Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 24, 2026, 10 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
249031 9.3 危険 マイクロソフト - 複数の Windows 製品の DAO ライブラリにおける任意のコードを実行される脆弱性 CWE-Other
その他
CVE-2010-4182 2012-04-3 10:57 2010-11-4 Show GitHub Exploit DB Packet Storm
249032 7.2 危険 マイクロソフト - 複数の Windows 製品の CreateDIBPalette 関数におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2010-2739 2012-04-3 10:57 2010-09-7 Show GitHub Exploit DB Packet Storm
249033 7.8 危険 シスコシステムズ - Cisco IOS の Zone-Based Firewall の SIP 検査機能におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2012-1315 2012-04-2 15:50 2012-03-28 Show GitHub Exploit DB Packet Storm
249034 7.8 危険 シスコシステムズ - Cisco IOS の WAAS Express 機能におけるサービス運用妨害 (メモリ消費またはデバイスリロード) の脆弱性 CWE-399
リソース管理の問題
CVE-2012-1314 2012-04-2 15:48 2012-03-28 Show GitHub Exploit DB Packet Storm
249035 7.1 危険 シスコシステムズ - Cisco IOS の MACE 機能におけるサービス運用妨害 (デバイスリロード) の脆弱性 CWE-399
リソース管理の問題
CVE-2012-1312 2012-04-2 15:46 2012-03-28 Show GitHub Exploit DB Packet Storm
249036 7.8 危険 シスコシステムズ - Cisco IOS の RSVP 機能におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2012-1311 2012-04-2 15:45 2012-03-28 Show GitHub Exploit DB Packet Storm
249037 7.8 危険 シスコシステムズ - Cisco IOS の Zone-Based Firewall におけるサービス運用妨害 (メモリ消費またはデバイスリロード) の脆弱性 CWE-399
リソース管理の問題
CVE-2012-1310 2012-04-2 15:42 2012-03-28 Show GitHub Exploit DB Packet Storm
249038 7.8 危険 シスコシステムズ - Cisco IOS の Zone-Based Firewall の H.323 検査機能におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2012-0388 2012-04-2 15:41 2012-03-28 Show GitHub Exploit DB Packet Storm
249039 7.8 危険 シスコシステムズ - Cisco IOS の Zone-Based Firewall の HTTP Inspection Engine 機能におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2012-0387 2012-04-2 15:39 2012-03-28 Show GitHub Exploit DB Packet Storm
249040 7.8 危険 シスコシステムズ - Cisco IOS および IOS XE の SSHv2 実装におけるサービス運用妨害 (デバイスリロード) の脆弱性 CWE-310
暗号の問題
CVE-2012-0386 2012-04-2 15:37 2012-03-28 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 24, 2026, 4:05 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
211021 4.4 MEDIUM
Local
iobit malware_fighter IOBit Malware Fighter Pro 8.0.2.547 allows local users to gain privileges for file deletion by manipulating malicious flagged file locations with an NTFS junction and an Object Manager symbolic link. CWE-59
Link Following
CVE-2020-15401 2024-11-21 14:05 2020-06-30 Show GitHub Exploit DB Packet Storm
211022 4.3 MEDIUM
Network
cakefoundation cakephp CakePHP before 4.0.6 mishandles CSRF token generation. This might be remotely exploitable in conjunction with XSS. CWE-352
CWE-79
 Origin Validation Error
Cross-site Scripting
CVE-2020-15400 2024-11-21 14:05 2020-06-30 Show GitHub Exploit DB Packet Storm
211023 7.8 HIGH
Local
hylafax\+_project
ifax
hylafax\+
hylafax_enterprise
HylaFAX+ through 7.0.2 and HylaFAX Enterprise have scripts that execute binaries from directories writable by unprivileged users (e.g., locations under /var/spool/hylafax that are writable by the uuc… CWE-732
 Incorrect Permission Assignment for Critical Resource
CVE-2020-15397 2024-11-21 14:05 2020-06-30 Show GitHub Exploit DB Packet Storm
211024 7.8 HIGH
Local
hylafax\+_project
ifax
fedoraproject
opensuse
hylafax\+
hylafax_enterprise
fedora
leap
backports_sle
In HylaFAX+ through 7.0.2 and HylaFAX Enterprise, the faxsetup utility calls chown on files in user-owned directories. By winning a race, a local attacker could use this to escalate his privileges to… CWE-362
Race Condition
CVE-2020-15396 2024-11-21 14:05 2020-06-30 Show GitHub Exploit DB Packet Storm
211025 7.8 HIGH
Local
mediaarea
fedoraproject
mediainfo
fedora
In MediaInfoLib in MediaArea MediaInfo 20.03, there is a stack-based buffer over-read in Streams_Fill_PerStream in Multiple/File_MpegPs.cpp (aka an off-by-one during MpegPs parsing). CWE-125
Out-of-bounds Read
CVE-2020-15395 2024-11-21 14:05 2020-06-30 Show GitHub Exploit DB Packet Storm
211026 5.5 MEDIUM
Local
linux
debian
opensuse
canonical
linux_kernel
debian_linux
leap
ubuntu_linux
In the Linux kernel 4.4 through 5.7.6, usbtest_disconnect in drivers/usb/misc/usbtest.c has a memory leak, aka CID-28ebeb8db770. CWE-401
 Missing Release of Memory after Effective Lifetime
CVE-2020-15393 2024-11-21 14:05 2020-06-30 Show GitHub Exploit DB Packet Storm
211027 6.5 MEDIUM
Network
uclouvain
debian
oracle
openjpeg
debian_linux
outside_in_technology
jp2/opj_decompress.c in OpenJPEG through 2.3.1 has a use-after-free that can be triggered if there is a mix of valid and invalid files in a directory operated on by the decompressor. Triggering a dou… CWE-416
 Use After Free
CVE-2020-15389 2024-11-21 14:05 2020-06-30 Show GitHub Exploit DB Packet Storm
211028 5.5 MEDIUM
Local
asrock rgb_driver_firmware AsrDrv103.sys in the ASRock RGB Driver does not properly restrict access from user space, as demonstrated by triggering a triple fault via a request to zero CR3. NVD-CWE-noinfo
CVE-2020-15368 2024-11-21 14:05 2020-06-30 Show GitHub Exploit DB Packet Storm
211029 9.8 CRITICAL
Network
thingssdk wifiscanner wifiscanner.js in thingsSDK WiFi Scanner 1.0.1 allows Code Injection because it can be used with options to overwrite the default executable/binary path and its arguments. An attacker can abuse this … CWE-78
OS Command 
CVE-2020-15362 2024-11-21 14:05 2020-06-30 Show GitHub Exploit DB Packet Storm
211030 9.8 CRITICAL
Network
zyxel cloud_cnm_secumanager Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a world-readable axess/opt/axXMPPHandler/config/xmpp_config.py file that stores hardcoded credentials. CWE-798
 Use of Hard-coded Credentials
CVE-2020-15324 2024-11-21 14:05 2020-06-30 Show GitHub Exploit DB Packet Storm