Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 4, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
227381 10 危険 VideoLAN - Windows 上で稼動する VideoLAN VLC Media Player の libaccess_realrtsp プラグインにおけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2008-0296 2012-12-20 18:34 2008-01-16 Show GitHub Exploit DB Packet Storm
227382 8.5 危険 VideoLAN - VideoLAN VLC Media Player で使用される Xine ライブラリにおけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2008-0295 2012-12-20 18:34 2008-01-16 Show GitHub Exploit DB Packet Storm
227383 6.8 警告 visionburst - VisionBurst vcart における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2008-0287 2012-12-20 18:34 2008-01-15 Show GitHub Exploit DB Packet Storm
227384 4.3 警告 Simple Machines - SMF におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-0284 2012-12-20 18:34 2008-01-15 Show GitHub Exploit DB Packet Storm
227385 7.5 危険 xforum - Xforum の liretopic.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-0279 2012-12-20 18:34 2008-01-15 Show GitHub Exploit DB Packet Storm
227386 6 警告 X7 Group - X7 Chat の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-0278 2012-12-20 18:34 2008-01-15 Show GitHub Exploit DB Packet Storm
227387 6 警告 taskfreak - TaskFreak! の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-0270 2012-12-20 18:34 2008-01-15 Show GitHub Exploit DB Packet Storm
227388 6.8 警告 wavelink media - TutorialCMS の activate.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-0254 2012-12-20 18:34 2008-01-15 Show GitHub Exploit DB Packet Storm
227389 5 警告 php webquest - PHP Webquest におけるデータベースの資格情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2008-0249 2012-12-20 18:34 2008-01-11 Show GitHub Exploit DB Packet Storm
227390 9.3 危険 streamaudio - StreamAudio ChainCast ProxyManager の ccpm_0237.dll におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2008-0248 2012-12-20 18:34 2008-01-11 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 4, 2026, 4:06 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
197021 8.8 HIGH
Network 		ibm data_risk_manager IBM Data Risk Manager (iDNA) 2.0.6 could allow a remote authenticated attacker to upload arbitrary files, caused by the improper validation of file extensions. By sending a specially-crafted HTTP req… CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2020-4620 2024-11-21 14:32 2020-09-22 Show GitHub Exploit DB Packet Storm
197022 6.5 MEDIUM
Network 		ibm data_risk_manager IBM Data Risk Manager (iDNA) 2.0.6 stores user credentials in plain in clear text which can be read by an authenticated user. IBM X-Force ID: 184976. CWE-312
 Cleartext Storage of Sensitive Information 		CVE-2020-4619 2024-11-21 14:32 2020-09-22 Show GitHub Exploit DB Packet Storm
197023 4.9 MEDIUM
Network 		ibm data_risk_manager IBM Data Risk Manager (iDNA) 2.0.6 could allow a privileged user to cause a denial of service due to improper input validation. IBM X-Force ID: 184937. CWE-20
 Improper Input Validation  		CVE-2020-4618 2024-11-21 14:32 2020-09-22 Show GitHub Exploit DB Packet Storm
197024 8.1 HIGH
Network 		ibm data_risk_manager IBM Data Risk Manager (iDNA) 2.0.6 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website tru… CWE-352
 Origin Validation Error 		CVE-2020-4617 2024-11-21 14:32 2020-09-22 Show GitHub Exploit DB Packet Storm
197025 5.3 MEDIUM
Network 		ibm data_risk_manager IBM Data Risk Manager (iDNA) 2.0.6 could disclose sensitive username information to an attacker using a specially crafted HTTP request. IBM X-Force ID: 184929. NVD-CWE-noinfo
CVE-2020-4616 2024-11-21 14:32 2020-09-22 Show GitHub Exploit DB Packet Storm
197026 5.4 MEDIUM
Network 		ibm data_risk_manager IBM Data Risk Manager (iDNA) 2.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality pot… CWE-79
Cross-site Scripting 		CVE-2020-4615 2024-11-21 14:32 2020-09-22 Show GitHub Exploit DB Packet Storm
197027 7.5 HIGH
Network 		ibm data_risk_manager IBM Data Risk Manager (iDNA) 2.0.6 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt sensitive information. IBM X-Force ID: 184927. CWE-327
 Use of a Broken or Risky Cryptographic Algorithm 		CVE-2020-4614 2024-11-21 14:32 2020-09-22 Show GitHub Exploit DB Packet Storm
197028 7.5 HIGH
Network 		ibm data_risk_manager IBM Data Risk Manager (iDNA) 2.0.6 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 184925. CWE-327
 Use of a Broken or Risky Cryptographic Algorithm 		CVE-2020-4613 2024-11-21 14:32 2020-09-22 Show GitHub Exploit DB Packet Storm
197029 6.5 MEDIUM
Network 		ibm data_risk_manager IBM Data Risk Manager (iDNA) 2.0.6 could allow an authenticated user to obtain sensitive information using a specially crafted HTTP request. IBM X-Force ID: 184924. NVD-CWE-noinfo
CVE-2020-4612 2024-11-21 14:32 2020-09-22 Show GitHub Exploit DB Packet Storm
197030 8.8 HIGH
Network 		ibm data_risk_manager IBM Data Risk Manager (iDNA) 2.0.6 could allow an authenticated user to bypass security and execute actions reserved for admins. IBM X-Force ID: 184922. NVD-CWE-noinfo
CVE-2020-4611 2024-11-21 14:32 2020-09-22 Show GitHub Exploit DB Packet Storm