Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 23, 2026, 4 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
230341	10	危険	トレンドマイクロ	-	Trend Micro ServerProtect の不特定のプロシージャにおけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2008-0012	2012-12-20 18:34	2008-11-17	Show	GitHub Exploit DB Packet Storm

230342	7.2	危険	PulseAudio	-	PulseAudio の pa_drop_root 関数における権限を取得される脆弱性	CWE-20 不適切な入力確認	CVE-2008-0008	2012-12-20 18:34	2008-01-28	Show	GitHub Exploit DB Packet Storm

230343	4.3	警告	xmb forum	-	XMB におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2007-6728	2012-12-20 18:34	2009-07-5	Show	GitHub Exploit DB Packet Storm

230344	10	危険	synce	-	SynCE (SynCE-dccm) の vdccm におけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2007-6703	2012-12-20 18:34	2008-03-4	Show	GitHub Exploit DB Packet Storm

230345	7.5	危険	Simple DirectMedia Layer	-	SDL_image の IMG_gif.c におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2007-6697	2012-12-20 18:34	2008-02-1	Show	GitHub Exploit DB Packet Storm

230346	2.1	注意	webcalendar	-	WebCalendar におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2007-6696	2012-12-20 18:34	2008-02-1	Show	GitHub Exploit DB Packet Storm

230347	5	警告	VideoLAN	-	VideoLAN VLC の RTSP モジュールにおけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2007-6684	2012-12-20 18:34	2008-01-16	Show	GitHub Exploit DB Packet Storm

230348	5	警告	VideoLAN	-	VideoLAN VLC のブラウザプラグインにおける任意のファイルを上書きされる脆弱性	CWE-DesignError	CVE-2007-6683	2012-12-20 18:34	2008-01-16	Show	GitHub Exploit DB Packet Storm

230349	7.5	危険	VideoLAN	-	VideoLAN VLC の httpd_FileCallBack 関数におけるフォーマットストリングの脆弱性	CWE-DesignError	CVE-2007-6682	2012-12-20 18:34	2008-01-16	Show	GitHub Exploit DB Packet Storm

230350	7.5	危険	VideoLAN	-	VideoLAN VLC の modules/demux/subtitle.c におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2007-6681	2012-12-20 18:34	2008-01-16	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 23, 2026, 4:08 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
214071	6.5	MEDIUM Network	freerdp opensuse debian	freerdp leap debian_linux	In FreeRDP less than or equal to 2.0.0, by providing manipulated input a malicious client can create a double free condition and crash the server. This is fixed in version 2.1.0.	-	CVE-2020-11017	2024-11-21 13:56	2020-05-30	Show	GitHub Exploit DB Packet Storm

214072	6.1	MEDIUM Network	kaminari_project debian	kaminari debian_linux	In Kaminari before 1.2.1, there is a vulnerability that would allow an attacker to inject arbitrary code into pages with pagination links. This has been fixed in 1.2.1.	-	CVE-2020-11082	2024-11-21 13:56	2020-05-29	Show	GitHub Exploit DB Packet Storm

214073	9.8	CRITICAL Network	node-dns-sync_project	node-dns-sync	node-dns-sync (npm module dns-sync) through 0.2.0 allows execution of arbitrary commands . This issue may lead to remote code execution if a client of the library calls the vulnerable method with unt…	CWE-77 Command Injection	CVE-2020-11079	2024-11-21 13:56	2020-05-29	Show	GitHub Exploit DB Packet Storm

214074	9.9	CRITICAL Network	anchore	engine	In Anchore Engine version 0.7.0, a specially crafted container image manifest, fetched from a registry, can be used to trigger a shell escape flaw in the anchore engine analyzer service during an ima…	NVD-CWE-Other	CVE-2020-11075	2024-11-21 13:56	2020-05-28	Show	GitHub Exploit DB Packet Storm

214075	7.5	HIGH Network	aegir_project	aegir	In AEgir greater than or equal to 21.7.0 and less than 21.10.1, aegir publish and aegir build may leak secrets from environment variables in the browser bundle published to npm. This has been fixed i…	CWE-200 Information Exposure	CVE-2020-11059	2024-11-21 13:56	2020-05-28	Show	GitHub Exploit DB Packet Storm

214076	7.8	HIGH Local	sympa fedoraproject debian canonical	sympa fedora debian_linux ubuntu_linux	Sympa before 6.2.56 allows privilege escalation.	CWE-269 Improper Privilege Management	CVE-2020-10936	2024-11-21 13:56	2020-05-28	Show	GitHub Exploit DB Packet Storm

214077	6.1	MEDIUM Network	centreon	centreon_host-monitoring_widget centreon_tactical-overview_widget centreon_service-monitoring_widget	Cross-site scripting (XSS) vulnerability allows remote attackers to inject arbitrary web script or HTML via the page parameter to service-monitoring/src/index.php. This vulnerability is fixed in vers…	CWE-79 Cross-site Scripting	CVE-2020-10946	2024-11-21 13:56	2020-05-28	Show	GitHub Exploit DB Packet Storm

214078	4.3	MEDIUM Adjacent	centreon	widget-host-monitoring centreon	Centreon before 19.10.7 exposes Session IDs in server responses.	CWE-200 Information Exposure	CVE-2020-10945	2024-11-21 13:56	2020-05-28	Show	GitHub Exploit DB Packet Storm

214079	7.5	HIGH Network	puma fedoraproject debian	puma fedora debian_linux	In Puma (RubyGem) before 4.3.4 and 3.12.5, an attacker could smuggle an HTTP response, by using an invalid transfer-encoding header. The problem has been fixed in Puma 3.12.5 and Puma 4.3.4.	-	CVE-2020-11076	2024-11-21 13:56	2020-05-23	Show	GitHub Exploit DB Packet Storm

214080	7.5	HIGH Network	puma fedoraproject debian opensuse	puma fedora debian_linux leap	In Puma (RubyGem) before 4.3.5 and 3.12.6, a client could smuggle a request through a proxy, causing the proxy to send a response back to another unknown client. If the proxy uses persistent connecti…	-	CVE-2020-11077	2024-11-21 13:56	2020-05-23	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed