Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 28, 2026, 4:09 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
251911	5	警告	RabidHamster	-	RabidHamster R2/Extreme の telnet サーバにおけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2012-1221	2012-02-22 14:30	2012-02-21	Show	GitHub Exploit DB Packet Storm

251912	4.3	警告	Yoono	-	Firefox 用 Yoono エクステンションの Add friends モジュールにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-1215	2012-02-22 11:38	2012-02-21	Show	GitHub Exploit DB Packet Storm

251913	4.3	警告	Yoono	-	Yoono Desktop Application の Add friends モジュールにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-1214	2012-02-22 11:37	2012-02-21	Show	GitHub Exploit DB Packet Storm

251914	7.5	危険	Nova CMS	-	Nova CMS における PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2012-1200	2012-02-21 16:48	2012-02-18	Show	GitHub Exploit DB Packet Storm

251915	7.5	危険	BASE	-	Basic Analysis and Security Engine における PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2012-1199	2012-02-21 16:48	2012-02-18	Show	GitHub Exploit DB Packet Storm

251916	7.5	危険	BASE	-	Basic Analysis and Security Engine の base_ag_main.php における任意のコードを実行される脆弱性	CWE-287 不適切な認証	CVE-2012-1198	2012-02-21 16:45	2012-02-18	Show	GitHub Exploit DB Packet Storm

251917	6.8	警告	ACD Systems International	-	ACDSee の IDE_ACDStd.apl モジュールにおける整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2012-1197	2012-02-21 16:44	2012-02-18	Show	GitHub Exploit DB Packet Storm

251918	5	警告	LANDesk	-	Lenovo ThinkManagement Console におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2012-1196	2012-02-21 16:44	2012-02-18	Show	GitHub Exploit DB Packet Storm

251919	7.5	危険	LANDesk	-	Lenovo ThinkManagement Console の ServerSetup web サービスにおける任意のコードを実行される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-1195	2012-02-21 16:43	2012-02-18	Show	GitHub Exploit DB Packet Storm

251920	4.3	警告	Craig Barratt	-	BackupPC の RestoreFile.pm におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-5081	2012-02-21 16:42	2012-02-18	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
215411	2.7	LOW Network	freerdp opensuse debian	freerdp leap debian_linux	In FreeRDP less than or equal to 2.0.0, there is an out-of-bound data read from memory in clear_decompress_subcode_rlex, visualized on screen as color. This has been patched in 2.1.0.	-	CVE-2020-11040	2024-11-21 13:56	2020-05-30	Show	GitHub Exploit DB Packet Storm

215412	2.7	LOW Network	freerdp opensuse debian	freerdp leap debian_linux	In FreeRDP less than or equal to 2.0.0, an outside controlled array index is used unchecked for data used as configuration for sound backend (alsa, oss, pulse, ...). The most likely outcome is a cras…	-	CVE-2020-11041	2024-11-21 13:56	2020-05-30	Show	GitHub Exploit DB Packet Storm

215413	6.8	MEDIUM Network	freerdp opensuse debian	freerdp leap debian_linux	In FreeRDP less than or equal to 2.0.0, when using a manipulated server with USB redirection enabled (nearly) arbitrary memory can be read and written due to integer overflows in length checks. This …	-	CVE-2020-11039	2024-11-21 13:56	2020-05-30	Show	GitHub Exploit DB Packet Storm

215414	5.4	MEDIUM Network	freerdp opensuse debian	freerdp leap debian_linux	In FreeRDP less than or equal to 2.0.0, an Integer Overflow to Buffer Overflow exists. When using /video redirection, a manipulated server can instruct the client to allocate a buffer with a smaller …	-	CVE-2020-11038	2024-11-21 13:56	2020-05-30	Show	GitHub Exploit DB Packet Storm

215415	6.5	MEDIUM Network	freerdp opensuse debian	freerdp leap debian_linux	In FreeRDP less than or equal to 2.0.0, when running with logger set to "WLOG_TRACE", a possible crash of application could occur due to a read of an invalid array index. Data could be printed as str…	-	CVE-2020-11019	2024-11-21 13:56	2020-05-30	Show	GitHub Exploit DB Packet Storm

215416	6.5	MEDIUM Network	freerdp opensuse debian	freerdp leap debian_linux	In FreeRDP less than or equal to 2.0.0, a possible resource exhaustion vulnerability can be performed. Malicious clients could trigger out of bound reads causing memory allocation with random size. T…	-	CVE-2020-11018	2024-11-21 13:56	2020-05-30	Show	GitHub Exploit DB Packet Storm

215417	6.5	MEDIUM Network	freerdp opensuse debian	freerdp leap debian_linux	In FreeRDP less than or equal to 2.0.0, by providing manipulated input a malicious client can create a double free condition and crash the server. This is fixed in version 2.1.0.	-	CVE-2020-11017	2024-11-21 13:56	2020-05-30	Show	GitHub Exploit DB Packet Storm

215418	6.1	MEDIUM Network	kaminari_project debian	kaminari debian_linux	In Kaminari before 1.2.1, there is a vulnerability that would allow an attacker to inject arbitrary code into pages with pagination links. This has been fixed in 1.2.1.	-	CVE-2020-11082	2024-11-21 13:56	2020-05-29	Show	GitHub Exploit DB Packet Storm

215419	9.8	CRITICAL Network	node-dns-sync_project	node-dns-sync	node-dns-sync (npm module dns-sync) through 0.2.0 allows execution of arbitrary commands . This issue may lead to remote code execution if a client of the library calls the vulnerable method with unt…	CWE-77 Command Injection	CVE-2020-11079	2024-11-21 13:56	2020-05-29	Show	GitHub Exploit DB Packet Storm

215420	9.9	CRITICAL Network	anchore	engine	In Anchore Engine version 0.7.0, a specially crafted container image manifest, fetched from a registry, can be used to trigger a shell escape flaw in the anchore engine analyzer service during an ima…	NVD-CWE-Other	CVE-2020-11075	2024-11-21 13:56	2020-05-28	Show	GitHub Exploit DB Packet Storm