Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
187221 5 警告 The Tor Project - Tor の common/util.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2012-4922 2012-11-15 17:13 2012-09-11 Show GitHub Exploit DB Packet Storm
187222 5 警告 The Tor Project - Tor の or/policies.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2012-4419 2012-11-15 17:12 2012-08-25 Show GitHub Exploit DB Packet Storm
187223 7.9 危険 VMware - VMware Workstation および VMware Player におけるホスト OS の権限を取得される脆弱性 CWE-Other
その他 		CVE-2012-5459 2012-11-15 16:44 2012-11-8 Show GitHub Exploit DB Packet Storm
187224 8.3 危険 VMware - VMware Workstation および VMware Player におけるホスト OS の権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-5458 2012-11-15 16:43 2012-11-8 Show GitHub Exploit DB Packet Storm
187225 9.3 危険 VMware - 複数の VMware 製品で使用される VMware OVF Tool におけるフォーマットストリングの脆弱性 CWE-134
書式文字列の問題 		CVE-2012-3569 2012-11-15 16:43 2012-11-8 Show GitHub Exploit DB Packet Storm
187226 6.8 警告 IBM - IBM WebSphere Application Server におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2012-4853 2012-11-15 16:42 2012-10-29 Show GitHub Exploit DB Packet Storm
187227 4.3 警告 IBM - IBM WebSphere Application Server の Liberty Profile におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-4851 2012-11-15 16:41 2012-10-29 Show GitHub Exploit DB Packet Storm
187228 7.5 危険 IBM - IBM WebSphere Application Server の Liberty Profile における権限を取得される脆弱性 CWE-20
不適切な入力確認 		CVE-2012-4850 2012-11-15 16:39 2012-10-29 Show GitHub Exploit DB Packet Storm
187229 4 警告 IBM - IBM Cognos Business Intelligence におけるサービス運用妨害 (CPU 資源の消費) の脆弱性 CWE-189
数値処理の問題 		CVE-2012-4847 2012-11-15 16:38 2012-11-14 Show GitHub Exploit DB Packet Storm
187230 5 警告 IBM - IBM WebSphere Application Server および WebSphere Virtual Enterprise におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2012-3330 2012-11-15 16:37 2012-10-29 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 13, 2025, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
279031 - liferay liferay_enterprise_portal Cross-site scripting (XSS) vulnerability in the Admin portlet in Liferay Portal 4.3.6 allows remote authenticated users to inject arbitrary web script or HTML via the Shutdown message. CWE-79
Cross-site Scripting 		CVE-2008-0181 2008-09-6 06:34 2008-02-5 Show GitHub Exploit DB Packet Storm
279032 - liferay liferay_enterprise_portal Cross-site request forgery (CSRF) vulnerability in the Admin portlet in Liferay Portal before 4.4.0 allows remote authenticated users to perform unspecified actions as unspecified other authenticated… CWE-352
 Origin Validation Error 		CVE-2008-0182 2008-09-6 06:34 2008-02-5 Show GitHub Exploit DB Packet Storm
279033 - ngircd ngircd ngIRCd 0.10.x before 0.10.4 and 0.11.0 before 0.11.0-pre2 allows remote attackers to cause a denial of service (crash) via crafted IRC PART message, which triggers an invalid dereference. NVD-CWE-Other
CVE-2008-0285 2008-09-6 06:34 2008-01-16 Show GitHub Exploit DB Packet Storm
279034 - pmachine pmachine_pro Cross-site scripting (XSS) vulnerability in pm/language/spanish/preferences.php in PMachine Pro 2.4.1 allows remote attackers to inject arbitrary web script or HTML via the L_PREF_NAME[855] parameter. CWE-79
Cross-site Scripting 		CVE-2008-0334 2008-09-6 06:34 2008-01-18 Show GitHub Exploit DB Packet Storm
279035 - mahara mahara Unspecified vulnerability in Mahara before 0.9.1 has unknown impact and remote attack vectors, probably related to cross-site scripting (XSS) in uploaded files. CWE-79
Cross-site Scripting 		CVE-2008-0381 2008-09-6 06:34 2008-01-23 Show GitHub Exploit DB Packet Storm
279036 - bcoos event_calendar Cross-site scripting (XSS) vulnerability in modules/ecal/display.php in the Event Calendar in bcoos 1.0.10 allows remote attackers to inject arbitrary web script or HTML via the month parameter. NOT… CWE-79
Cross-site Scripting 		CVE-2007-6365 2008-09-6 06:33 2007-12-15 Show GitHub Exploit DB Packet Storm
279037 - e-xoops e-xoops Multiple SQL injection vulnerabilities in e-Xoops (exoops) 1.08, and 1.05 Rev 1 through 3, allow remote attackers to execute arbitrary SQL commands via the (1) lid parameter to (a) mylinks/ratelink.p… CWE-89
SQL Injection 		CVE-2007-6380 2008-09-6 06:33 2007-12-15 Show GitHub Exploit DB Packet Storm
279038 - serendipity serendipity Cross-site request forgery (CSRF) vulnerability in the mycalendar plugin before 0.13 for Serendipity allows remote attackers to perform actions as blog administrators, which can be leveraged to condu… CWE-352
 Origin Validation Error 		CVE-2007-6390 2008-09-6 06:33 2007-12-18 Show GitHub Exploit DB Packet Storm
279039 - debian debian_linux scponly 4.6 and earlier allows remote authenticated users to bypass intended restrictions and execute arbitrary code by invoking scp, as implemented by OpenSSH, with the -F and -o options. CWE-94
Code Injection 		CVE-2007-6415 2008-09-6 06:33 2008-01-25 Show GitHub Exploit DB Packet Storm
279040 - anon_proxy_server anon_proxy_server Multiple cross-site scripting (XSS) vulnerabilities in Anon Proxy Server before 0.101 allow remote attackers to inject arbitrary web script or HTML via the URI, which is later displayed by (1) log.ph… CWE-79
Cross-site Scripting 		CVE-2007-6460 2008-09-6 06:33 2007-12-20 Show GitHub Exploit DB Packet Storm