Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 27, 2026, 2:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
226431	6.2	警告	Linux	-	Linux Kernel に同梱されている perf における任意のファイルを上書きされる脆弱性	CWE-Other その他	CVE-2011-2905	2013-03-5 13:57	2011-10-24	Show	GitHub Exploit DB Packet Storm

226432	4.9	警告	Linux	-	Linux Kernel の NFS クライアント機能の NLM プロトコルの実装におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2011-2491	2013-03-5 13:56	2011-07-21	Show	GitHub Exploit DB Packet Storm

226433	4.9	警告	Linux	-	Linux Kernel におけるサービス運用妨害 (システムクラッシュ) の脆弱性	CWE-399 リソース管理の問題	CVE-2011-2479	2013-03-5 13:53	2011-05-18	Show	GitHub Exploit DB Packet Storm

226434	1.9	注意	Linux	-	Linux Kernel の net/core/dev.c における CAP_SYS_MODULE ケーパビリティの要求を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-1019	2013-03-5 13:50	2011-03-14	Show	GitHub Exploit DB Packet Storm

226435	4.3	警告	Rack	-	Rack の lib/rack/multipart.rb におけるサービス運用妨害 (無限ループ) の脆弱性	CWE-DesignError	CVE-2012-6109	2013-03-4 17:04	2013-01-8	Show	GitHub Exploit DB Packet Storm

226436	2.1	注意	Ryan Dave	-	Ruby 用 ruby_parser gem における任意のファイルを上書きされる脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2013-0162	2013-03-4 16:59	2013-03-1	Show	GitHub Exploit DB Packet Storm

226437	4.3	警告	レッドハット	-	Red Hat CloudFroms で使用される Ruby 用 ldap_fluff gem における認証を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-5604	2013-03-4 16:36	2013-03-1	Show	GitHub Exploit DB Packet Storm

226438	1.9	注意	Fedora Project レッドハット	-	Red Hat Enterprise Linux および Fedora における ASLR 保護メカニズムを回避される脆弱性	CWE-noinfo 情報不足	CVE-2012-1568	2013-03-4 16:04	2012-03-15	Show	GitHub Exploit DB Packet Storm

226439	4	警告	Linux	-	Linux Kernel の kernel/printk.c におけるサービス運用妨害 (DoS) の脆弱性	CWE-119 バッファエラー	CVE-2013-1772	2013-03-4 15:57	2013-02-21	Show	GitHub Exploit DB Packet Storm

226440	2.1	注意	Katello Project	-	Katello の script/katello-generate-passphrase におけるパスフレーズを取得される脆弱性	CWE-200 情報漏えい	CVE-2012-5561	2013-03-4 14:44	2013-03-1	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 27, 2026, 4:52 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
209441	8.8	HIGH Network	microsoft	word office_web_apps sharepoint_server office word_rt sharepoint_enterprise_server office_online_server 365_apps	A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution Vulnerability'. This CVE ID is un…	NVD-CWE-noinfo	CVE-2020-1446	2024-11-21 14:10	2020-07-15	Show	GitHub Exploit DB Packet Storm

209442	5.5	MEDIUM Local	microsoft	word office sharepoint_enterprise_server office_online_server 365_apps office_web_apps	An information disclosure vulnerability exists when Microsoft Office improperly discloses the contents of its memory, aka 'Microsoft Office Information Disclosure Vulnerability'. This CVE ID is uniqu…	NVD-CWE-noinfo	CVE-2020-1445	2024-11-21 14:10	2020-07-15	Show	GitHub Exploit DB Packet Storm

209443	4.3	MEDIUM Network	microsoft	sharepoint_foundation sharepoint_enterprise_server sharepoint_server	A remote code execution vulnerability exists in the way Microsoft SharePoint software parses specially crafted email messages, aka 'Microsoft SharePoint Remote Code Execution Vulnerability'.	NVD-CWE-noinfo	CVE-2020-1444	2024-11-21 14:10	2020-07-15	Show	GitHub Exploit DB Packet Storm

209444	5.4	MEDIUM Network	microsoft	sharepoint_foundation sharepoint_enterprise_server sharepoint_server	A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft SharePoint Spoofing Vulner…	NVD-CWE-noinfo	CVE-2020-1443	2024-11-21 14:10	2020-07-15	Show	GitHub Exploit DB Packet Storm

209445	6.1	MEDIUM Network	microsoft	office_web_apps office_online_server	A spoofing vulnerability exists when an Office Web Apps server does not properly sanitize a specially crafted request, aka 'Office Web Apps XSS Vulnerability'.	CWE-79 Cross-site Scripting	CVE-2020-1442	2024-11-21 14:10	2020-07-15	Show	GitHub Exploit DB Packet Storm

209446	8.8	HIGH Network	microsoft	sharepoint_foundation sharepoint_server sharepoint_enterprise_server	A remote code execution vulnerability exists in PerformancePoint Services for SharePoint Server when the software fails to check the source markup of XML file input, aka 'PerformancePoint Services Re…	CWE-502 Deserialization of Untrusted Data	CVE-2020-1439	2024-11-21 14:10	2020-07-15	Show	GitHub Exploit DB Packet Storm

209447	7.8	HIGH Local	microsoft	windows_server_2008 windows_server_2012 windows_10 windows_8.1 windows_server_2016 windows_7 windows_rt_8.1 windows_server_2019	An elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects in memory, aka 'Windows Network Connections Service Elevation of Privilege Vulne…	NVD-CWE-noinfo	CVE-2020-1438	2024-11-21 14:10	2020-07-15	Show	GitHub Exploit DB Packet Storm

209448	7.8	HIGH Local	microsoft	windows_server_2012 windows_10 windows_8.1 windows_server_2016 windows_server_2008 windows_7 windows_rt_8.1 windows_server_2019	An elevation of privilege vulnerability exists in the way that the Windows Network Location Awareness Service handles objects in memory, aka 'Windows Network Location Awareness Service Elevation of P…	NVD-CWE-noinfo	CVE-2020-1437	2024-11-21 14:10	2020-07-15	Show	GitHub Exploit DB Packet Storm

209449	8.8	HIGH Network	microsoft	windows_server_2012 windows_10 windows_8.1 windows_server_2016 windows_server_2008 windows_7 windows_rt_8.1 windows_server_2019	A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted fonts.For all systems except Windows 10, an attacker who successfully exploited the vul…	CWE-787 Out-of-bounds Write	CVE-2020-1436	2024-11-21 14:10	2020-07-15	Show	GitHub Exploit DB Packet Storm

209450	8.8	HIGH Network	microsoft	windows_server_2012 windows_10 windows_8.1 windows_server_2016 windows_server_2008 windows_7 windows_rt_8.1 windows_server_2019	A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka 'GDI+ Remote Code Execution Vulnerability'.	NVD-CWE-noinfo	CVE-2020-1435	2024-11-21 14:10	2020-07-15	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed