Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 12, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
246741	10	危険	MPlayer project FFmpeg	-	MPlayer で使用される FFmpeg の libavformat/utils.c におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2008-4866	2012-06-26 16:02	2008-10-31	Show	GitHub Exploit DB Packet Storm

246742	6.9	警告	blender	-	Blender の BPY_interface における任意のコードを実行される脆弱性	CWE-Other その他	CVE-2008-4863	2012-06-26 16:02	2008-10-31	Show	GitHub Exploit DB Packet Storm

246743	7.5	危険	e107.org	-	e107 用 EasyShop プラグインの easyshop.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-4786	2012-06-26 16:02	2008-10-29	Show	GitHub Exploit DB Packet Storm

246744	7.5	危険	e107.org	-	e107 用 alternate_profiles プラグインの newuser.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-4785	2012-06-26 16:02	2008-10-29	Show	GitHub Exploit DB Packet Storm

246745	7.5	危険	aflog	-	aflog における認証を回避される脆弱性	CWE-287 不適切な認証	CVE-2008-4784	2012-06-26 16:02	2008-10-29	Show	GitHub Exploit DB Packet Storm

246746	7.5	危険	easy-script	-	tlAds における管理アクセス権を取得される脆弱性	CWE-287 不適切な認証	CVE-2008-4783	2012-06-26 16:02	2008-10-29	Show	GitHub Exploit DB Packet Storm

246747	7.5	危険	aiocp	-	AIOCP の public/code/cp_polls_results.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-4782	2012-06-26 16:02	2008-10-29	Show	GitHub Exploit DB Packet Storm

246748	7.5	危険	easy-script	-	MyKtools の update.php におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2008-4781	2012-06-26 16:02	2008-10-29	Show	GitHub Exploit DB Packet Storm

246749	6.8	警告	easy-script	-	MyForum の admin/centre.php におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2008-4780	2012-06-26 16:02	2008-10-29	Show	GitHub Exploit DB Packet Storm

246750	7.5	危険	dream4	-	Koobi CMS の gallery モジュールにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-4778	2012-06-26 16:02	2008-10-29	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 12, 2026, 4:20 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
219351	9.9	CRITICAL Network	anchore	engine	In Anchore Engine version 0.7.0, a specially crafted container image manifest, fetched from a registry, can be used to trigger a shell escape flaw in the anchore engine analyzer service during an ima…	NVD-CWE-Other	CVE-2020-11075	2024-11-21 13:56	2020-05-28	Show	GitHub Exploit DB Packet Storm

219352	7.5	HIGH Network	aegir_project	aegir	In AEgir greater than or equal to 21.7.0 and less than 21.10.1, aegir publish and aegir build may leak secrets from environment variables in the browser bundle published to npm. This has been fixed i…	CWE-200 Information Exposure	CVE-2020-11059	2024-11-21 13:56	2020-05-28	Show	GitHub Exploit DB Packet Storm

219353	7.8	HIGH Local	sympa fedoraproject debian canonical	sympa fedora debian_linux ubuntu_linux	Sympa before 6.2.56 allows privilege escalation.	CWE-269 Improper Privilege Management	CVE-2020-10936	2024-11-21 13:56	2020-05-28	Show	GitHub Exploit DB Packet Storm

219354	6.1	MEDIUM Network	centreon	centreon_host-monitoring_widget centreon_tactical-overview_widget centreon_service-monitoring_widget	Cross-site scripting (XSS) vulnerability allows remote attackers to inject arbitrary web script or HTML via the page parameter to service-monitoring/src/index.php. This vulnerability is fixed in vers…	CWE-79 Cross-site Scripting	CVE-2020-10946	2024-11-21 13:56	2020-05-28	Show	GitHub Exploit DB Packet Storm

219355	4.3	MEDIUM Adjacent	centreon	widget-host-monitoring centreon	Centreon before 19.10.7 exposes Session IDs in server responses.	CWE-200 Information Exposure	CVE-2020-10945	2024-11-21 13:56	2020-05-28	Show	GitHub Exploit DB Packet Storm

219356	7.5	HIGH Network	puma fedoraproject debian	puma fedora debian_linux	In Puma (RubyGem) before 4.3.4 and 3.12.5, an attacker could smuggle an HTTP response, by using an invalid transfer-encoding header. The problem has been fixed in Puma 3.12.5 and Puma 4.3.4.	-	CVE-2020-11076	2024-11-21 13:56	2020-05-23	Show	GitHub Exploit DB Packet Storm

219357	7.5	HIGH Network	puma fedoraproject debian opensuse	puma fedora debian_linux leap	In Puma (RubyGem) before 4.3.5 and 3.12.6, a client could smuggle a request through a proxy, causing the proxy to send a response back to another unknown client. If the proxy uses persistent connecti…	-	CVE-2020-11077	2024-11-21 13:56	2020-05-23	Show	GitHub Exploit DB Packet Storm

219358	6.8	MEDIUM Network	httplib2_project fedoraproject debian	httplib2 fedora debian_linux	In httplib2 before version 0.18.0, an attacker controlling unescaped part of uri for `httplib2.Http.request()` could change request headers and body, send additional hidden requests to same server. T…	-	CVE-2020-11078	2024-11-21 13:56	2020-05-21	Show	GitHub Exploit DB Packet Storm

219359	7.5	HIGH Network	powerdns fedoraproject debian opensuse	recursor fedora debian_linux leap backports_sle	PowerDNS Recursor from 4.1.0 up to and including 4.3.0 does not sufficiently defend against amplification attacks. An issue in the DNS protocol has been found that allow malicious parties to use recu…	CWE-400 Uncontrolled Resource Consumption	CVE-2020-10995	2024-11-21 13:56	2020-05-20	Show	GitHub Exploit DB Packet Storm

219360	5.3	MEDIUM Network	dovecot	dovecot	In Dovecot before 2.3.10.1, remote unauthenticated attackers can crash the lmtp or submission process by sending mail with an empty localpart.	CWE-20 Improper Input Validation	CVE-2020-10967	2024-11-21 13:56	2020-05-19	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed