Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 31, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
249161 9.3 危険 XnSoft - XnViewer における整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2012-0684 2012-05-10 18:21 2012-05-9 Show GitHub Exploit DB Packet Storm
249162 9.3 危険 FFmpeg - FFmpeg の asfrtp_parse_packet 関数における整数アンダーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2011-4031 2012-05-10 18:19 2012-05-9 Show GitHub Exploit DB Packet Storm
249163 9.3 危険 マイクロソフト - Microsoft .NET Framework における任意のコードを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2012-0161 2012-05-10 18:16 2012-05-8 Show GitHub Exploit DB Packet Storm
249164 9.3 危険 マイクロソフト - Microsoft .NET Framework における任意のコードを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2012-0160 2012-05-10 18:15 2012-05-8 Show GitHub Exploit DB Packet Storm
249165 9.3 危険 マイクロソフト - Microsoft Windows のカーネルモードドライバ内の win32k.sys における権限昇格の脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-1848 2012-05-10 18:13 2012-05-8 Show GitHub Exploit DB Packet Storm
249166 10 危険 マイクロソフト - Microsoft Windows のカーネルモードドライバ内の win32k.sys における権限昇格の脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-0181 2012-05-10 18:12 2012-05-8 Show GitHub Exploit DB Packet Storm
249167 7.2 危険 マイクロソフト - Microsoft Windows のカーネルモードドライバ内の win32k.sys における権限昇格の脆弱性 CWE-20
不適切な入力確認 		CVE-2012-0180 2012-05-10 18:11 2012-05-8 Show GitHub Exploit DB Packet Storm
249168 9.3 危険 マイクロソフト - Windows 上で稼働する Microsoft Silverlight におけるメモリ二重解放の脆弱性 CWE-399
リソース管理の問題 		CVE-2012-0176 2012-05-10 18:09 2012-05-8 Show GitHub Exploit DB Packet Storm
249169 9.3 危険 マイクロソフト - Microsoft Office 2003 および 2007 におけるヒープベースのバッファオーバーフローの脆弱性 CWE-20
不適切な入力確認 		CVE-2012-0167 2012-05-10 18:08 2012-05-8 Show GitHub Exploit DB Packet Storm
249170 9.3 危険 マイクロソフト - 複数の Microsoft 製品の GDI+ における任意のコードを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2012-0165 2012-05-10 18:04 2012-05-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 1, 2026, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
210181 7.8 HIGH
Local 		freeimage_project freeimage Buffer Overflow vulnerability in function LoadRGB in PluginDDS.cpp in FreeImage 3.18.0 allows remote attackers to run arbitrary code and cause other impacts via crafted image file. CWE-120
Classic Buffer Overflow 		CVE-2020-21428 2024-11-21 14:12 2023-08-23 Show GitHub Exploit DB Packet Storm
210182 7.8 HIGH
Local 		freeimage_project freeimage Buffer Overflow vulnerability in function C_IStream::read in PluginEXR.cpp in FreeImage 3.18.0 allows remote attackers to run arbitrary code and cause other impacts via crafted image file. CWE-120
Classic Buffer Overflow 		CVE-2020-21426 2024-11-21 14:12 2023-08-23 Show GitHub Exploit DB Packet Storm
210183 5.5 MEDIUM
Local 		elfutils_project elfutils The libcpu component which is used by libasm of elfutils version 0.177 (git 47780c9e), suffers from denial-of-service vulnerability caused by application crashes due to out-of-bounds write (CWE-787),… CWE-787
 Out-of-bounds Write 		CVE-2020-21047 2024-11-21 14:12 2023-08-23 Show GitHub Exploit DB Packet Storm
210184 6.1 MEDIUM
Network 		gilacms gila_cms Cross Site Scripting (XSS) vulnerability in adm_user parameter in Gila CMS version 1.11.3, allows remote attackers to execute arbitrary code during the Gila CMS installation. CWE-79
Cross-site Scripting 		CVE-2020-20523 2024-11-21 14:12 2023-08-11 Show GitHub Exploit DB Packet Storm
210185 6.1 MEDIUM
Network 		qibosoft qibosoft Cross Site Scripting vulnerability in Qibosoft qibosoft v.7 and before allows a remote attacker to execute arbitrary code via the eindtijd and starttijd parameters of do/search.php. CWE-79
Cross-site Scripting 		CVE-2020-20808 2024-11-21 14:12 2023-08-3 Show GitHub Exploit DB Packet Storm
210186 6.5 MEDIUM
Network 		duxcms_project duxcms Cross Site Request Forgery (CSRF) vulnerability in admin.php in DuxCMS 2.1 allows remote attackers to modtify application data via article/admin/content/add. CWE-352
 Origin Validation Error 		CVE-2020-21881 2024-11-21 14:12 2023-07-31 Show GitHub Exploit DB Packet Storm
210187 9.8 CRITICAL
Network 		yunyecms yunyecms SQL injection vulnerability in yunyecms 2.0.2 allows remote attackers to run arbitrary SQL commands via XFF. CWE-89
SQL Injection 		CVE-2020-21662 2024-11-21 14:12 2023-07-31 Show GitHub Exploit DB Packet Storm
210188 8.1 HIGH
Network 		duxcms_project duxcms Directory traversal vulnerability in DuxCMS 2.1 allows attackers to delete arbitrary files via /admin/AdminBackup/del. CWE-22
Path Traversal 		CVE-2020-21862 2024-11-21 14:12 2023-07-6 Show GitHub Exploit DB Packet Storm
210189 8.8 HIGH
Network 		duxcms_project duxcms File upload vulnerability in DuxCMS 2.1 allows attackers to execute arbitrary php code via duxcms/AdminUpload/upload. CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2020-21861 2024-11-21 14:12 2023-07-6 Show GitHub Exploit DB Packet Storm
210190 9.8 CRITICAL
Network 		feehi feehicms File Upload vulnerability in Feehicms v.2.0.8 allows a remote attacker to execute arbitrary code via the /admin/index.php?r=admin-user%2Fupdate-self component. CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2020-21489 2024-11-21 14:12 2023-06-21 Show GitHub Exploit DB Packet Storm