Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Sept. 22, 2024, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
191311 9.3 危険 マイクロソフト - Microsoft Windows のカーネルモードドライバ内の win32k.sys における権限昇格の脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-1848 2012-05-10 18:13 2012-05-8 Show GitHub Exploit DB Packet Storm
191312 10 危険 マイクロソフト - Microsoft Windows のカーネルモードドライバ内の win32k.sys における権限昇格の脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-0181 2012-05-10 18:12 2012-05-8 Show GitHub Exploit DB Packet Storm
191313 7.2 危険 マイクロソフト - Microsoft Windows のカーネルモードドライバ内の win32k.sys における権限昇格の脆弱性 CWE-20
不適切な入力確認 		CVE-2012-0180 2012-05-10 18:11 2012-05-8 Show GitHub Exploit DB Packet Storm
191314 9.3 危険 マイクロソフト - Windows 上で稼働する Microsoft Silverlight におけるメモリ二重解放の脆弱性 CWE-399
リソース管理の問題 		CVE-2012-0176 2012-05-10 18:09 2012-05-8 Show GitHub Exploit DB Packet Storm
191315 9.3 危険 マイクロソフト - Microsoft Office 2003 および 2007 におけるヒープベースのバッファオーバーフローの脆弱性 CWE-20
不適切な入力確認 		CVE-2012-0167 2012-05-10 18:08 2012-05-8 Show GitHub Exploit DB Packet Storm
191316 9.3 危険 マイクロソフト - 複数の Microsoft 製品の GDI+ における任意のコードを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2012-0165 2012-05-10 18:04 2012-05-8 Show GitHub Exploit DB Packet Storm
191317 5 警告 マイクロソフト - Microsoft .NET Framework 4 におけるサービス運用妨害 (アプリケーションハング) の脆弱性 CWE-DesignError
CVE-2012-0164 2012-05-10 17:58 2012-05-8 Show GitHub Exploit DB Packet Storm
191318 9.3 危険 マイクロソフト - Microsoft .NET Framework 4 における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2012-0162 2012-05-10 17:57 2012-05-8 Show GitHub Exploit DB Packet Storm
191319 6.8 警告 マイクロソフト - 複数の Microsoft Windows 製品の partmgr.sys における権限昇格の脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-0178 2012-05-10 17:08 2012-05-8 Show GitHub Exploit DB Packet Storm
191320 6.8 警告 マイクロソフト - Microsoft Windows Server 2008 R2 および Windows 7 の tcpip.sys におけるメモリ二重解放の脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-0179 2012-05-10 16:09 2012-05-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Sept. 22, 2024, 8:13 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
259781 - jurpo jurpopage Multiple SQL injection vulnerabilities in index.php in Jurpopage 0.2.0 allow remote attackers to execute arbitrary SQL commands via the (1) note and (2) pg parameters, different vectors than CVE-2010… CWE-89
SQL Injection 		CVE-2010-4360 2010-12-2 14:00 2010-12-2 Show GitHub Exploit DB Packet Storm
259782 - jurpo jurpopage Cross-site scripting (XSS) vulnerability in url-gateway.php in Jurpopage 0.2.0 allows remote attackers to inject arbitrary web script or HTML via the url parameter. NOTE: the provenance of this info… CWE-79
Cross-site Scripting 		CVE-2010-4361 2010-12-2 14:00 2010-12-2 Show GitHub Exploit DB Packet Storm
259783 - harmistechnology com_jeajaxeventcalendar SQL injection vulnerability in JE Ajax Event Calendar (com_jeajaxeventcalendar) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the event_id parameter in an alleve… CWE-89
SQL Injection 		CVE-2010-4365 2010-12-2 14:00 2010-12-2 Show GitHub Exploit DB Packet Storm
259784 - cisco asa_5500
pix_500
vpn_3000_concentrator
vpn_3005_concentrator
vpn_3015_concentrator
vpn_3020_concentrator
vpn_3030_concentator
vpn_3060_concentrator
vpn_3080_concentrator 		The remote-access IPSec VPN implementation on Cisco Adaptive Security Appliances (ASA) 5500 series devices, PIX Security Appliances 500 series devices, and VPN Concentrators 3000 series devices respo… CWE-200
Information Exposure 		CVE-2010-4354 2010-12-1 14:00 2010-12-1 Show GitHub Exploit DB Packet Storm
259785 - mozilla firefox Mozilla Firefox before 3.6 Beta 3 does not properly handle overlong UTF-8 encoding, which makes it easier for remote attackers to bypass cross-site scripting (XSS) protection mechanisms via a crafted… CWE-79
Cross-site Scripting 		CVE-2009-5017 2010-12-1 14:00 2010-11-13 Show GitHub Exploit DB Packet Storm
259786 - openfabrics libsdp The default configuration of libsdp.conf in libsdp 1.1.104 and earlier creates log files in /tmp, which allows local users to overwrite arbitrary files via a (1) symlink or (2) hard link attack on th… CWE-59
Link Following 		CVE-2010-4173 2010-11-30 14:00 2010-11-23 Show GitHub Exploit DB Packet Storm
259787 - cisco unified_videoconferencing_system_5110_firmware
unified_videoconferencing_system_5115_firmware
unified_videoconferencing_system_5110
unified_videoconferencing_system_5115 		/opt/rv/Versions/CurrentVersion/Mcu/Config/Mcu.val in Cisco Unified Videoconferencing (UVC) System 5110 and 5115, when the Linux operating system is used, uses a weak hashing algorithm for the (1) ad… CWE-310
Cryptographic Issues 		CVE-2010-4302 2010-11-30 14:00 2010-11-23 Show GitHub Exploit DB Packet Storm
259788 - cisco unified_videoconferencing_system_5110_firmware
unified_videoconferencing_system_5115_firmware
unified_videoconferencing_system_5110
unified_videoconferencing_system_5115 		Cisco Unified Videoconferencing (UVC) System 5110 and 5115, when the Linux operating system is used, uses world-readable permissions for the /etc/shadow file, which allows local users to discover enc… CWE-255
Credentials Management 		CVE-2010-4303 2010-11-30 14:00 2010-11-23 Show GitHub Exploit DB Packet Storm
259789 - cisco unified_videoconferencing_system_5110_firmware
unified_videoconferencing_system_5115_firmware
unified_videoconferencing_system_5110
unified_videoconferencing_system_5115
unified_videoconf… 		The web interface in Cisco Unified Videoconferencing (UVC) System 3545, 5110, 5115, and 5230; Unified Videoconferencing 3527 Primary Rate Interface (PRI) Gateway; Unified Videoconferencing 3522 Basic… CWE-310
Cryptographic Issues 		CVE-2010-4304 2010-11-30 14:00 2010-11-23 Show GitHub Exploit DB Packet Storm
259790 - cisco unified_videoconferencing_system_5110_firmware
unified_videoconferencing_system_5115_firmware
unified_videoconferencing_system_5110
unified_videoconferencing_system_5115
unified_videoconf… 		Cisco Unified Videoconferencing (UVC) System 3545, 5110, 5115, and 5230; Unified Videoconferencing 3527 Primary Rate Interface (PRI) Gateway; Unified Videoconferencing 3522 Basic Rate Interfaces (BRI… CWE-310
Cryptographic Issues 		CVE-2010-4305 2010-11-30 14:00 2010-11-23 Show GitHub Exploit DB Packet Storm