Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
189051 4.3 警告 phd - PHD Help Desk におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4047 2012-09-25 17:38 2009-11-23 Show GitHub Exploit DB Packet Storm
189052 4.3 警告 Patrick Przybilla - Drupal の AddToAny におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4043 2012-09-25 17:38 2009-11-11 Show GitHub Exploit DB Packet Storm
189053 4.3 警告 marek sotak - Drupal 用の RootCandy theme におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4042 2012-09-25 17:38 2009-11-11 Show GitHub Exploit DB Packet Storm
189054 4.3 警告 NCH - NCH Software Axon Virtual PBX におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4038 2012-09-25 17:38 2009-11-20 Show GitHub Exploit DB Packet Storm
189055 7.8 危険 Linux - Linux kernel の mac80211 サブシステムにおけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他 		CVE-2009-4026 2012-09-25 17:38 2009-11-22 Show GitHub Exploit DB Packet Storm
189056 10 危険 PEAR - PEAR の Net_Traceroute パッケージにおける任意のシェルコマンドを実行される脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2009-4025 2012-09-25 17:38 2009-11-14 Show GitHub Exploit DB Packet Storm
189057 10 危険 PEAR - PEAR の Net_Ping パッケージにおける任意のシェルコマンドを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2009-4024 2012-09-25 17:38 2009-11-14 Show GitHub Exploit DB Packet Storm
189058 7.5 危険 PEAR - PEAR の Mail パッケージにおける任意のファイルを読まれる脆弱性 CWE-94
コード・インジェクション 		CVE-2009-4023 2012-09-25 17:38 2009-05-7 Show GitHub Exploit DB Packet Storm
189059 5 警告 OpenTTD - OpenTTD の src/train_cmd.cpp の NormaliseTrainConsist 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2009-4007 2012-09-25 17:38 2009-12-11 Show GitHub Exploit DB Packet Storm
189060 7.2 危険 Linux - Linux kernel の KVM サブシステムにおけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2009-4004 2012-09-25 17:38 2009-10-23 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 26, 2025, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
266911 - ibm db2_universal_database Stack-based buffer overflow in db2dasrrm in the DB2 Administration Server (DAS) in IBM DB2 Universal Database 9.5 before Fix Pack 1, 9.1 before Fix Pack 4a, and 8 before FixPak 16 allows local users … CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2007-5758 2017-07-29 10:33 2008-04-17 Show GitHub Exploit DB Packet Storm
266912 - motorola netoctopus The NantSys device 5.0.0.115 in Motorola netOctopus 5.1.2 build 1011 has weak permissions for the \\.\NantSys device interface (nantsys.sys), which allows local users to gain privileges or cause a de… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2007-5761 2017-07-29 10:33 2008-01-9 Show GitHub Exploit DB Packet Storm
266913 - novell netware_client NICM.SYS driver 3.0.0.4, as used in Novell NetWare Client 4.91 SP4, allows local users to execute arbitrary code by opening the \\.\nicm device and providing crafted kernel addresses via IOCTLs with … CWE-20
 Improper Input Validation  		CVE-2007-5762 2017-07-29 10:33 2008-01-10 Show GitHub Exploit DB Packet Storm
266914 - gnu emacs The hack-local-variables function in Emacs before 22.2, when enable-local-variables is set to :safe, does not properly search lists of unsafe or risky variables, which might allow user-assisted attac… NVD-CWE-Other
CVE-2007-5795 2017-07-29 10:33 2007-11-3 Show GitHub Exploit DB Packet Storm
266915 - ibm websphere_application_server Multiple cross-site scripting (XSS) vulnerabilities in uddigui/navigateTree.do in the UDDI user console in IBM WebSphere Application Server (WAS) before 6.1.0 Fix Pack 13 (6.1.0.13) allow remote atta… CWE-79
Cross-site Scripting 		CVE-2007-5798 2017-07-29 10:33 2007-11-3 Show GitHub Exploit DB Packet Storm
266916 - ibm websphere_application_server Multiple cross-site request forgery (CSRF) vulnerabilities in uddigui/navigateTree.do in the UDDI user console in IBM WebSphere Application Server (WAS) before 6.1.0 Fix Pack 13 (6.1.0.13) allow remo… CWE-352
 Origin Validation Error 		CVE-2007-5799 2017-07-29 10:33 2007-11-3 Show GitHub Exploit DB Packet Storm
266917 - nagios nagios Multiple cross-site scripting (XSS) vulnerabilities in CGI programs in Nagios before 2.12 might allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different issu… CWE-79
Cross-site Scripting 		CVE-2007-5803 2017-07-29 10:33 2008-05-14 Show GitHub Exploit DB Packet Storm
266918 - ibm aix cfgcon in IBM AIX 5.2 and 5.3 does not properly validate the argument to the "-p" option to swcons, which allows local users in the system group to create or overwrite an arbitrary file, and enable w… NVD-CWE-Other
CVE-2007-5804 2017-07-29 10:33 2007-11-6 Show GitHub Exploit DB Packet Storm
266919 - ibm aix cfgcon in IBM AIX 5.2 and 5.3 does not properly validate the argument to the "-p" option to swcons, which allows local users in the system group to create an arbitrary file, and enable world writabil… CWE-59
Link Following 		CVE-2007-5805 2017-07-29 10:33 2007-11-6 Show GitHub Exploit DB Packet Storm
266920 - hitachi groupmax_collaboration_portal
groupmax_collaboration_web_client
ucosminexus_collaboration_portal 		Unspecified vulnerability in the Groupmax Collaboration - Schedule component in Hitachi Groupmax Collaboration Portal 07-30 through 07-30-/F and 07-32 through 07-32-/C, uCosminexus Collaboration Port… NVD-CWE-noinfo
CVE-2007-5808 2017-07-29 10:33 2007-11-6 Show GitHub Exploit DB Packet Storm