Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":June 5, 2026, 6 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 249891 | 9.3 | 危険 | アップル レッドハット |
- | 複数の Apple 製品の LIBTIFF におけるバッファオーバーフローの脆弱性 |
CWE-119
バッファエラー |
CVE-2011-0192 | 2012-04-17 17:32 | 2011-03-3 | Show | GitHub Exploit DB Packet Storm |
| 249892 | 4.3 | 警告 | LibTIFF レッドハット |
- | LibTIFF の tiffdump.c 内にある ReadDirectory 関数における整数オーバーフローの脆弱性 |
CWE-189
数値処理の問題 |
CVE-2010-4665 | 2012-04-17 17:30 | 2011-04-9 | Show | GitHub Exploit DB Packet Storm |
| 249893 | 4.3 | 警告 | サイバートラスト株式会社 LibTIFF レッドハット |
- | LibTIFF の TIFFYCbCrtoRGB 関数におけるサービス運用妨害 (DoS) の脆弱性 |
CWE-20
不適切な入力確認 |
CVE-2010-2595 | 2012-04-17 17:29 | 2010-07-2 | Show | GitHub Exploit DB Packet Storm |
| 249894 | 5 | 警告 | OpenSSL Project | - | OpenSSL の GOST ENGINE におけるサービス運用妨害 (デーモンクラッシュ) の脆弱性 |
CWE-399
リソース管理の問題 |
CVE-2012-0027 | 2012-04-17 17:19 | 2012-01-4 | Show | GitHub Exploit DB Packet Storm |
| 249895 | 9.3 | 危険 | X.Org Foundation サイバートラスト株式会社 レッドハット |
- | X.Org の xrdb.c における任意のコマンドを実行される脆弱性 |
CWE-20
不適切な入力確認 |
CVE-2011-0465 | 2012-04-17 17:13 | 2011-03-1 | Show | GitHub Exploit DB Packet Storm |
| 249896 | 5 | 警告 | PNG Development Group | - | libpng の png_err 関数におけるサービス運用妨害 (DoS) の脆弱性 |
CWE-Other
その他 |
CVE-2011-2691 | 2012-04-17 17:09 | 2011-07-17 | Show | GitHub Exploit DB Packet Storm |
| 249897 | 5 | 警告 | 光洋電子工業 | - | 複数の光洋電子工業社製品の Web サーバにおけるサービス運用妨害 (リソース消費) の脆弱性 |
CWE-399
リソース管理の問題 |
CVE-2012-1809 | 2012-04-17 16:52 | 2012-04-11 | Show | GitHub Exploit DB Packet Storm |
| 249898 | 10 | 危険 | 光洋電子工業 | - | 複数の光洋電子工業社製品の Web サーバおける不特定の機能を実行される脆弱性 |
CWE-287
不適切な認証 |
CVE-2012-1808 | 2012-04-17 16:52 | 2012-04-11 | Show | GitHub Exploit DB Packet Storm |
| 249899 | 4.3 | 警告 | 光洋電子工業 | - | 複数の光洋電子工業社製品の Web サーバにおけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2012-1807 | 2012-04-17 16:51 | 2012-04-11 | Show | GitHub Exploit DB Packet Storm |
| 249900 | 7.5 | 危険 | 光洋電子工業 | - | 複数の光洋電子工業社製品の ECOM Ethernet モジュールにおけるアクセス権を取得される脆弱性 |
CWE-287
不適切な認証 |
CVE-2012-1806 | 2012-04-17 16:50 | 2012-04-11 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:June 6, 2026, 4:18 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 201601 | 7.5 |
HIGH
Network |
commscope | arris_tg1692a_firmware | ARRIS TG1692A devices allow remote attackers to discover the administrator login name and password by reading the /login page and performing base64 decoding. |
CWE-326
Inadequate Encryption Strength |
CVE-2020-9476 | 2024-11-21 14:40 | 2020-03-5 | Show | GitHub Exploit DB Packet Storm |
| 201602 | 7.8 |
HIGH
Local |
codepeople | appointment_booking_calendar | The Appointment Booking Calendar plugin before 1.3.35 for WordPress allows user input (in fields such as Description or Name) in any booking form to be any formula, which then could be exported via t… |
CWE-1236
Improper Neutralization of Formula Elements in a CSV File |
CVE-2020-9372 | 2024-11-21 14:40 | 2020-03-5 | Show | GitHub Exploit DB Packet Storm |
| 201603 | 4.8 |
MEDIUM
Network |
codepeople | appointment_booking_calendar | Stored XSS exists in the Appointment Booking Calendar plugin before 1.3.35 for WordPress. In the cpabc_appointments.php file, the Calendar Name input could allow attackers to inject arbitrary JavaScr… |
CWE-79
Cross-site Scripting |
CVE-2020-9371 | 2024-11-21 14:40 | 2020-03-5 | Show | GitHub Exploit DB Packet Storm |
| 201604 | 5.3 |
MEDIUM
Network |
creative-solutions | creative_contact_form | An issue was discovered in helpers/mailer.php in the Creative Contact Form extension 4.6.2 before 2019-12-03 for Joomla!. A directory traversal vulnerability resides in the filename field for uploade… |
CWE-22
Path Traversal |
CVE-2020-9364 | 2024-11-21 14:40 | 2020-03-5 | Show | GitHub Exploit DB Packet Storm |
| 201605 | 7.8 |
HIGH
Local |
pdfresurrect_project debian |
pdfresurrect debian_linux |
In PDFResurrect 0.12 through 0.19, get_type in pdf.c has an out-of-bounds write via a crafted PDF document. |
CWE-787
Out-of-bounds Write |
CVE-2020-9549 | 2024-11-21 14:40 | 2020-03-2 | Show | GitHub Exploit DB Packet Storm |
| 201606 | 7.5 |
HIGH
Network |
palemoon | pale_moon | Pale Moon 28.x before 28.8.4 has a segmentation fault related to module scripting, as demonstrated by a Lacoste web site. |
CWE-476
NULL Pointer Dereference |
CVE-2020-9545 | 2024-11-21 14:40 | 2020-03-2 | Show | GitHub Exploit DB Packet Storm |
| 201607 | 9.8 |
CRITICAL
Network |
fasterxml netapp debian oracle |
jackson-databind active_iq_unified_manager debian_linux retail_xstore_point_of_service primavera_unifier weblogic_server retail_merchandising_system agile_plm banking_digital_… |
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to br.com.anteros.dbcp.AnterosDBCPConfig (aka anteros-core). |
CWE-502
Deserialization of Untrusted Data |
CVE-2020-9548 | 2024-11-21 14:40 | 2020-03-2 | Show | GitHub Exploit DB Packet Storm |
| 201608 | 9.8 |
CRITICAL
Network |
fasterxml netapp debian oracle |
jackson-databind active_iq_unified_manager debian_linux retail_xstore_point_of_service primavera_unifier weblogic_server enterprise_manager_base_platform communications_instant_m… |
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to com.ibatis.sqlmap.engine.transaction.jta.JtaTransactionConfig (aka ibati… |
CWE-502
Deserialization of Untrusted Data |
CVE-2020-9547 | 2024-11-21 14:40 | 2020-03-2 | Show | GitHub Exploit DB Packet Storm |
| 201609 | 9.8 |
CRITICAL
Network |
fasterxml netapp debian oracle |
jackson-databind active_iq_unified_manager debian_linux retail_xstore_point_of_service primavera_unifier retail_service_backbone weblogic_server retail_merchandising_system ag… |
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.hadoop.shaded.com.zaxxer.hikari.HikariConfig (aka shaded hika… |
CWE-502
Deserialization of Untrusted Data |
CVE-2020-9546 | 2024-11-21 14:40 | 2020-03-2 | Show | GitHub Exploit DB Packet Storm |
| 201610 | 7.8 |
HIGH
Local |
sophos | hitmanpro.alert | Sophos HitmanPro.Alert before build 861 allows local elevation of privilege. |
NVD-CWE-noinfo
|
CVE-2020-9540 | 2024-11-21 14:40 | 2020-03-2 | Show | GitHub Exploit DB Packet Storm |