Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 28, 2026, noon

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
249131 4.3 警告 アップル - Apple iOS の CoreGraphics の FreeType における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2011-3256 2012-04-16 15:48 2011-10-14 Show GitHub Exploit DB Packet Storm
249132 9.3 危険 マイクロソフト - 複数の Microsoft 製品の Office Works ファイル コンバータにおけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2012-0177 2012-04-16 13:45 2012-04-10 Show GitHub Exploit DB Packet Storm
249133 9.3 危険 マイクロソフト - Microsoft Internet Explorer 6 から 8 における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2012-0172 2012-04-16 13:44 2012-04-10 Show GitHub Exploit DB Packet Storm
249134 9.3 危険 マイクロソフト - Microsoft Internet Explorer における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2012-0171 2012-04-16 13:43 2012-04-10 Show GitHub Exploit DB Packet Storm
249135 9.3 危険 マイクロソフト - Microsoft Internet Explorer における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2012-0170 2012-04-16 13:43 2012-04-10 Show GitHub Exploit DB Packet Storm
249136 9.3 危険 マイクロソフト - Microsoft Internet Explorer 9 における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2012-0169 2012-04-16 13:42 2012-04-10 Show GitHub Exploit DB Packet Storm
249137 7.6 危険 マイクロソフト - Microsoft Internet Explorer における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2012-0168 2012-04-16 13:40 2012-04-10 Show GitHub Exploit DB Packet Storm
249138 5 警告 マイクロソフト - Microsoft Forefront Unified Access Gateway における重要な情報を取得される脆弱性 CWE-16
環境設定 		CVE-2012-0147 2012-04-16 13:37 2012-04-10 Show GitHub Exploit DB Packet Storm
249139 5.8 警告 マイクロソフト - Microsoft Forefront Unified Access Gateway におけるオープンリダイレクトの脆弱性 CWE-20
不適切な入力確認 		CVE-2012-0146 2012-04-16 13:35 2012-04-10 Show GitHub Exploit DB Packet Storm
249140 3.7 注意 ヒューレット・パッカード - HP ProCurve 5400 zl スイッチシリーズにおける任意のコードを実行される脆弱性 CWE-DesignError
CVE-2012-0133 2012-04-13 16:24 2012-04-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
199981 2.5 LOW
Local 		suse
opensuse 		linux_enterprise_server
leap 		A UNIX Symbolic Link (Symlink) Following vulnerability in chkstat of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 15, SUSE Linux Enterprise Server 11 set permissions intended for spe… - CVE-2020-8013 2024-11-21 14:38 2020-03-3 Show GitHub Exploit DB Packet Storm
199982 7.2 HIGH
Network 		artica pandora_fms In Artica Pandora FMS 7.42, Web Admin users can execute arbitrary code by uploading a .php file via the Updater or Extension component. NOTE: The vendor reports that this is intended functionality CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2020-8500 2024-11-21 14:38 2020-03-3 Show GitHub Exploit DB Packet Storm
199983 9.8 CRITICAL
Network 		pdf-image_project pdf-image Lack of input validation in pdf-image npm package version <= 2.0.0 may allow an attacker to run arbitrary code if PDF file path is constructed based on untrusted user input. CWE-20
 Improper Input Validation  		CVE-2020-8132 2024-11-21 14:38 2020-02-29 Show GitHub Exploit DB Packet Storm
199984 6.1 MEDIUM
Network 		revealjs reveal.js Insufficient validation in cross-origin communication (postMessage) in reveal.js version 3.9.1 and earlier allow attackers to perform cross-site scripting attacks. CWE-79
Cross-site Scripting 		CVE-2020-8127 2024-11-21 14:38 2020-02-29 Show GitHub Exploit DB Packet Storm
199985 7.5 HIGH
Network 		yarnpkg yarn Arbitrary filesystem write vulnerability in Yarn before 1.22.0 allows attackers to write to any path on the filesystem and potentially lead to arbitrary code execution by forcing the user to install … CWE-22
Path Traversal 		CVE-2020-8131 2024-11-21 14:38 2020-02-25 Show GitHub Exploit DB Packet Storm
199986 6.4 MEDIUM
Local 		ruby-lang
debian
canonical
fedoraproject
opensuse 		rake
debian_linux
ubuntu_linux
fedora
leap 		There is an OS command injection vulnerability in Ruby Rake < 12.3.3 in Rake::FileList when supplying a filename that begins with the pipe character `|`. CWE-78
OS Command  		CVE-2020-8130 2024-11-21 14:38 2020-02-25 Show GitHub Exploit DB Packet Storm
199987 6.5 MEDIUM
Network 		puppet puppet_agent
puppet 		Previously, Puppet operated on a model that a node with a valid certificate was entitled to all information in the system and that a compromised certificate allowed access to everything in the infras… CWE-295
Improper Certificate Validation  		CVE-2020-7942 2024-11-21 14:38 2020-02-20 Show GitHub Exploit DB Packet Storm
199988 9.8 CRITICAL
Network 		jyaml_project jyaml JYaml through 1.3 allows remote code execution during deserialization of a malicious payload through the load() function. NOTE: this is a discontinued product. CWE-502
 Deserialization of Untrusted Data 		CVE-2020-8441 2024-11-21 14:38 2020-02-20 Show GitHub Exploit DB Packet Storm
199989 9.8 CRITICAL
Network 		broadcom unified_infrastructure_management CA Unified Infrastructure Management (Nimsoft/UIM) 20.1, 20.3.x, and 9.20 and below contains a buffer overflow vulnerability in the robot (controller) component. A remote attacker can execute arbitra… CWE-120
Classic Buffer Overflow 		CVE-2020-8012 2024-11-21 14:38 2020-02-18 Show GitHub Exploit DB Packet Storm
199990 7.5 HIGH
Network 		broadcom unified_infrastructure_management CA Unified Infrastructure Management (Nimsoft/UIM) 20.1, 20.3.x, and 9.20 and below contains a null pointer dereference vulnerability in the robot (controller) component. A remote attacker can crash … CWE-476
 NULL Pointer Dereference 		CVE-2020-8011 2024-11-21 14:38 2020-02-18 Show GitHub Exploit DB Packet Storm