Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 8, 2026, noon

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
226761 7.5 危険 scripts frenzy - Article Publisher Pro の admin/admin.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-4901 2012-12-20 18:52 2008-11-3 Show GitHub Exploit DB Packet Storm
226762 9.3 危険 SAP - SAP GUI の KWEdit ActiveX コントロールにおける任意のファイルを上書きされる脆弱性 CWE-Other
その他 		CVE-2008-4830 2012-12-20 18:52 2009-04-16 Show GitHub Exploit DB Packet Storm
226763 7.5 危険 YourFreeWorld.com - YourFreeWorld Classifieds Blaster Script の tr.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-4900 2012-12-20 18:52 2008-11-3 Show GitHub Exploit DB Packet Storm
226764 6.8 警告 planetluc - Planetluc RateMe におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2008-4899 2012-12-20 18:52 2008-11-3 Show GitHub Exploit DB Packet Storm
226765 4.3 警告 planetluc - planetluc RateMe におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-4898 2012-12-20 18:52 2008-11-3 Show GitHub Exploit DB Packet Storm
226766 7.5 危険 YourFreeWorld.com - YourFreeWorld Downline Builder の tr.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-4895 2012-12-20 18:52 2008-11-3 Show GitHub Exploit DB Packet Storm
226767 5.1 警告 Tribal Ltd. - Tribiq CMS の templates/mytribiqsite/tribal-GPL-1066/includes/header.inc.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-4894 2012-12-20 18:52 2008-11-3 Show GitHub Exploit DB Packet Storm
226768 2.6 注意 Tribal Ltd. - Tribiq CMS の templates/mytribiqsite/tribal-GPL-1066/includes/header.inc.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-4893 2012-12-20 18:52 2008-11-3 Show GitHub Exploit DB Packet Storm
226769 4.3 警告 planetluc - Planetluc MyGallery の gallery.inc.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-4892 2012-12-20 18:52 2008-11-3 Show GitHub Exploit DB Packet Storm
226770 4.3 警告 planetluc - Planetluc SignMe の signme.inc.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-4891 2012-12-20 18:52 2008-11-3 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 8, 2026, 4:54 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
210771 3.5 LOW
Network 		freerdp
opensuse
debian 		freerdp
leap
debian_linux 		In FreeRDP before 2.1.0, there is an out-of-bounds read in cliprdr_read_format_list. Clipboard format data read (by client or server) might read data out-of-bounds. This has been fixed in 2.1.0. - CVE-2020-11085 2024-11-21 13:56 2020-05-30 Show GitHub Exploit DB Packet Storm
210772 2.7 LOW
Network 		freerdp
opensuse
debian 		freerdp
leap
debian_linux 		In FreeRDP less than or equal to 2.0.0, there is an out-of-bounds read in rfx_process_message_tileset. Invalid data fed to RFX decoder results in garbage on screen (as colors). This has been patched … - CVE-2020-11043 2024-11-21 13:56 2020-05-30 Show GitHub Exploit DB Packet Storm
210773 2.7 LOW
Network 		freerdp
opensuse
debian 		freerdp
leap
debian_linux 		In FreeRDP less than or equal to 2.0.0, there is an out-of-bound data read from memory in clear_decompress_subcode_rlex, visualized on screen as color. This has been patched in 2.1.0. - CVE-2020-11040 2024-11-21 13:56 2020-05-30 Show GitHub Exploit DB Packet Storm
210774 2.7 LOW
Network 		freerdp
opensuse
debian 		freerdp
leap
debian_linux 		In FreeRDP less than or equal to 2.0.0, an outside controlled array index is used unchecked for data used as configuration for sound backend (alsa, oss, pulse, ...). The most likely outcome is a cras… - CVE-2020-11041 2024-11-21 13:56 2020-05-30 Show GitHub Exploit DB Packet Storm
210775 6.8 MEDIUM
Network 		freerdp
opensuse
debian 		freerdp
leap
debian_linux 		In FreeRDP less than or equal to 2.0.0, when using a manipulated server with USB redirection enabled (nearly) arbitrary memory can be read and written due to integer overflows in length checks. This … - CVE-2020-11039 2024-11-21 13:56 2020-05-30 Show GitHub Exploit DB Packet Storm
210776 5.4 MEDIUM
Network 		freerdp
opensuse
debian 		freerdp
leap
debian_linux 		In FreeRDP less than or equal to 2.0.0, an Integer Overflow to Buffer Overflow exists. When using /video redirection, a manipulated server can instruct the client to allocate a buffer with a smaller … - CVE-2020-11038 2024-11-21 13:56 2020-05-30 Show GitHub Exploit DB Packet Storm
210777 6.5 MEDIUM
Network 		freerdp
opensuse
debian 		freerdp
leap
debian_linux 		In FreeRDP less than or equal to 2.0.0, when running with logger set to "WLOG_TRACE", a possible crash of application could occur due to a read of an invalid array index. Data could be printed as str… - CVE-2020-11019 2024-11-21 13:56 2020-05-30 Show GitHub Exploit DB Packet Storm
210778 6.5 MEDIUM
Network 		freerdp
opensuse
debian 		freerdp
leap
debian_linux 		In FreeRDP less than or equal to 2.0.0, a possible resource exhaustion vulnerability can be performed. Malicious clients could trigger out of bound reads causing memory allocation with random size. T… - CVE-2020-11018 2024-11-21 13:56 2020-05-30 Show GitHub Exploit DB Packet Storm
210779 6.5 MEDIUM
Network 		freerdp
opensuse
debian 		freerdp
leap
debian_linux 		In FreeRDP less than or equal to 2.0.0, by providing manipulated input a malicious client can create a double free condition and crash the server. This is fixed in version 2.1.0. - CVE-2020-11017 2024-11-21 13:56 2020-05-30 Show GitHub Exploit DB Packet Storm
210780 6.1 MEDIUM
Network 		kaminari_project
debian 		kaminari
debian_linux 		In Kaminari before 1.2.1, there is a vulnerability that would allow an attacker to inject arbitrary code into pages with pagination links. This has been fixed in 1.2.1. - CVE-2020-11082 2024-11-21 13:56 2020-05-29 Show GitHub Exploit DB Packet Storm