Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 8, 2026, 4:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
245561	7.5	危険	ASP-DEV	-	ASP-DEv XM Events Diary の default.asp における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-5923	2012-06-26 16:10	2009-01-21	Show	GitHub Exploit DB Packet Storm

245562	7.5	危険	cfagcms	-	CFAGCMS の themes/default/index.php における PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2008-5922	2012-06-26 16:10	2009-01-21	Show	GitHub Exploit DB Packet Storm

245563	7.5	危険	codeavalanche	-	CodeAvalanche Articles における管理者パスワードを含むデータベースファイルをダウンロードされる脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2008-5900	2012-06-26 16:10	2009-01-12	Show	GitHub Exploit DB Packet Storm

245564	7.5	危険	codeavalanche	-	CodeAvalanche FreeForAll における管理者パスワードを含むデータベースファイルをダウンロードされる脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2008-5899	2012-06-26 16:10	2009-01-12	Show	GitHub Exploit DB Packet Storm

245565	7.5	危険	codeavalanche	-	CodeAvalanche Directory における管理者パスワードを含むデータベースファイルをダウンロードされる脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2008-5898	2012-06-26 16:10	2009-01-12	Show	GitHub Exploit DB Packet Storm

245566	7.5	危険	codeavalanche	-	CodeAvalanche FreeWallpaper における管理者パスワードを含むデータベースファイルをダウンロードされる脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2008-5897	2012-06-26 16:10	2009-01-12	Show	GitHub Exploit DB Packet Storm

245567	7.5	危険	codeavalanche	-	CodeAvalanche RateMySite における管理者パスワードを含むデータベースファイルをダウンロードされる脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2008-5896	2012-06-26 16:10	2009-01-12	Show	GitHub Exploit DB Packet Storm

245568	7.5	危険	gobbl	-	Gobbl CMS の admin/auth.php における管理アクセス権を取得される脆弱性	CWE-287 不適切な認証	CVE-2008-5880	2012-06-26 16:10	2009-01-8	Show	GitHub Exploit DB Packet Storm

245569	4.3	警告	FastStone Soft	-	FastStone Image Viewer におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2008-5870	2012-06-26 16:10	2009-01-8	Show	GitHub Exploit DB Packet Storm

245570	5	警告	freelyrics	-	FreeLyrics の source.php におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2008-5861	2012-06-26 16:10	2009-01-6	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 8, 2026, 4:09 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
217981	3.5	LOW Network	freerdp opensuse debian	freerdp leap debian_linux	In FreeRDP before 2.1.0, there is an out-of-bounds read in cliprdr_read_format_list. Clipboard format data read (by client or server) might read data out-of-bounds. This has been fixed in 2.1.0.	-	CVE-2020-11085	2024-11-21 13:56	2020-05-30	Show	GitHub Exploit DB Packet Storm

217982	2.7	LOW Network	freerdp opensuse debian	freerdp leap debian_linux	In FreeRDP less than or equal to 2.0.0, there is an out-of-bounds read in rfx_process_message_tileset. Invalid data fed to RFX decoder results in garbage on screen (as colors). This has been patched …	-	CVE-2020-11043	2024-11-21 13:56	2020-05-30	Show	GitHub Exploit DB Packet Storm

217983	2.7	LOW Network	freerdp opensuse debian	freerdp leap debian_linux	In FreeRDP less than or equal to 2.0.0, there is an out-of-bound data read from memory in clear_decompress_subcode_rlex, visualized on screen as color. This has been patched in 2.1.0.	-	CVE-2020-11040	2024-11-21 13:56	2020-05-30	Show	GitHub Exploit DB Packet Storm

217984	2.7	LOW Network	freerdp opensuse debian	freerdp leap debian_linux	In FreeRDP less than or equal to 2.0.0, an outside controlled array index is used unchecked for data used as configuration for sound backend (alsa, oss, pulse, ...). The most likely outcome is a cras…	-	CVE-2020-11041	2024-11-21 13:56	2020-05-30	Show	GitHub Exploit DB Packet Storm

217985	6.8	MEDIUM Network	freerdp opensuse debian	freerdp leap debian_linux	In FreeRDP less than or equal to 2.0.0, when using a manipulated server with USB redirection enabled (nearly) arbitrary memory can be read and written due to integer overflows in length checks. This …	-	CVE-2020-11039	2024-11-21 13:56	2020-05-30	Show	GitHub Exploit DB Packet Storm

217986	5.4	MEDIUM Network	freerdp opensuse debian	freerdp leap debian_linux	In FreeRDP less than or equal to 2.0.0, an Integer Overflow to Buffer Overflow exists. When using /video redirection, a manipulated server can instruct the client to allocate a buffer with a smaller …	-	CVE-2020-11038	2024-11-21 13:56	2020-05-30	Show	GitHub Exploit DB Packet Storm

217987	6.5	MEDIUM Network	freerdp opensuse debian	freerdp leap debian_linux	In FreeRDP less than or equal to 2.0.0, when running with logger set to "WLOG_TRACE", a possible crash of application could occur due to a read of an invalid array index. Data could be printed as str…	-	CVE-2020-11019	2024-11-21 13:56	2020-05-30	Show	GitHub Exploit DB Packet Storm

217988	6.5	MEDIUM Network	freerdp opensuse debian	freerdp leap debian_linux	In FreeRDP less than or equal to 2.0.0, a possible resource exhaustion vulnerability can be performed. Malicious clients could trigger out of bound reads causing memory allocation with random size. T…	-	CVE-2020-11018	2024-11-21 13:56	2020-05-30	Show	GitHub Exploit DB Packet Storm

217989	6.5	MEDIUM Network	freerdp opensuse debian	freerdp leap debian_linux	In FreeRDP less than or equal to 2.0.0, by providing manipulated input a malicious client can create a double free condition and crash the server. This is fixed in version 2.1.0.	-	CVE-2020-11017	2024-11-21 13:56	2020-05-30	Show	GitHub Exploit DB Packet Storm

217990	6.1	MEDIUM Network	kaminari_project debian	kaminari debian_linux	In Kaminari before 1.2.1, there is a vulnerability that would allow an attacker to inject arbitrary code into pages with pagination links. This has been fixed in 1.2.1.	-	CVE-2020-11082	2024-11-21 13:56	2020-05-29	Show	GitHub Exploit DB Packet Storm