Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 5, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
226861	4.3	警告	xigla	-	Xigla Absolute Control Panel XE の admin/users.asp におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-2756	2012-12-20 18:52	2008-06-18	Show	GitHub Exploit DB Packet Storm

226862	7.1	危険	サン・マイクロシステムズ	-	Sun Java System Calendar Server などの cshttpd におけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2008-2749	2012-12-20 18:52	2008-06-13	Show	GitHub Exploit DB Packet Storm

226863	5	警告	skulltag team	-	Skulltag におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2008-2748	2012-12-20 18:52	2008-06-18	Show	GitHub Exploit DB Packet Storm

226864	4.3	警告	vBulletin Solutions, Inc.	-	vBulletin におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-2744	2012-12-20 18:52	2008-06-9	Show	GitHub Exploit DB Packet Storm

226865	4.3	警告	Xerox	-	Xerox 4110 などの Copier/Printers の組み込み Web サーバにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-2743	2012-12-20 18:52	2008-06-12	Show	GitHub Exploit DB Packet Storm

226866	4.3	警告	TYPO3 Association	-	TYPO3 の fe_adminlib.inc におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-2718	2012-12-20 18:52	2008-06-16	Show	GitHub Exploit DB Packet Storm

226867	9.3	危険	サン・マイクロシステムズ	-	Sun Java System AM における認証を回避される脆弱性	CWE-287 不適切な認証	CVE-2008-2705	2012-12-20 18:52	2008-06-11	Show	GitHub Exploit DB Packet Storm

226868	4.3	警告	web-album	-	WEBalbum の photo_add-c.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-2698	2012-12-20 18:52	2008-06-13	Show	GitHub Exploit DB Packet Storm

226869	7.5	危険	phpinv	-	phpInv の entry.php におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2008-2695	2012-12-20 18:52	2008-06-13	Show	GitHub Exploit DB Packet Storm

226870	4.3	警告	phpinv	-	phpInv の search.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-2694	2012-12-20 18:52	2008-06-13	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 5, 2026, 4:51 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
197181	4.9	MEDIUM Network	ibm	data_risk_manager	IBM Data Risk Manager (iDNA) 2.0.6 could allow a privileged user to cause a denial of service due to improper input validation. IBM X-Force ID: 184937.	CWE-20 Improper Input Validation	CVE-2020-4618	2024-11-21 14:32	2020-09-22	Show	GitHub Exploit DB Packet Storm

197182	8.1	HIGH Network	ibm	data_risk_manager	IBM Data Risk Manager (iDNA) 2.0.6 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website tru…	CWE-352 Origin Validation Error	CVE-2020-4617	2024-11-21 14:32	2020-09-22	Show	GitHub Exploit DB Packet Storm

197183	5.3	MEDIUM Network	ibm	data_risk_manager	IBM Data Risk Manager (iDNA) 2.0.6 could disclose sensitive username information to an attacker using a specially crafted HTTP request. IBM X-Force ID: 184929.	NVD-CWE-noinfo	CVE-2020-4616	2024-11-21 14:32	2020-09-22	Show	GitHub Exploit DB Packet Storm

197184	5.4	MEDIUM Network	ibm	data_risk_manager	IBM Data Risk Manager (iDNA) 2.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality pot…	CWE-79 Cross-site Scripting	CVE-2020-4615	2024-11-21 14:32	2020-09-22	Show	GitHub Exploit DB Packet Storm

197185	7.5	HIGH Network	ibm	data_risk_manager	IBM Data Risk Manager (iDNA) 2.0.6 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt sensitive information. IBM X-Force ID: 184927.	CWE-327 Use of a Broken or Risky Cryptographic Algorithm	CVE-2020-4614	2024-11-21 14:32	2020-09-22	Show	GitHub Exploit DB Packet Storm

197186	7.5	HIGH Network	ibm	data_risk_manager	IBM Data Risk Manager (iDNA) 2.0.6 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 184925.	CWE-327 Use of a Broken or Risky Cryptographic Algorithm	CVE-2020-4613	2024-11-21 14:32	2020-09-22	Show	GitHub Exploit DB Packet Storm

197187	6.5	MEDIUM Network	ibm	data_risk_manager	IBM Data Risk Manager (iDNA) 2.0.6 could allow an authenticated user to obtain sensitive information using a specially crafted HTTP request. IBM X-Force ID: 184924.	NVD-CWE-noinfo	CVE-2020-4612	2024-11-21 14:32	2020-09-22	Show	GitHub Exploit DB Packet Storm

197188	8.8	HIGH Network	ibm	data_risk_manager	IBM Data Risk Manager (iDNA) 2.0.6 could allow an authenticated user to bypass security and execute actions reserved for admins. IBM X-Force ID: 184922.	NVD-CWE-noinfo	CVE-2020-4611	2024-11-21 14:32	2020-09-22	Show	GitHub Exploit DB Packet Storm

197189	6.5	MEDIUM Network	vmware	horizon_daas	VMware Horizon DaaS (7.x and 8.x before 8.0.1 Update 1) contains a broken authentication vulnerability due to a flaw in the way it handled the first factor authentication. Successful exploitation of …	CWE-306 Missing Authentication for Critical Function	CVE-2020-3977	2024-11-21 14:32	2020-09-22	Show	GitHub Exploit DB Packet Storm

197190	6.5	MEDIUM Network	ibm	websphere_application_server	IBM WebSphere Application Server Liberty 17.0.0.3 through 20.0.0.9 running oauth-2.0 or openidConnectServer-1.0 server features is vulnerable to a denial of service attack conducted by an authenticat…	NVD-CWE-noinfo	CVE-2020-4590	2024-11-21 14:32	2020-09-22	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed