Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 4, 2026, 2 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
227341 7.8 危険 Phpcms - phpCMS の parser/include/class.cache_phpcms.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-0513 2012-12-20 18:34 2008-01-31 Show GitHub Exploit DB Packet Storm
227342 6.8 警告 WordPress.org - WordPress 用の Dean's Permalinks Migration プラグインにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2008-0508 2012-12-20 18:34 2008-01-31 Show GitHub Exploit DB Packet Storm
227343 7.5 危険 WordPress.org - WordPress 用の AdServe プラグインにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-0507 2012-12-20 18:34 2008-01-31 Show GitHub Exploit DB Packet Storm
227344 5.8 警告 加藤和良 - phpMyClub におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-0501 2012-12-20 18:34 2008-01-30 Show GitHub Exploit DB Packet Storm
227345 7.5 危険 WordPress.org - WordPress 用の fGallery プラグインにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-0491 2012-12-20 18:34 2008-01-30 Show GitHub Exploit DB Packet Storm
227346 7.5 危険 WordPress.org - WordPress 用の WP-Cal プラグインにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-0490 2012-12-20 18:34 2008-01-30 Show GitHub Exploit DB Packet Storm
227347 7.5 危険 vb marketing - VB Marketing の tseekdir.cgi におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-0488 2012-12-20 18:34 2008-01-30 Show GitHub Exploit DB Packet Storm
227348 7.5 危険 the net guys - ASPired2Protect の login.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-0487 2012-12-20 18:34 2008-01-30 Show GitHub Exploit DB Packet Storm
227349 5 警告 webwiz - Web Wiz Rich Text Editor の RTE_file_browser.asp におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-0481 2012-12-20 18:34 2008-01-29 Show GitHub Exploit DB Packet Storm
227350 5 警告 webwiz - Web Wiz Forums におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-0480 2012-12-20 18:34 2008-01-29 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 4, 2026, 4:06 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
197021 8.8 HIGH
Network 		ibm data_risk_manager IBM Data Risk Manager (iDNA) 2.0.6 could allow a remote authenticated attacker to upload arbitrary files, caused by the improper validation of file extensions. By sending a specially-crafted HTTP req… CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2020-4620 2024-11-21 14:32 2020-09-22 Show GitHub Exploit DB Packet Storm
197022 6.5 MEDIUM
Network 		ibm data_risk_manager IBM Data Risk Manager (iDNA) 2.0.6 stores user credentials in plain in clear text which can be read by an authenticated user. IBM X-Force ID: 184976. CWE-312
 Cleartext Storage of Sensitive Information 		CVE-2020-4619 2024-11-21 14:32 2020-09-22 Show GitHub Exploit DB Packet Storm
197023 4.9 MEDIUM
Network 		ibm data_risk_manager IBM Data Risk Manager (iDNA) 2.0.6 could allow a privileged user to cause a denial of service due to improper input validation. IBM X-Force ID: 184937. CWE-20
 Improper Input Validation  		CVE-2020-4618 2024-11-21 14:32 2020-09-22 Show GitHub Exploit DB Packet Storm
197024 8.1 HIGH
Network 		ibm data_risk_manager IBM Data Risk Manager (iDNA) 2.0.6 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website tru… CWE-352
 Origin Validation Error 		CVE-2020-4617 2024-11-21 14:32 2020-09-22 Show GitHub Exploit DB Packet Storm
197025 5.3 MEDIUM
Network 		ibm data_risk_manager IBM Data Risk Manager (iDNA) 2.0.6 could disclose sensitive username information to an attacker using a specially crafted HTTP request. IBM X-Force ID: 184929. NVD-CWE-noinfo
CVE-2020-4616 2024-11-21 14:32 2020-09-22 Show GitHub Exploit DB Packet Storm
197026 5.4 MEDIUM
Network 		ibm data_risk_manager IBM Data Risk Manager (iDNA) 2.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality pot… CWE-79
Cross-site Scripting 		CVE-2020-4615 2024-11-21 14:32 2020-09-22 Show GitHub Exploit DB Packet Storm
197027 7.5 HIGH
Network 		ibm data_risk_manager IBM Data Risk Manager (iDNA) 2.0.6 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt sensitive information. IBM X-Force ID: 184927. CWE-327
 Use of a Broken or Risky Cryptographic Algorithm 		CVE-2020-4614 2024-11-21 14:32 2020-09-22 Show GitHub Exploit DB Packet Storm
197028 7.5 HIGH
Network 		ibm data_risk_manager IBM Data Risk Manager (iDNA) 2.0.6 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 184925. CWE-327
 Use of a Broken or Risky Cryptographic Algorithm 		CVE-2020-4613 2024-11-21 14:32 2020-09-22 Show GitHub Exploit DB Packet Storm
197029 6.5 MEDIUM
Network 		ibm data_risk_manager IBM Data Risk Manager (iDNA) 2.0.6 could allow an authenticated user to obtain sensitive information using a specially crafted HTTP request. IBM X-Force ID: 184924. NVD-CWE-noinfo
CVE-2020-4612 2024-11-21 14:32 2020-09-22 Show GitHub Exploit DB Packet Storm
197030 8.8 HIGH
Network 		ibm data_risk_manager IBM Data Risk Manager (iDNA) 2.0.6 could allow an authenticated user to bypass security and execute actions reserved for admins. IBM X-Force ID: 184922. NVD-CWE-noinfo
CVE-2020-4611 2024-11-21 14:32 2020-09-22 Show GitHub Exploit DB Packet Storm