cryptographic Algorithm	CVE-2020-4613	2024-11-21 14:32	2020-09-22	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed