Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 30, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
251601	4.3	警告	マカフィー Doctor Web Beijing Rising International Software フォーティネット Panda Security アラジン	-	複数の製品の ELF パーサにおけるマルウェア検知を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-1454	2012-03-23 16:24	2012-03-21	Show	GitHub Exploit DB Packet Storm

251602	4.3	警告	トレンドマイクロ Antiy Labs マカフィー Ikarus Doctor Web ソフォス CA Technologies Beijing Rising International Software フォーティネットマイクロソフト Panda Security カスペルスキー Emsisoft	-	複数の製品の CAB ファイルパーサにおけるマルウェア検知を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-1453	2012-03-23 16:17	2012-03-21	Show	GitHub Exploit DB Packet Storm

251603	4.3	警告	アンラボ Panda Security Ikarus Emsisoft アラジン	-	複数の製品の Microsoft EXE ファイルパーサにおけるマルウェア検知を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-1436	2012-03-23 14:39	2012-03-21	Show	GitHub Exploit DB Packet Storm

251604	4.3	警告	アンラボ Panda Security Ikarus Emsisoft アラジン	-	複数の製品の Microsoft EXE ファイルパーサにおけるマルウェア検知を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-1435	2012-03-23 14:37	2012-03-21	Show	GitHub Exploit DB Packet Storm

251605	4.3	警告	アンラボ Panda Security Ikarus Emsisoft	-	複数の製品の Microsoft EXE ファイルパーサにおけるマルウェア検知を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-1434	2012-03-23 14:34	2012-03-21	Show	GitHub Exploit DB Packet Storm

251606	4.3	警告	アンラボ Panda Security Ikarus Emsisoft アラジン	-	複数の製品の Microsoft EXE ファイルパーサにおけるマルウェア検知を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-1433	2012-03-23 14:26	2012-03-21	Show	GitHub Exploit DB Packet Storm

251607	4.3	警告	Ikarus Emsisoft クイックヒール・テクノロジーズ・ジャパン株式会社	-	複数の製品の CAB ファイルパーサにおけるマルウェア検知を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-1452	2012-03-23 14:14	2012-03-21	Show	GitHub Exploit DB Packet Storm

251608	4.3	警告	Ikarus Emsisoft	-	Emsisoft Anti-Malware および Ikarus Virus Utilities T3 Command Line Scanner の CAB ファイルパーサにおけるマルウェア検知を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-1451	2012-03-23 14:08	2012-03-21	Show	GitHub Exploit DB Packet Storm

251609	4.3	警告	ソフォス Ikarus Emsisoft	-	複数の製品の CAB ファイルパーサにおけるマルウェア検知を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-1450	2012-03-23 14:04	2012-03-21	Show	GitHub Exploit DB Packet Storm

251610	4.3	警告	Panda Security Ikarus Emsisoft アラジン	-	複数の製品の Microsoft EXE ファイルパーサにおけるマルウェア検知を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-1432	2012-03-23 13:59	2012-03-21	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 30, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
215441	4.3	MEDIUM Network	octopus	octopus_deploy	In Octopus Deploy before 2019.12.9 and 2020 before 2020.1.12, the TaskView permission is not scoped to any dimension. For example, a scoped user who is scoped to only one tenant can view server tasks…	NVD-CWE-noinfo	CVE-2020-12286	2024-11-21 13:59	2020-04-28	Show	GitHub Exploit DB Packet Storm

215442	9.8	CRITICAL Network	ffmpeg canonical debian	ffmpeg ubuntu_linux debian_linux	cbs_jpeg_split_fragment in libavcodec/cbs_jpeg.c in FFmpeg 4.1 and 4.2.2 has a heap-based buffer overflow during JPEG_MARKER_SOS handling because of a missing length check.	CWE-787 Out-of-bounds Write	CVE-2020-12284	2024-11-21 13:59	2020-04-28	Show	GitHub Exploit DB Packet Storm

215443	8.8	HIGH Network	opmantek	open-audit	An issue was discovered in Open-AudIT 3.3.1. There is shell metacharacter injection via attributes to an open-audit/configuration/ URI. An attacker can exploit this by adding an excluded IP address t…	CWE-78 OS Command	CVE-2020-12078	2024-11-21 13:59	2020-04-28	Show	GitHub Exploit DB Packet Storm

215444	9.8	CRITICAL Network	libgit2 debian	libgit2 debian_linux	An issue was discovered in libgit2 before 0.28.4 and 0.9x before 0.99.0. checkout.c mishandles equivalent filenames that exist because of NTFS short names. This may allow remote code execution when c…	CWE-706 Use of Incorrectly-Resolved Name or Reference	CVE-2020-12279	2024-11-21 13:59	2020-04-28	Show	GitHub Exploit DB Packet Storm

215445	9.8	CRITICAL Network	libgit2 debian	libgit2 debian_linux	An issue was discovered in libgit2 before 0.28.4 and 0.9x before 0.99.0. path.c mishandles equivalent filenames that exist because of NTFS Alternate Data Streams. This may allow remote code execution…	CWE-706 Use of Incorrectly-Resolved Name or Reference	CVE-2020-12278	2024-11-21 13:59	2020-04-28	Show	GitHub Exploit DB Packet Storm

215446	7.5	HIGH Network	wavlink	wl-wn579g3_firmware wl-wn575a3_firmware wl-wn530hg4_firmware wn531g3_firmware wn533a8_firmware wn531a6_firmware wn551k1_firmware wn535g3_firmware wn530h4_firmware wn57x93_f…	An issue was discovered where there are multiple externally accessible pages that do not require any sort of authentication, and store system information for internal usage. The devices automatically…	CWE-306 Missing Authentication for Critical Function	CVE-2020-12266	2024-11-21 13:59	2020-04-28	Show	GitHub Exploit DB Packet Storm

215447	7.8	HIGH Local	valvesoftware	source	Valve Source allows local users to gain privileges by writing to the /tmp/hl2_relaunch file, which is later executed in the context of a different user account.	CWE-78 OS Command	CVE-2020-12242	2024-11-21 13:59	2020-04-28	Show	GitHub Exploit DB Packet Storm

215448	8.8	HIGH Network	amd	atillk64	AMD ATI atillk64.sys 5.11.9.0 allows low-privileged users to interact directly with physical memory by calling one of several driver routines that map physical memory into the virtual address space o…	CWE-862 Missing Authorization	CVE-2020-12138	2024-11-21 13:59	2020-04-28	Show	GitHub Exploit DB Packet Storm

215449	9.8	CRITICAL Network	farukawa	electric_consciousmap	The Apros Evolution, ConsciusMap, and Furukawa provisioning systems through 2.8.1 allow remote code execution because of javax.faces.ViewState Java deserialization.	CWE-502 Deserialization of Untrusted Data	CVE-2020-12133	2024-11-21 13:59	2020-04-28	Show	GitHub Exploit DB Packet Storm

215450	7.5	HIGH Network	prestashop	correos_express	The Correos Express addon for PrestaShop 1.6 through 1.7 allows remote attackers to obtain sensitive information, such as a service's owner password that can be used to modify orders via SOAP. Attack…	CWE-732 Incorrect Permission Assignment for Critical Resource	CVE-2020-12120	2024-11-21 13:59	2020-04-28	Show	GitHub Exploit DB Packet Storm