Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 25, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
248821	9.3	危険	マイクロソフト	-	Microsoft Windows のカーネルモードドライバ内の win32k.sys における権限昇格の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-1848	2012-05-10 18:13	2012-05-8	Show	GitHub Exploit DB Packet Storm

248822	10	危険	マイクロソフト	-	Microsoft Windows のカーネルモードドライバ内の win32k.sys における権限昇格の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-0181	2012-05-10 18:12	2012-05-8	Show	GitHub Exploit DB Packet Storm

248823	7.2	危険	マイクロソフト	-	Microsoft Windows のカーネルモードドライバ内の win32k.sys における権限昇格の脆弱性	CWE-20 不適切な入力確認	CVE-2012-0180	2012-05-10 18:11	2012-05-8	Show	GitHub Exploit DB Packet Storm

248824	9.3	危険	マイクロソフト	-	Windows 上で稼働する Microsoft Silverlight におけるメモリ二重解放の脆弱性	CWE-399 リソース管理の問題	CVE-2012-0176	2012-05-10 18:09	2012-05-8	Show	GitHub Exploit DB Packet Storm

248825	9.3	危険	マイクロソフト	-	Microsoft Office 2003 および 2007 におけるヒープベースのバッファオーバーフローの脆弱性	CWE-20 不適切な入力確認	CVE-2012-0167	2012-05-10 18:08	2012-05-8	Show	GitHub Exploit DB Packet Storm

248826	9.3	危険	マイクロソフト	-	複数の Microsoft 製品の GDI+ における任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2012-0165	2012-05-10 18:04	2012-05-8	Show	GitHub Exploit DB Packet Storm

248827	5	警告	マイクロソフト	-	Microsoft .NET Framework 4 におけるサービス運用妨害 (アプリケーションハング) の脆弱性	CWE-DesignError	CVE-2012-0164	2012-05-10 17:58	2012-05-8	Show	GitHub Exploit DB Packet Storm

248828	9.3	危険	マイクロソフト	-	Microsoft .NET Framework 4 における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2012-0162	2012-05-10 17:57	2012-05-8	Show	GitHub Exploit DB Packet Storm

248829	6.8	警告	マイクロソフト	-	複数の Microsoft Windows 製品の partmgr.sys における権限昇格の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-0178	2012-05-10 17:08	2012-05-8	Show	GitHub Exploit DB Packet Storm

248830	6.8	警告	マイクロソフト	-	Microsoft Windows Server 2008 R2 および Windows 7 の tcpip.sys におけるメモリ二重解放の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-0179	2012-05-10 16:09	2012-05-8	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 25, 2026, 4:01 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
211521	6.0	MEDIUM Local	tuxfamily fedoraproject canonical	chrony fedora ubuntu_linux	A flaw was found in chrony versions before 3.5.1 when creating the PID file under the /var/run/chrony folder. The file is created during chronyd startup while still running as the root user, and when…	CWE-59 Link Following	CVE-2020-14367	2024-11-21 14:03	2020-08-25	Show	GitHub Exploit DB Packet Storm

211522	7.3	HIGH Local	postgresql debian opensuse canonical	postgresql debian_linux leap ubuntu_linux	It was found that some PostgreSQL extensions did not use search_path safely in their installation script. An attacker with sufficient privileges could use this flaw to trick an administrator into exe…	CWE-426 Untrusted Search Path	CVE-2020-14350	2024-11-21 14:03	2020-08-24	Show	GitHub Exploit DB Packet Storm

211523	7.1	HIGH Network	postgresql opensuse	postgresql leap	It was found that PostgreSQL versions before 12.4, before 11.9 and before 10.14 did not properly sanitize the search_path during logical replication. An authenticated attacker could use this flaw in …	CWE-89 CWE-427 SQL Injection Uncontrolled Search Path Element	CVE-2020-14349	2024-11-21 14:03	2020-08-24	Show	GitHub Exploit DB Packet Storm

211524	5.3	MEDIUM Network	philips	dreammapper	Philips DreamMapper, Version 2.24 and prior. Information written to log files can give guidance to a potential attacker.	CWE-532 Inclusion of Sensitive Information in Log Files	CVE-2020-14518	2024-11-21 14:03	2020-08-21	Show	GitHub Exploit DB Packet Storm

211525	7.8	HIGH Local	linux redhat opensuse debian canonical netapp	linux_kernel enterprise_linux leap debian_linux ubuntu_linux cloud_backup solidfire hci_management_node active_iq_unified_manager solidfire_baseboard_management_controller_…	A flaw null pointer dereference in the Linux kernel cgroupv2 subsystem in versions before 5.7.10 was found in the way when reboot the system. A local user could use this flaw to crash the system or e…	CWE-476 NULL Pointer Dereference	CVE-2020-14356	2024-11-21 14:03	2020-08-20	Show	GitHub Exploit DB Packet Storm

211526	6.1	MEDIUM Network	ovirt	ovirt-engine	A flaw was found in Ovirt Engine's web interface in ovirt 4.4 and earlier, where it did not filter user-controllable parameters completely, resulting in a reflected cross-site scripting attack. This …	-	CVE-2020-14333	2024-11-21 14:03	2020-08-18	Show	GitHub Exploit DB Packet Storm

211527	4.3	MEDIUM Adjacent	tridium	niagara_enterprise_security niagara	A timeout during a TLS handshake can result in the connection failing to terminate. This can result in a Niagara thread hanging and requires a manual restart of Niagara (Versions 4.6.96.28, 4.7.109.2…	NVD-CWE-Other	CVE-2020-14483	2024-11-21 14:03	2020-08-14	Show	GitHub Exploit DB Packet Storm

211528	9.1	CRITICAL Network	redhat	cloudforms_management_engine	A high severity vulnerability was found in all active versions of Red Hat CloudForms before 5.11.7.0. The out of band OS command injection vulnerability can be exploited by authenticated attacker whi…	CWE-78 OS Command	CVE-2020-14324	2024-11-21 14:03	2020-08-11	Show	GitHub Exploit DB Packet Storm

211529	9.1	CRITICAL Network	redhat	cloudforms	Red Hat CloudForms before 5.11.7.0 was vulnerable to the User Impersonation authorization flaw which allows malicious attacker to create existent and non-existent role-based access control user, with…	NVD-CWE-noinfo	CVE-2020-14325	2024-11-21 14:03	2020-08-11	Show	GitHub Exploit DB Packet Storm

211530	5.5	MEDIUM Local	x.org debian canonical	xorg-server debian_linux ubuntu_linux	A flaw was found in the way xserver memory was not properly initialized. This could leak parts of server memory to the X client. In cases where Xorg server runs with elevated privileges, this could r…	-	CVE-2020-14347	2024-11-21 14:03	2020-08-5	Show	GitHub Exploit DB Packet Storm