Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":June 17, 2026, 6 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 247511 | 7.5 | 危険 | BTITeam | - | BtiTracker の scrape.php における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2008-3784 | 2012-06-26 16:02 | 2008-08-26 | Show | GitHub Exploit DB Packet Storm |
| 247512 | 3.5 | 注意 | discountedscripts | - | ACG-PTP の admin/index.php におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2008-3782 | 2012-06-26 16:02 | 2008-08-26 | Show | GitHub Exploit DB Packet Storm |
| 247513 | 4.3 | 警告 | gmod | - | GMOD GBrowse におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2008-3781 | 2012-06-26 16:02 | 2008-08-26 | Show | GitHub Exploit DB Packet Storm |
| 247514 | 7.5 | 危険 | アバイア | - | Avaya SIP Enablement Services および CM の SES Server におけるサービス運用妨害 (DoS) の脆弱性 |
CWE-264
認可・権限・アクセス制御 |
CVE-2008-3778 | 2012-06-26 16:02 | 2008-08-19 | Show | GitHub Exploit DB Packet Storm |
| 247515 | 2.1 | 注意 | アバイア | - | Avaya SIP Enablement Services および CM の SES Server におけるログイン資格情報を取得される脆弱性 |
CWE-200
情報漏えい |
CVE-2008-3777 | 2012-06-26 16:02 | 2008-07-19 | Show | GitHub Exploit DB Packet Storm |
| 247516 | 5 | 警告 | 富士通 | - | Fujitsu Web-Based Admin View におけるディレクトリトラバーサルの脆弱性 |
CWE-22
パス・トラバーサル |
CVE-2008-3776 | 2012-06-26 16:02 | 2008-08-25 | Show | GitHub Exploit DB Packet Storm |
| 247517 | 2.1 | 注意 | folder lock | - | Folder Lock における重要な情報を取得される脆弱性 |
CWE-310
暗号の問題 |
CVE-2008-3775 | 2012-06-26 16:02 | 2008-08-22 | Show | GitHub Exploit DB Packet Storm |
| 247518 | 7.5 | 危険 | discountedscripts | - | Quick Poll Script の code.php における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2008-3765 | 2012-06-26 16:02 | 2008-08-21 | Show | GitHub Exploit DB Packet Storm |
| 247519 | 10 | 危険 | DELL EMC (旧 EMC Corporation) | - | EMC Documentum ApplicationXtender Workflow のサーバにおけるディレクトリトラバーサルの脆弱性 |
CWE-22
パス・トラバーサル |
CVE-2008-3685 | 2012-06-26 16:02 | 2009-10-22 | Show | GitHub Exploit DB Packet Storm |
| 247520 | 10 | 危険 | DELL EMC (旧 EMC Corporation) | - | EMC Documentum ApplicationXtender Workflow のサーバにおけるヒープベースのバッファオーバーフローの脆弱性 |
CWE-119
バッファエラー |
CVE-2008-3684 | 2012-06-26 16:02 | 2009-10-22 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:June 17, 2026, 4:19 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 219871 | 5.5 |
MEDIUM
Local |
openexr fedoraproject canonical opensuse debian apple |
openexr fedora ubuntu_linux leap debian_linux mac_os_x tvos iphone_os icloud itunes watchos ipados |
An issue was discovered in OpenEXR before 2.4.1. There is an out-of-bounds read and write in DwaCompressor::uncompress in ImfDwaCompressor.cpp when handling the UNKNOWN compression case. |
CWE-125 CWE-787 Out-of-bounds Read Out-of-bounds Write |
CVE-2020-11762 | 2024-11-21 13:58 | 2020-04-15 | Show | GitHub Exploit DB Packet Storm |
| 219872 | 5.5 |
MEDIUM
Local |
openexr fedoraproject canonical debian apple |
openexr fedora ubuntu_linux debian_linux mac_os_x tvos iphone_os icloud itunes watchos ipados |
An issue was discovered in OpenEXR before 2.4.1. There is an out-of-bounds read during Huffman uncompression, as demonstrated by FastHufDecoder::refill in ImfFastHuf.cpp. |
CWE-125
Out-of-bounds Read |
CVE-2020-11761 | 2024-11-21 13:58 | 2020-04-15 | Show | GitHub Exploit DB Packet Storm |
| 219873 | 5.5 |
MEDIUM
Local |
openexr fedoraproject canonical opensuse debian apple |
openexr fedora ubuntu_linux leap debian_linux mac_os_x tvos iphone_os icloud itunes watchos ipados |
An issue was discovered in OpenEXR before 2.4.1. There is an out-of-bounds read during RLE uncompression in rleUncompress in ImfRle.cpp. |
CWE-125
Out-of-bounds Read |
CVE-2020-11760 | 2024-11-21 13:58 | 2020-04-15 | Show | GitHub Exploit DB Packet Storm |
| 219874 | 5.5 |
MEDIUM
Local |
openexr fedoraproject canonical debian apple |
openexr fedora ubuntu_linux debian_linux tvos iphone_os icloud itunes watchos ipados mac_os_x |
An issue was discovered in OpenEXR before 2.4.1. Because of integer overflows in CompositeDeepScanLine::Data::handleDeepFrameBuffer and readSampleCountForLineBlock, an attacker can write to an out-of… |
CWE-190
Integer Overflow or Wraparound |
CVE-2020-11759 | 2024-11-21 13:58 | 2020-04-15 | Show | GitHub Exploit DB Packet Storm |
| 219875 | 5.5 |
MEDIUM
Local |
openexr fedoraproject canonical opensuse debian apple |
openexr fedora ubuntu_linux leap debian_linux mac_os_x tvos iphone_os icloud itunes watchos ipados |
An issue was discovered in OpenEXR before 2.4.1. There is an out-of-bounds read in ImfOptimizedPixelReading.h. |
CWE-125
Out-of-bounds Read |
CVE-2020-11758 | 2024-11-21 13:58 | 2020-04-15 | Show | GitHub Exploit DB Packet Storm |
| 219876 | 5.5 |
MEDIUM
Local |
cellebrite | ufed_firmware | Cellebrite UFED 5.0 through 7.29 uses four hardcoded RSA private keys to authenticate to the ADB daemon on target devices. Extracted keys can be used to place evidence onto target devices when perfor… |
CWE-798
Use of Hard-coded Credentials |
CVE-2020-11723 | 2024-11-21 13:58 | 2020-04-15 | Show | GitHub Exploit DB Packet Storm |
| 219877 | 5.5 |
MEDIUM
Local |
xen debian fedoraproject opensuse |
xen debian_linux fedora leap |
An issue was discovered in xenoprof in Xen through 4.13.x, allowing guest OS users (without active profiling) to obtain sensitive information about other guests. Unprivileged guests can request to ma… |
CWE-212
Improper Removal of Sensitive Information Before Storage or Transfer |
CVE-2020-11740 | 2024-11-21 13:58 | 2020-04-14 | Show | GitHub Exploit DB Packet Storm |
| 219878 | 7.5 |
HIGH
Network |
snapcreek | duplicator | The Snap Creek Duplicator plugin before 1.3.28 for WordPress (and Duplicator Pro before 3.8.7.1) allows Directory Traversal via ../ in the file parameter to duplicator_download or duplicator_init. |
CWE-22
Path Traversal |
CVE-2020-11738 | 2024-11-21 13:58 | 2020-04-14 | Show | GitHub Exploit DB Packet Storm |
| 219879 | 3.9 |
LOW
Local |
gnome debian canonical |
file-roller debian_linux ubuntu_linux |
fr-archive-libarchive.c in GNOME file-roller through 3.36.1 allows Directory Traversal during extraction because it lacks a check of whether a file's parent is a symlink to a directory outside of the… |
CWE-22 CWE-59 Path Traversal Link Following |
CVE-2020-11736 | 2024-11-21 13:58 | 2020-04-14 | Show | GitHub Exploit DB Packet Storm |
| 219880 | 6.1 |
MEDIUM
Network |
cybersolutions | cybermail | cgi-bin/go in CyberSolutions CyberMail 5 or later allows XSS via the ACTION parameter. |
CWE-79
Cross-site Scripting |
CVE-2020-11734 | 2024-11-21 13:58 | 2020-04-14 | Show | GitHub Exploit DB Packet Storm |