Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 21, 2026, 6:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
250511	4.3	警告	Invision Power Services, Inc	-	IP.Board の admin/sources/classes/bbcode/custom/defaults.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-3424	2012-03-27 18:42	2010-09-7	Show	GitHub Exploit DB Packet Storm

250512	7.5	危険	freka	-	Drupal の Yr Weatherdata モジュールにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-3423	2012-03-27 18:42	2010-09-8	Show	GitHub Exploit DB Packet Storm

250513	7.5	危険	solventus Joomla!	-	Jmoola! 用の JGen コンポーネントにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-3422	2012-03-27 18:42	2010-09-16	Show	GitHub Exploit DB Packet Storm

250514	4.3	警告	productcart	-	ProductCart の AffiliateLogin.asp におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-3421	2012-03-27 18:42	2010-09-16	Show	GitHub Exploit DB Packet Storm

250515	4.3	警告	webassist	-	PowerStore の Products_Results.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-3420	2012-03-27 18:42	2010-09-16	Show	GitHub Exploit DB Packet Storm

250516	7.5	危険	Haudenschilt	-	FCMS における任意の PHP コードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-3419	2012-03-27 18:42	2010-09-16	Show	GitHub Exploit DB Packet Storm

250517	4.3	警告	NetArt Media	-	NetArt Media Car Portal におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-3418	2012-03-27 18:42	2010-09-16	Show	GitHub Exploit DB Packet Storm

250518	7.5	危険	eshtery.com	-	eshtery CMS における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-3404	2012-03-27 18:42	2010-09-16	Show	GitHub Exploit DB Packet Storm

250519	9.3	危険	クアルコム	-	QXDM における任意のコードを実行されるおよび DLL ハイジャック攻撃をされる脆弱性	CWE-Other その他	CVE-2010-3403	2012-03-27 18:42	2010-09-16	Show	GitHub Exploit DB Packet Storm

250520	9.3	危険	dm computer solutions	-	IDM Computer Solutions UltraEdit における任意のコードを実行される脆弱性	CWE-Other その他	CVE-2010-3402	2012-03-27 18:42	2010-09-16	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 21, 2026, 4:10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
201041	4.3	MEDIUM Network	ibm	security_secret_server	IBM Security Secret Server proir to 10.9 could allow a remote attacker to bypass security restrictions, caused by improper input validation. IBM X-Force ID: 177515.	CWE-20 Improper Input Validation	CVE-2020-4324	2024-11-21 14:32	2020-09-23	Show	GitHub Exploit DB Packet Storm

201042	8.8	HIGH Network	ibm	data_risk_manager	IBM Data Risk Manager (iDNA) 2.0.6 could allow a remote authenticated attacker to upload arbitrary files, caused by the improper validation of file extensions. By sending a specially-crafted HTTP req…	CWE-434 Unrestricted Upload of File with Dangerous Type	CVE-2020-4620	2024-11-21 14:32	2020-09-22	Show	GitHub Exploit DB Packet Storm

201043	6.5	MEDIUM Network	ibm	data_risk_manager	IBM Data Risk Manager (iDNA) 2.0.6 stores user credentials in plain in clear text which can be read by an authenticated user. IBM X-Force ID: 184976.	CWE-312 Cleartext Storage of Sensitive Information	CVE-2020-4619	2024-11-21 14:32	2020-09-22	Show	GitHub Exploit DB Packet Storm

201044	4.9	MEDIUM Network	ibm	data_risk_manager	IBM Data Risk Manager (iDNA) 2.0.6 could allow a privileged user to cause a denial of service due to improper input validation. IBM X-Force ID: 184937.	CWE-20 Improper Input Validation	CVE-2020-4618	2024-11-21 14:32	2020-09-22	Show	GitHub Exploit DB Packet Storm

201045	8.1	HIGH Network	ibm	data_risk_manager	IBM Data Risk Manager (iDNA) 2.0.6 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website tru…	CWE-352 Origin Validation Error	CVE-2020-4617	2024-11-21 14:32	2020-09-22	Show	GitHub Exploit DB Packet Storm

201046	5.3	MEDIUM Network	ibm	data_risk_manager	IBM Data Risk Manager (iDNA) 2.0.6 could disclose sensitive username information to an attacker using a specially crafted HTTP request. IBM X-Force ID: 184929.	NVD-CWE-noinfo	CVE-2020-4616	2024-11-21 14:32	2020-09-22	Show	GitHub Exploit DB Packet Storm

201047	5.4	MEDIUM Network	ibm	data_risk_manager	IBM Data Risk Manager (iDNA) 2.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality pot…	CWE-79 Cross-site Scripting	CVE-2020-4615	2024-11-21 14:32	2020-09-22	Show	GitHub Exploit DB Packet Storm

201048	7.5	HIGH Network	ibm	data_risk_manager	IBM Data Risk Manager (iDNA) 2.0.6 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt sensitive information. IBM X-Force ID: 184927.	CWE-327 Use of a Broken or Risky Cryptographic Algorithm	CVE-2020-4614	2024-11-21 14:32	2020-09-22	Show	GitHub Exploit DB Packet Storm

201049	7.5	HIGH Network	ibm	data_risk_manager	IBM Data Risk Manager (iDNA) 2.0.6 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 184925.	CWE-327 Use of a Broken or Risky Cryptographic Algorithm	CVE-2020-4613	2024-11-21 14:32	2020-09-22	Show	GitHub Exploit DB Packet Storm

201050	6.5	MEDIUM Network	ibm	data_risk_manager	IBM Data Risk Manager (iDNA) 2.0.6 could allow an authenticated user to obtain sensitive information using a specially crafted HTTP request. IBM X-Force ID: 184924.	NVD-CWE-noinfo	CVE-2020-4612	2024-11-21 14:32	2020-09-22	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed