Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 6, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
227031 7.5 危険 Mike Jolley - WordPress 用の Download Monitor プラグインにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2034 2012-12-20 18:52 2008-04-30 Show GitHub Exploit DB Packet Storm
227032 7.5 危険 WordPress.org - WordPress 用の Spreadsheet プラグインの ss_load.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-1982 2012-12-20 18:52 2008-04-27 Show GitHub Exploit DB Packet Storm
227033 7.5 危険 phphq - phShoutBox Final における権限を取得される脆弱性 CWE-287
不適切な認証 		CVE-2008-1971 2012-12-20 18:52 2008-04-27 Show GitHub Exploit DB Packet Storm
227034 7.5 危険 quate - Quate Grape Web Statistics の includes/functions.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2008-1963 2012-12-20 18:52 2008-04-25 Show GitHub Exploit DB Packet Storm
227035 7.5 危険 sipp - SIPp の call.cpp の get_remote_video_port_media 関数におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2008-1959 2012-12-20 18:52 2008-04-25 Show GitHub Exploit DB Packet Storm
227036 4.3 警告 wikepage - Wikepage Opus の index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-1956 2012-12-20 18:52 2008-04-25 Show GitHub Exploit DB Packet Storm
227037 4.3 警告 Toocharger - Martin BOUCHER MyBoard の rep.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-1955 2012-12-20 18:52 2008-04-25 Show GitHub Exploit DB Packet Storm
227038 7.5 危険 webcalendar - Web Calendar Pro の one_day.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-1954 2012-12-20 18:52 2008-04-25 Show GitHub Exploit DB Packet Storm
227039 6.8 警告 Realtek Semiconductor Corp - Windows Vista 上で稼動している Realtek HD Audio Codec Drivers RTKVHDA.sys などにおける整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2008-1932 2012-12-20 18:52 2008-04-25 Show GitHub Exploit DB Packet Storm
227040 6.8 警告 Realtek Semiconductor Corp - Windows Vista 上で稼動している Realtek HD Audio Codec Drivers RTKVHDA.sys および RTKVHDA64.sys におけるレジストリキーを作成される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-1931 2012-12-20 18:52 2008-04-25 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 6, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
196861 6.0 MEDIUM
Local 		ibm spectrum_scale IBM Spectrum Scale 5.0.4.1 through 5.1.0.3 could allow a local privileged user to overwrite files due to improper input validation. IBM X-Force ID: 192541. CWE-20
 Improper Input Validation  		CVE-2020-4981 2024-11-21 14:33 2021-04-28 Show GitHub Exploit DB Packet Storm
196862 7.5 HIGH
Network 		ibm rational_quality_manager
rational_team_concert
rational_engineering_lifecycle_manager
rhapsody_model_manager
collaborative_lifecycle_management
engineering_test_management
engineeri… 		IBM Jazz Team Server products use weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 192422. CWE-327
 Use of a Broken or Risky Cryptographic Algorithm 		CVE-2020-4965 2024-11-21 14:33 2021-04-13 Show GitHub Exploit DB Packet Storm
196863 4.3 MEDIUM
Network 		ibm rational_quality_manager
rational_team_concert
rational_engineering_lifecycle_manager
rhapsody_model_manager
collaborative_lifecycle_management
engineering_test_management
engineeri… 		IBM Jazz Team Server products contain an undisclosed vulnerability that could allow an authenticated user to present a customized message on the application which could be used to phish other users. … NVD-CWE-noinfo
CVE-2020-4964 2024-11-21 14:33 2021-04-13 Show GitHub Exploit DB Packet Storm
196864 5.4 MEDIUM
Network 		ibm rational_quality_manager
rational_team_concert
rational_engineering_lifecycle_manager
rhapsody_model_manager
collaborative_lifecycle_management
engineering_test_management
engineeri… 		IBM Jazz Team Server products are vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality … CWE-79
Cross-site Scripting 		CVE-2020-4920 2024-11-21 14:33 2021-04-13 Show GitHub Exploit DB Packet Storm
196865 5.4 MEDIUM
Network 		ibm infosphere_information_server IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality… CWE-79
Cross-site Scripting 		CVE-2020-4997 2024-11-21 14:33 2021-04-6 Show GitHub Exploit DB Packet Storm
196866 5.4 MEDIUM
Network 		ibm edge_application_manager IBM Edge 4.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to cr… CWE-79
Cross-site Scripting 		CVE-2020-4792 2024-11-21 14:33 2021-04-6 Show GitHub Exploit DB Packet Storm
196867 5.5 MEDIUM
Local 		ibm urbancode_deploy IBM UrbanCode Deploy (UCD) 7.0.3.0, 7.0.4.0, 7.0.5.3, 7.0.5.4, 7.1.0.0, 7.1.1.0, 7.1.1.1, and 7.1.1.2, stores keystore passwords in plain text after a manual edit, which can be read by a local user. … CWE-312
 Cleartext Storage of Sensitive Information 		CVE-2020-4944 2024-11-21 14:33 2021-03-31 Show GitHub Exploit DB Packet Storm
196868 5.5 MEDIUM
Local 		ibm urbancode_deploy IBM UrbanCode Deploy (UCD) 6.2.7.9, 7.0.5.4, and 7.1.1.1 stores user credentials in plain in clear text which can be read by a local user. IBM X-Force ID: 190908. CWE-312
 Cleartext Storage of Sensitive Information 		CVE-2020-4884 2024-11-21 14:33 2021-03-31 Show GitHub Exploit DB Packet Storm
196869 5.4 MEDIUM
Network 		ibm urbancode_deploy IBM UrbanCode Deploy (UCD) 6.2.7.9, 7.0.5.4, and 7.1.1.1 could allow an authenticated user to initiate a plugin or compare process resources that they should not have access to. IBM X-Force ID: 19029… NVD-CWE-noinfo
CVE-2020-4848 2024-11-21 14:33 2021-03-31 Show GitHub Exploit DB Packet Storm
196870 7.5 HIGH
Network 		ibm elastic_storage_server
elastic_storage_system 		IBM Elastic Storage System 6.0.0 through 6.0.1.2 and IBM Elastic Storage Server 5.3.0 through 5.3.6.2 could allow a remote attacker to cause a denial of service by sending malformed UDP requests. IBM… NVD-CWE-noinfo
CVE-2020-5015 2024-11-21 14:33 2021-03-25 Show GitHub Exploit DB Packet Storm