Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":June 22, 2026, 6:01 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 259231 | 6.6 | 警告 | サイバートラスト株式会社 レッドハット |
- | QEMU-KVM の subpage MMIO initialization 機能における権限を取得される脆弱性 |
CWE-264
認可・権限・アクセス制御 |
CVE-2010-2784 | 2010-09-7 15:51 | 2010-08-19 | Show | GitHub Exploit DB Packet Storm |
| 259232 | 6.6 | 警告 | サイバートラスト株式会社 レッドハット |
- | QEMU-KVM のゲスト QXL ドライバポインタにおける権限を取得される脆弱性 |
CWE-20
不適切な入力確認 |
CVE-2010-0431 | 2010-09-7 15:50 | 2010-08-19 | Show | GitHub Exploit DB Packet Storm |
| 259233 | 6.6 | 警告 | サイバートラスト株式会社 レッドハット |
- | 複数のレッドハット製品などで利用される libspice のメモリ管理操作における権限を取得される脆弱性 |
CWE-264
認可・権限・アクセス制御 |
CVE-2010-0429 | 2010-09-7 15:49 | 2010-08-19 | Show | GitHub Exploit DB Packet Storm |
| 259234 | 6.6 | 警告 | サイバートラスト株式会社 レッドハット |
- | 複数のレッドハット製品などで利用される libspice のゲスト QXL ドライバポインタにおける権限を取得される脆弱性 |
CWE-20
不適切な入力確認 |
CVE-2010-0428 | 2010-09-7 15:48 | 2010-08-19 | Show | GitHub Exploit DB Packet Storm |
| 259235 | - | - | ワイズテクノロジー | - | Wyse ThinOS LPD サービスにバッファオーバーフローの脆弱性 | - | - | 2010-09-7 15:47 | 2010-08-17 | Show | GitHub Exploit DB Packet Storm |
| 259236 | 7.8 | 危険 | 日立 | - | Hitachi Storage Command Suite 製品の組み込みデータベースにおけるサービス運用妨害 (DoS) の脆弱性 |
CWE-20
不適切な入力確認 |
- | 2010-09-7 15:45 | 2010-08-16 | Show | GitHub Exploit DB Packet Storm |
| 259237 | 7.8 | 危険 | 日立 | - | JP1/Desktop Navigation 組み込みデータベースにおけるサービス運用妨害 (DoS) の脆弱性 |
CWE-20
不適切な入力確認 |
- | 2010-09-7 15:44 | 2010-08-16 | Show | GitHub Exploit DB Packet Storm |
| 259238 | 4.3 | 警告 | Zabbix | - | Zabbix の formatQuery 関数におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2010-2790 | 2010-09-7 15:42 | 2010-06-9 | Show | GitHub Exploit DB Packet Storm |
| 259239 | 7.1 | 危険 | レッドハット X.Org Foundation サイバートラスト株式会社 オラクル |
- | X.Org の X server の fbComposite 関数における任意のコードを実行される脆弱性 |
CWE-189
数値処理の問題 |
CVE-2010-1166 | 2010-09-6 18:42 | 2010-04-28 | Show | GitHub Exploit DB Packet Storm |
| 259240 | 10 | 危険 | サイバートラスト株式会社 Wireshark レッドハット |
- | Wireshark の UDVM 解析部における任意のコードを実行される脆弱性 |
CWE-189
数値処理の問題 |
CVE-2010-2995 | 2010-09-6 17:48 | 2010-06-9 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:June 23, 2026, 4 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 219871 | 5.5 |
MEDIUM
Local |
openexr fedoraproject canonical opensuse debian apple |
openexr fedora ubuntu_linux leap debian_linux mac_os_x tvos iphone_os icloud itunes watchos ipados |
An issue was discovered in OpenEXR before 2.4.1. There is an out-of-bounds read and write in DwaCompressor::uncompress in ImfDwaCompressor.cpp when handling the UNKNOWN compression case. |
CWE-125 CWE-787 Out-of-bounds Read Out-of-bounds Write |
CVE-2020-11762 | 2024-11-21 13:58 | 2020-04-15 | Show | GitHub Exploit DB Packet Storm |
| 219872 | 5.5 |
MEDIUM
Local |
openexr fedoraproject canonical debian apple |
openexr fedora ubuntu_linux debian_linux mac_os_x tvos iphone_os icloud itunes watchos ipados |
An issue was discovered in OpenEXR before 2.4.1. There is an out-of-bounds read during Huffman uncompression, as demonstrated by FastHufDecoder::refill in ImfFastHuf.cpp. |
CWE-125
Out-of-bounds Read |
CVE-2020-11761 | 2024-11-21 13:58 | 2020-04-15 | Show | GitHub Exploit DB Packet Storm |
| 219873 | 5.5 |
MEDIUM
Local |
openexr fedoraproject canonical opensuse debian apple |
openexr fedora ubuntu_linux leap debian_linux mac_os_x tvos iphone_os icloud itunes watchos ipados |
An issue was discovered in OpenEXR before 2.4.1. There is an out-of-bounds read during RLE uncompression in rleUncompress in ImfRle.cpp. |
CWE-125
Out-of-bounds Read |
CVE-2020-11760 | 2024-11-21 13:58 | 2020-04-15 | Show | GitHub Exploit DB Packet Storm |
| 219874 | 5.5 |
MEDIUM
Local |
openexr fedoraproject canonical debian apple |
openexr fedora ubuntu_linux debian_linux tvos iphone_os icloud itunes watchos ipados mac_os_x |
An issue was discovered in OpenEXR before 2.4.1. Because of integer overflows in CompositeDeepScanLine::Data::handleDeepFrameBuffer and readSampleCountForLineBlock, an attacker can write to an out-of… |
CWE-190
Integer Overflow or Wraparound |
CVE-2020-11759 | 2024-11-21 13:58 | 2020-04-15 | Show | GitHub Exploit DB Packet Storm |
| 219875 | 5.5 |
MEDIUM
Local |
openexr fedoraproject canonical opensuse debian apple |
openexr fedora ubuntu_linux leap debian_linux mac_os_x tvos iphone_os icloud itunes watchos ipados |
An issue was discovered in OpenEXR before 2.4.1. There is an out-of-bounds read in ImfOptimizedPixelReading.h. |
CWE-125
Out-of-bounds Read |
CVE-2020-11758 | 2024-11-21 13:58 | 2020-04-15 | Show | GitHub Exploit DB Packet Storm |
| 219876 | 5.5 |
MEDIUM
Local |
cellebrite | ufed_firmware | Cellebrite UFED 5.0 through 7.29 uses four hardcoded RSA private keys to authenticate to the ADB daemon on target devices. Extracted keys can be used to place evidence onto target devices when perfor… |
CWE-798
Use of Hard-coded Credentials |
CVE-2020-11723 | 2024-11-21 13:58 | 2020-04-15 | Show | GitHub Exploit DB Packet Storm |
| 219877 | 5.5 |
MEDIUM
Local |
xen debian fedoraproject opensuse |
xen debian_linux fedora leap |
An issue was discovered in xenoprof in Xen through 4.13.x, allowing guest OS users (without active profiling) to obtain sensitive information about other guests. Unprivileged guests can request to ma… |
CWE-212
Improper Removal of Sensitive Information Before Storage or Transfer |
CVE-2020-11740 | 2024-11-21 13:58 | 2020-04-14 | Show | GitHub Exploit DB Packet Storm |
| 219878 | 7.5 |
HIGH
Network |
snapcreek | duplicator | The Snap Creek Duplicator plugin before 1.3.28 for WordPress (and Duplicator Pro before 3.8.7.1) allows Directory Traversal via ../ in the file parameter to duplicator_download or duplicator_init. |
CWE-22
Path Traversal |
CVE-2020-11738 | 2024-11-21 13:58 | 2020-04-14 | Show | GitHub Exploit DB Packet Storm |
| 219879 | 3.9 |
LOW
Local |
gnome debian canonical |
file-roller debian_linux ubuntu_linux |
fr-archive-libarchive.c in GNOME file-roller through 3.36.1 allows Directory Traversal during extraction because it lacks a check of whether a file's parent is a symlink to a directory outside of the… |
CWE-22 CWE-59 Path Traversal Link Following |
CVE-2020-11736 | 2024-11-21 13:58 | 2020-04-14 | Show | GitHub Exploit DB Packet Storm |
| 219880 | 6.1 |
MEDIUM
Network |
cybersolutions | cybermail | cgi-bin/go in CyberSolutions CyberMail 5 or later allows XSS via the ACTION parameter. |
CWE-79
Cross-site Scripting |
CVE-2020-11734 | 2024-11-21 13:58 | 2020-04-14 | Show | GitHub Exploit DB Packet Storm |