Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 4, 2026, noon

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
227311 6.4 警告 WordPress.org - WordPress の XML-RPC 実装における他のブログユーザの投稿を編集される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-0664 2012-12-20 18:34 2008-02-5 Show GitHub Exploit DB Packet Storm
227312 7.5 危険 simple os cms - Simple OS CMS の login.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-0650 2012-12-20 18:34 2008-02-7 Show GitHub Exploit DB Packet Storm
227313 7.5 危険 portail web php - Portail Web Php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2008-0645 2012-12-20 18:34 2008-02-7 Show GitHub Exploit DB Packet Storm
227314 10 危険 シマンテック - Symantec Ghost Solution Suite における任意のコマンドを実行される脆弱性 CWE-287
不適切な認証 		CVE-2008-0640 2012-12-20 18:34 2008-02-7 Show GitHub Exploit DB Packet Storm
227315 9.3 危険 シマンテック - Symantec Veritas Storage Foundation の VEA サービスにおけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2008-0638 2012-12-20 18:34 2008-02-20 Show GitHub Exploit DB Packet Storm
227316 7.5 危険 sejoong namo - Sejoong Namo ActiveSquare で使用される NamoInstaller.dll におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2008-0634 2012-12-20 18:34 2008-02-6 Show GitHub Exploit DB Packet Storm
227317 7.5 危険 SAP - SAP GUI および SAPSprint に含まれる SAPLPD におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2008-0621 2012-12-20 18:34 2008-02-6 Show GitHub Exploit DB Packet Storm
227318 10 危険 SAP - SAP GUI および SAPSprint に含まれる SAPLPD におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2008-0620 2012-12-20 18:34 2008-02-6 Show GitHub Exploit DB Packet Storm
227319 7.5 危険 rmsoft
XOOPS		 - XOOPS 用の RMSOFT Gallery System モジュールにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-0611 2012-12-20 18:34 2008-02-6 Show GitHub Exploit DB Packet Storm
227320 9.3 危険 UltraVNC - UltraVNC 用の vncviewer におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2008-0610 2012-12-20 18:34 2008-02-6 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 4, 2026, 4:06 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
197021 8.8 HIGH
Network 		ibm data_risk_manager IBM Data Risk Manager (iDNA) 2.0.6 could allow a remote authenticated attacker to upload arbitrary files, caused by the improper validation of file extensions. By sending a specially-crafted HTTP req… CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2020-4620 2024-11-21 14:32 2020-09-22 Show GitHub Exploit DB Packet Storm
197022 6.5 MEDIUM
Network 		ibm data_risk_manager IBM Data Risk Manager (iDNA) 2.0.6 stores user credentials in plain in clear text which can be read by an authenticated user. IBM X-Force ID: 184976. CWE-312
 Cleartext Storage of Sensitive Information 		CVE-2020-4619 2024-11-21 14:32 2020-09-22 Show GitHub Exploit DB Packet Storm
197023 4.9 MEDIUM
Network 		ibm data_risk_manager IBM Data Risk Manager (iDNA) 2.0.6 could allow a privileged user to cause a denial of service due to improper input validation. IBM X-Force ID: 184937. CWE-20
 Improper Input Validation  		CVE-2020-4618 2024-11-21 14:32 2020-09-22 Show GitHub Exploit DB Packet Storm
197024 8.1 HIGH
Network 		ibm data_risk_manager IBM Data Risk Manager (iDNA) 2.0.6 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website tru… CWE-352
 Origin Validation Error 		CVE-2020-4617 2024-11-21 14:32 2020-09-22 Show GitHub Exploit DB Packet Storm
197025 5.3 MEDIUM
Network 		ibm data_risk_manager IBM Data Risk Manager (iDNA) 2.0.6 could disclose sensitive username information to an attacker using a specially crafted HTTP request. IBM X-Force ID: 184929. NVD-CWE-noinfo
CVE-2020-4616 2024-11-21 14:32 2020-09-22 Show GitHub Exploit DB Packet Storm
197026 5.4 MEDIUM
Network 		ibm data_risk_manager IBM Data Risk Manager (iDNA) 2.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality pot… CWE-79
Cross-site Scripting 		CVE-2020-4615 2024-11-21 14:32 2020-09-22 Show GitHub Exploit DB Packet Storm
197027 7.5 HIGH
Network 		ibm data_risk_manager IBM Data Risk Manager (iDNA) 2.0.6 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt sensitive information. IBM X-Force ID: 184927. CWE-327
 Use of a Broken or Risky Cryptographic Algorithm 		CVE-2020-4614 2024-11-21 14:32 2020-09-22 Show GitHub Exploit DB Packet Storm
197028 7.5 HIGH
Network 		ibm data_risk_manager IBM Data Risk Manager (iDNA) 2.0.6 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 184925. CWE-327
 Use of a Broken or Risky Cryptographic Algorithm 		CVE-2020-4613 2024-11-21 14:32 2020-09-22 Show GitHub Exploit DB Packet Storm
197029 6.5 MEDIUM
Network 		ibm data_risk_manager IBM Data Risk Manager (iDNA) 2.0.6 could allow an authenticated user to obtain sensitive information using a specially crafted HTTP request. IBM X-Force ID: 184924. NVD-CWE-noinfo
CVE-2020-4612 2024-11-21 14:32 2020-09-22 Show GitHub Exploit DB Packet Storm
197030 8.8 HIGH
Network 		ibm data_risk_manager IBM Data Risk Manager (iDNA) 2.0.6 could allow an authenticated user to bypass security and execute actions reserved for admins. IBM X-Force ID: 184922. NVD-CWE-noinfo
CVE-2020-4611 2024-11-21 14:32 2020-09-22 Show GitHub Exploit DB Packet Storm