Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Jan. 31, 2025, 4:03 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
188081	7.5	危険	Apache Software Foundation	-	Guacamole の libguac におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2012-4415	2012-10-2 15:13	2012-10-1	Show	GitHub Exploit DB Packet Storm

188082	10	危険	Condor Project	-	Condor における脆弱性	CWE-noinfo 情報不足	CVE-2012-5197	2012-10-2 14:34	2012-09-19	Show	GitHub Exploit DB Packet Storm

188083	10	危険	Condor Project	-	Condor におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2012-5196	2012-10-2 14:31	2012-09-19	Show	GitHub Exploit DB Packet Storm

188084	6.4	警告	Condor Project	-	Condor のファイルシステム認証におけるユーザになりすまされる脆弱性	CWE-287 不適切な認証	CVE-2012-3492	2012-10-2 14:20	2012-09-19	Show	GitHub Exploit DB Packet Storm

188085	4	警告	Condor Project	-	Condor におけるアイドル状態の任意のジョブを削除される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-3491	2012-10-2 14:09	2012-09-19	Show	GitHub Exploit DB Packet Storm

188086	6.8	警告	トレンドマイクロ	-	Trend Micro InterScan Messaging Security Suite におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2012-2996	2012-10-1 18:29	2012-09-17	Show	GitHub Exploit DB Packet Storm

188087	4.3	警告	トレンドマイクロ	-	Trend Micro InterScan Messaging Security Suite におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-2995	2012-10-1 18:16	2012-09-17	Show	GitHub Exploit DB Packet Storm

188088	10	危険	IBM アップルサイバートラスト株式会社ヒューレット・パッカードターボリナックス OpenSSL Project 日立レッドハット	-	OpenSSL における複数の関数に関する脆弱性	CWE-20 不適切な入力確認	CVE-2009-3245	2012-10-1 17:11	2010-03-5	Show	GitHub Exploit DB Packet Storm

188089	5	警告	IBM アップルサイバートラスト株式会社 The PHP Group サン・マイクロシステムズターボリナックス OpenSSL Project VMware レッドハット	-	OpenSSL の ASN1_STRING_print_ex 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-119 バッファエラー	CVE-2009-0590	2012-10-1 17:10	2009-03-27	Show	GitHub Exploit DB Packet Storm

188090	5	警告	アップルサイバートラスト株式会社サン・マイクロシステムズターボリナックスヒューレット・パッカード OpenSSL Project	-	OpenSSL における証明書チェーンの有効性を回避される脆弱性	CWE-287 不適切な認証	CVE-2008-5077	2012-10-1 17:07	2009-01-7	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:Feb. 1, 2025, 4:12 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
279441	-	apache	tomcat	The default installations of Apache Tomcat 3.2.3 and 3.2.4 allows remote attackers to obtain sensitive system information such as directory listings and web root path, via erroneous HTTP requests for…	NVD-CWE-Other	CVE-2002-2007	2008-09-6 05:32	2002-12-31	Show	GitHub Exploit DB Packet Storm

279442	-	htdig	htdig	Cross-site scripting (XSS) vulnerability in htsearch.cgi in htdig (ht://Dig) 3.1.5, 3.1.6, and 3.2 allows remote attackers to inject arbitrary web script or HTML via the words parameter.	NVD-CWE-Other	CVE-2002-2010	2008-09-6 05:32	2002-12-31	Show	GitHub Exploit DB Packet Storm

279443	-	jon_howell	faq-o-matic	Cross-site scripting (XSS) vulnerability in the fom CGI program (fom.cgi) in Faq-O-Matic 2.711 and 2.712 allows remote attackers to inject arbitrary web script or HTML via the file parameter.	NVD-CWE-Other	CVE-2002-2011	2008-09-6 05:32	2002-12-31	Show	GitHub Exploit DB Packet Storm

279444	-	apache	http_server	Unknown vulnerability in Apache 1.3.19 running on HP Secure OS for Linux 1.0 allows remote attackers to cause "unexpected results" via an HTTP request.	NVD-CWE-Other	CVE-2002-2012	2008-09-6 05:32	2002-12-31	Show	GitHub Exploit DB Packet Storm

279445	-	mozilla netscape	mozilla communicator navigator	Mozilla 0.9.6 and earlier and Netscape 6.2 and earlier allows remote attackers to steal cookies from another domain via a link with a hex-encoded null character (%00) followed by the target domain.	NVD-CWE-Other	CVE-2002-2013	2008-09-6 05:32	2002-12-31	Show	GitHub Exploit DB Packet Storm

279446	-	ibm	lotus_domino	Lotus Domino 5.0.8 web server returns different error messages when a valid or invalid user is provided in HTTP requests, which allows remote attackers to determine valid user names and makes it easi…	NVD-CWE-Other	CVE-2002-2014	2008-09-6 05:32	2002-12-31	Show	GitHub Exploit DB Packet Storm

279447	-	postnuke_software_foundation	postnuke	PHP file inclusion vulnerability in user.php in PostNuke 0.703 allows remote attackers to include arbitrary files and possibly execute code via the caselist parameter.	NVD-CWE-Other	CVE-2002-2015	2008-09-6 05:32	2002-12-31	Show	GitHub Exploit DB Packet Storm

279448	-	user-mode_linux	user-mode_linux	User-mode Linux (UML) 2.4.17-8 does not restrict access to kernel address space, which allows local users to execute arbitrary code.	NVD-CWE-Other	CVE-2002-2016	2008-09-6 05:32	2002-12-31	Show	GitHub Exploit DB Packet Storm

279449	-	sas	base integration_technologies	sastcpd in SAS/Base 8.0 allows local users to execute arbitrary code by setting the authprog environment variable to reference a malicious program, which is then executed by sastcpd.	NVD-CWE-Other	CVE-2002-2017	2008-09-6 05:32	2002-12-31	Show	GitHub Exploit DB Packet Storm

279450	-	sas	base integration_technologies	sastcpd in SAS/Base 8.0 might allow local users to gain privileges by setting the netencralg environment variable, which causes a segmentation fault.	NVD-CWE-Other	CVE-2002-2018	2008-09-6 05:32	2002-12-31	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed