Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 11, 2025, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
189271 4.3 警告 Liferay - Liferay Portal におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-0180 2012-09-25 16:59 2008-01-10 Show GitHub Exploit DB Packet Storm
189272 2.6 注意 Liferay - Liferay Portal におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-0179 2012-09-25 16:59 2008-01-10 Show GitHub Exploit DB Packet Storm
189273 4.3 警告 Liferay - Liferay Portal におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-0178 2012-09-25 16:59 2008-02-4 Show GitHub Exploit DB Packet Storm
189274 6.8 警告 ikiwiki - ikiwiki の Plugin/passwordauth.pm における認証を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-0169 2012-09-25 16:59 2008-06-3 Show GitHub Exploit DB Packet Storm
189275 4.3 警告 ikiwiki - Ikiwiki におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2008-0165 2012-09-25 16:59 2008-04-21 Show GitHub Exploit DB Packet Storm
189276 4.4 警告 Linux - Linux kernel における vserver のリソースにアクセスされる脆弱性 CWE-59
リンク解釈の問題 		CVE-2008-0163 2012-09-25 16:59 2008-02-12 Show GitHub Exploit DB Packet Storm
189277 5 警告 million dollar script - Million Dollar Script の index.php における絶対パストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-0156 2012-09-25 16:59 2008-01-8 Show GitHub Exploit DB Packet Storm
189278 4.3 警告 hughes technologies - W3-mSQL のエラーページにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-0146 2012-09-25 16:59 2008-01-8 Show GitHub Exploit DB Packet Storm
189279 7.5 危険 The PHP Group - PHP の glob における脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-0145 2012-09-25 16:59 2008-01-8 Show GitHub Exploit DB Packet Storm
189280 6.8 警告 loudblog.de - Loudblog の loudblog/inc/parse_old.php における任意の PHP コードを実行される脆弱性 CWE-89
SQLインジェクション 		CVE-2008-0139 2012-09-25 16:59 2008-01-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 11, 2025, 5:03 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
270551 - knowledgetree open_source Cross-site scripting (XSS) vulnerability in KnowledgeTree Open Source 3.4 and 3.4.1 allows remote attackers to inject arbitrary web script or HTML via the login field on the login page, and other uns… NVD-CWE-Other
CVE-2007-4281 2011-03-8 11:58 2007-08-10 Show GitHub Exploit DB Packet Storm
270552 - sun solaris Unspecified vulnerability in the ata disk driver in Sun Solaris 10 on the x86 platform before 20070821 allows local users to cause a denial of service (system panic) via an unspecified ioctl function… NVD-CWE-Other
CVE-2007-4495 2011-03-8 11:58 2007-08-23 Show GitHub Exploit DB Packet Storm
270553 - symantec_veritas storage_foundation The Volume Manager Scheduler Service (aka VxSchedService.exe) in Symantec Veritas Storage Foundation 5.0 for Windows allows remote attackers to cause a denial of service (daemon crash or hang) via ma… CWE-20
 Improper Input Validation  		CVE-2007-4516 2011-03-8 11:58 2008-02-22 Show GitHub Exploit DB Packet Storm
270554 - university_of_minnesota mapserver Multiple cross-site scripting (XSS) vulnerabilities in MapServer before 4.10.3 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors involving the (1) processLine func… CWE-79
Cross-site Scripting 		CVE-2007-4542 2011-03-8 11:58 2007-08-28 Show GitHub Exploit DB Packet Storm
270555 - realnetworks helix_dna_server Heap-based buffer overflow in the RTSP service in Helix DNA Server before 11.1.4 allows remote attackers to execute arbitrary code via an RSTP command containing multiple Require headers. CWE-119
CWE-20
Incorrect Access of Indexable Resource ('Range Error') 
 Improper Input Validation  		CVE-2007-4561 2011-03-8 11:58 2007-08-28 Show GitHub Exploit DB Packet Storm
270556 - bharat_mediratta gallery Multiple unspecified vulnerabilities in Gallery before 2.2.3 allow attackers to (1) rename items, (2) read and modify item properties, or (3) lock and replace items via unknown vectors in (a) the Web… NVD-CWE-noinfo
CWE-264
Permissions, Privileges, and Access Controls 		CVE-2007-4650 2011-03-8 11:58 2007-09-5 Show GitHub Exploit DB Packet Storm
270557 - firebirdsql firebird Unspecified vulnerability in the server in Firebird before 2.0.2 allows remote attackers to determine the existence of arbitrary files, and possibly obtain other "file access," via unknown vectors, a… CWE-264
CWE-119
Permissions, Privileges, and Access Controls
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2007-4668 2011-03-8 11:58 2007-09-5 Show GitHub Exploit DB Packet Storm
270558 - asterisk asterisk
asterisk_appliance_developer_kit
asterisknow
s800i_appliance 		The IAX2 channel driver (chan_iax2) in Asterisk before 1.2.22 and 1.4.x before 1.4.8, Business Edition before B.2.2.1, AsteriskNOW before beta7, Appliance Developer Kit before 0.5.0, and s800i before… NVD-CWE-Other
CVE-2007-3763 2011-03-8 11:57 2007-07-19 Show GitHub Exploit DB Packet Storm
270559 - hitachi cosminexus_application_server
cosminexus_client
cosminexus_developer
cosminexus_server
cosminexus_studio
ucosminexus_application_server
ucosminexus_client
ucosminexus_developer 		Buffer overflow in Hitachi Cosminexus V4 through V7, Processing Kit for XML before 20070511, Developer's Kit for Java before 20070312, and third-party products that use this software, allows attacker… NVD-CWE-Other
CVE-2007-3794 2011-03-8 11:57 2007-07-16 Show GitHub Exploit DB Packet Storm
270560 - gforge gforge Cross-site scripting (XSS) vulnerability in account/verify.php in GForge 4.6b2 allows remote attackers to inject arbitrary web script or HTML via the confirm_hash parameter. CWE-79
Cross-site Scripting 		CVE-2007-3918 2011-03-8 11:57 2007-10-6 Show GitHub Exploit DB Packet Storm