Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
187911 2.1 注意 Cartpauj.com - WordPress 用 Shortcode Redirect プラグインにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-5325 2012-10-11 15:01 2012-10-8 Show GitHub Exploit DB Packet Storm
187912 9.3 危険 Tracker Software Products - Tracker Software PDF-XChange の pdfxctrl.dll におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2012-5324 2012-10-11 15:00 2012-10-8 Show GitHub Exploit DB Packet Storm
187913 4.3 警告 k5n.us - Craig Knudsen WebCalendar におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-0846 2012-10-11 14:58 2012-01-11 Show GitHub Exploit DB Packet Storm
187914 6.8 警告 XAVi Technologies - Xavi X7968 におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2012-5323 2012-10-11 14:57 2012-10-8 Show GitHub Exploit DB Packet Storm
187915 4.3 警告 XAVi Technologies - Xavi X7968 におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-5322 2012-10-11 14:57 2012-10-8 Show GitHub Exploit DB Packet Storm
187916 5.8 警告 Tiki Software Community Association - TikiWiki CMS/Groupware における任意の Web サイトのページをロードされる脆弱性 CWE-20
不適切な入力確認
CVE-2012-5321 2012-10-11 14:55 2012-10-8 Show GitHub Exploit DB Packet Storm
187917 6.8 警告 Sagemcom - Sagem F@ST 2604 の password.cgi におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2012-5320 2012-10-11 14:53 2012-10-8 Show GitHub Exploit DB Packet Storm
187918 6.8 警告 D-Link Systems, Inc. - 複数の D-Link 製品の setup/security.cgi におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2012-5319 2012-10-11 14:48 2012-10-8 Show GitHub Exploit DB Packet Storm
187919 6.8 警告 SocialCMS - SocialCMS におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2012-1416 2012-10-11 14:42 2012-10-8 Show GitHub Exploit DB Packet Storm
187920 6.8 警告 D-Link Systems, Inc. - D-Link DSL-2640B ファームウェアの redpass.cgi におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2012-1308 2012-10-11 14:38 2012-10-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 12, 2025, 4:14 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
274551 - xfce xfce Stack-based buffer overflow in the Panel (xfce4-panel) component in Xfce before 4.4.2 might allow remote attackers to execute arbitrary code via Launcher tooltips. NOTE: a second buffer overflow (ov… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2007-6531 2011-03-8 12:03 2008-01-10 Show GitHub Exploit DB Packet Storm
274552 - xfce xfce Double free vulnerability in the Widget Library (libxfcegui4) in Xfce before 4.4.2 might allow remote attackers to execute arbitrary code via unknown vectors related to the "cliend id, program name a… NVD-CWE-noinfo
CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2007-6532 2011-03-8 12:03 2008-01-10 Show GitHub Exploit DB Packet Storm
274553 - sun java_system_web_proxy_server
java_system_web_server
Cross-site scripting (XSS) vulnerability in the View Error Log functionality in Sun Java System Web Proxy Server 4.x before 4.0.6 allows remote attackers to inject arbitrary web script or HTML via un… CWE-79
Cross-site Scripting
CVE-2007-6569 2011-03-8 12:03 2007-12-29 Show GitHub Exploit DB Packet Storm
274554 - ibm lotus_notes IBM Lotus Notes 8 for Linux before 8.0.1 uses (1) unspecified weak permissions for the installation kit obtained through a Notes 8 download and (2) 0777 permissions for the installdata file that is c… CWE-264
Permissions, Privileges, and Access Controls
CVE-2007-6594 2011-03-8 12:03 2007-12-29 Show GitHub Exploit DB Packet Storm
274555 - mongrel mongrel Directory traversal vulnerability in DirHandler (lib/mongrel/handlers.rb) in Mongrel 1.0.4 and 1.1.x before 1.1.3 allows remote attackers to read arbitrary files via an HTTP request containing double… CWE-22
Path Traversal
CVE-2007-6612 2011-03-8 12:03 2008-01-4 Show GitHub Exploit DB Packet Storm
274556 - ibm aix Trusted Execution in IBM AIX 6.1 uses an incorrect pathname argument in a call to the trustchk_block_write function, which might allow local users to modify trusted files, related to an error in the … NVD-CWE-Other
CVE-2007-6680 2011-03-8 12:03 2008-01-11 Show GitHub Exploit DB Packet Storm
274557 - ibm lotus_notes Unspecified vulnerability in nlnotes.dll in the client in IBM Lotus Notes 6.5, 7.0.x before 7.0.2 CCH or 7.0.3, and possibly 8.0 allows remote attackers to execute arbitrary code via crafted text in … CWE-94
Code Injection
CVE-2007-6706 2011-03-8 12:03 2008-03-9 Show GitHub Exploit DB Packet Storm
274558 - xunlei web_thunder Heap-based buffer overflow in the PPlayer.XPPlayer.1 ActiveX control in pplayer.dll_1_work in Xunlei Thunder 5.7.4.401 allows remote attackers to execute arbitrary code via a long string in a FlvPlay… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2007-6144 2011-03-8 12:02 2007-11-28 Show GitHub Exploit DB Packet Storm
274559 - hitachi jp1_file_transmission_server Hitachi JP1/File Transmission Server/FTP 01-00 through 08-10-02 on Windows might allow remote attackers to cause a denial of service (service stop) via a "specific file" argument to an FTP command. CWE-20
 Improper Input Validation 
CVE-2007-6146 2011-03-8 12:02 2007-11-28 Show GitHub Exploit DB Packet Storm
274560 - adobe connect_enterprise_server
flash_media_server_2
Use-after-free vulnerability in the Edge server in Adobe Flash Media Server 2 before 2.0.5, and Connect Enterprise Server 6 before SP3, allows remote attackers to execute arbitrary code via an unspec… CWE-399
 Resource Management Errors
CVE-2007-6148 2011-03-8 12:02 2008-02-14 Show GitHub Exploit DB Packet Storm