Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
187661	4.3	警告	オラクル	-	Oracle Supply Chain Products Suite の Oracle Agile PLM Framework における Web Client の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2012-3161	2012-10-19 16:20	2012-10-16	Show	GitHub Exploit DB Packet Storm

187662	4	警告	オラクル	-	Oracle Supply Chain Products Suite の Oracle Agile PLM Framework における ATTACH の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2012-3154	2012-10-19 16:16	2012-10-16	Show	GitHub Exploit DB Packet Storm

187663	5.5	警告	オラクル	-	Oracle Supply Chain Products Suite の Oracle Agile PLM For Process における Supply Chain Relationship Management の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2012-3140	2012-10-19 16:12	2012-10-16	Show	GitHub Exploit DB Packet Storm

187664	4.3	警告	オラクル	-	Oracle Siebel CRM の Siebel UI Framework における Portal Framework の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2012-3230	2012-10-19 15:59	2012-10-16	Show	GitHub Exploit DB Packet Storm

187665	4	警告	オラクル	-	Oracle Siebel CRM の Siebel UI Framework における Siebel Documentation の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2012-3229	2012-10-19 15:56	2012-10-16	Show	GitHub Exploit DB Packet Storm

187666	2.1	注意	オラクル	-	Oracle Virtualization の Oracle VM Virtual Box における VirtualBox Core の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2012-3221	2012-10-19 15:50	2012-10-16	Show	GitHub Exploit DB Packet Storm

187667	4.3	警告	オラクル	-	Oracle Virtualization の Secure Global Desktop における Core の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2012-1685	2012-10-19 15:49	2012-10-16	Show	GitHub Exploit DB Packet Storm

187668	4.3	警告	オラクル	-	Oracle E-Business Suite の Oracle iStore における Web interface の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2012-5058	2012-10-19 15:48	2012-10-16	Show	GitHub Exploit DB Packet Storm

187669	5	警告	オラクル	-	Oracle E-Business Suite の Oracle iRecruitment における Signon の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2012-3222	2012-10-19 15:47	2012-10-16	Show	GitHub Exploit DB Packet Storm

187670	6.4	警告	オラクル	-	Oracle E-Business Suite の Oracle Human Resources における PDF 生成の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2012-3196	2012-10-19 15:46	2012-10-16	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:Feb. 3, 2025, 4:07 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
275731	-	almondsoft	almond_classifieds	Multiple cross-site scripting (XSS) vulnerabilities in AlmondSoft Almond Classifieds Wap and Pro, and possibly Almond Affiliate Network Classifieds, allow remote attackers to inject arbitrary web scr…	CWE-79 Cross-site Scripting	CVE-2009-3225	2009-09-17 13:00	2009-09-17	Show	GitHub Exploit DB Packet Storm

275732	-	almondsoft	affiliate_network_classifieds almond_classifieds	SQL injection vulnerability in index.php in AlmondSoft Almond Classifieds Ads Enterprise and Almond Affiliate Network Classifieds allows remote attackers to execute arbitrary SQL commands via the rep…	CWE-89 SQL Injection	CVE-2009-3226	2009-09-17 13:00	2009-09-17	Show	GitHub Exploit DB Packet Storm

275733	-	almondsoft	affiliate_network_classifieds almond_classifieds	Cross-site scripting (XSS) vulnerability in index.php in AlmondSoft Almond Classifieds Ads Enterprise and Almond Affiliate Network Classifieds allows remote attackers to inject arbitrary web script o…	CWE-79 Cross-site Scripting	CVE-2009-3227	2009-09-17 13:00	2009-09-17	Show	GitHub Exploit DB Packet Storm

275734	-	lantronix	mss485-t	Lantronix MSS485-T allows remote attackers to cause a denial of service (unstable performance and service loss) via certain vulnerability scans, as demonstrated using (1) Nessus and (2) nmap.	CWE-399 Resource Management Errors	CVE-2008-7201	2009-09-17 13:00	2009-09-10	Show	GitHub Exploit DB Packet Storm

275735	-	mozilla	firefox	Integer overflow in Apple CoreGraphics, as used in Safari before 4.0.3, Mozilla Firefox before 3.0.12, and Mac OS X 10.4.11 and 10.5.8, allows remote attackers to cause a denial of service (applicati…	CWE-189 Numeric Errors	CVE-2009-2468	2009-09-16 14:32	2009-07-23	Show	GitHub Exploit DB Packet Storm

275736	-	php	php	The php_zip_make_relative_path function in php_zip.c in PHP 5.2.x before 5.2.9 allows context-dependent attackers to cause a denial of service (crash) via a ZIP file that contains filenames with rela…	CWE-20 Improper Input Validation	CVE-2009-1272	2009-09-16 14:30	2009-04-9	Show	GitHub Exploit DB Packet Storm

275737	-	clamav	clamav	The CLI_ISCONTAINED macro in libclamav/others.h in ClamAV before 0.95.1 allows remote attackers to cause a denial of service (application crash) via a malformed file with UPack encoding.	CWE-20 Improper Input Validation	CVE-2009-1371	2009-09-16 14:30	2009-04-24	Show	GitHub Exploit DB Packet Storm

275738	-	clamav	clamav	Stack-based buffer overflow in the cli_url_canon function in libclamav/phishcheck.c in ClamAV before 0.95.1 allows remote attackers to cause a denial of service (application crash) and possibly execu…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2009-1372	2009-09-16 14:30	2009-04-24	Show	GitHub Exploit DB Packet Storm

275739	-	stanford	webauth	weblogin/login.fcgi (aka the WebLogin login script) in Stanford University WebAuth 3.5.5, 3.6.0, and 3.6.1 places passwords in URLs in certain circumstances involving conversion of a POST request to …	CWE-255 Credentials Management	CVE-2009-2945	2009-09-16 13:00	2009-09-16	Show	GitHub Exploit DB Packet Storm

275740	-	mozilla	bugzilla	SQL injection vulnerability in the Bug.search WebService function in Bugzilla 3.3.2 through 3.4.1, and 3.5, allows remote attackers to execute arbitrary SQL commands via unspecified parameters.	CWE-89 SQL Injection	CVE-2009-3125	2009-09-16 13:00	2009-09-16	Show	GitHub Exploit DB Packet Storm