Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 3, 2025, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
191611 4.3 警告 Bueltge - WordPress 用 Adminimize プラグインにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2011-4926 2012-08-31 15:27 2012-08-29 Show GitHub Exploit DB Packet Storm
191612 4.3 警告 Elxis - Elxis CMS におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2011-4918 2012-08-31 15:26 2011-11-23 Show GitHub Exploit DB Packet Storm
191613 7.5 危険 vBulletin Solutions, Inc. - vBulletin の announcement.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2012-4686 2012-08-31 15:25 2012-08-28 Show GitHub Exploit DB Packet Storm
191614 4.3 警告 Arbor Networks - Arbor Networks Peakflow SP におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-4685 2012-08-31 15:24 2012-08-28 Show GitHub Exploit DB Packet Storm
191615 6.8 警告 Gajim.org - Gajim の common/helpers.py における任意のコマンドを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2012-2085 2012-08-31 15:22 2011-11-4 Show GitHub Exploit DB Packet Storm
191616 6 警告 Giant Robot - Drupal 用 ZipCart モジュールにおけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-1650 2012-08-31 15:05 2012-02-29 Show GitHub Exploit DB Packet Storm
191617 4.3 警告 MediaFront - Drupal 用 MediaFront モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-1647 2012-08-31 15:02 2012-02-29 Show GitHub Exploit DB Packet Storm
191618 2.6 注意 Wim Leers - Drupal 用 CDN モジュールにおける任意の PHP ファイルを読まれる脆弱性 CWE-200
情報漏えい
CVE-2012-1645 2012-08-31 14:57 2012-02-15 Show GitHub Exploit DB Packet Storm
191619 2.1 注意 Gizra - Drupal 用 Organic Groups Vocabulary モジュールにおけるボキャブラリを改ざんされる脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-1644 2012-08-31 14:53 2012-02-15 Show GitHub Exploit DB Packet Storm
191620 5 警告 Jason Savino - Drupal 用 Faster Permissions モジュールにおけるアクセス権を変更される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-1643 2012-08-31 14:50 2012-02-15 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 4, 2025, 4:07 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
269121 - david_paleino wicd The DBus configuration file for Wicd before 1.5.9 allows arbitrary users to own org.wicd.daemon, which allows local users to receive messages that were intended for the Wicd daemon, possibly includin… CWE-16
Configuration
CVE-2009-0489 2012-07-2 13:00 2009-02-10 Show GitHub Exploit DB Packet Storm
269122 - php php PHP 4.0.4pl1 and 4.0.5 in safe mode allows remote attackers to read and write files owned by the web server UID by uploading a PHP script that uses the error_log function to access the files. CWE-264
Permissions, Privileges, and Access Controls
CVE-2001-1247 2012-06-25 13:00 2001-12-6 Show GitHub Exploit DB Packet Storm
269123 - perforce perforce_server Directory traversal vulnerability in Perforce Server 2008.1 allows remote authenticated users to create arbitrary files via a .. (dot dot) in the argument to the "p4 add" command. CWE-22
Path Traversal
CVE-2010-0933 2012-06-15 13:00 2010-03-6 Show GitHub Exploit DB Packet Storm
269124 - opera opera_browser Unspecified vulnerability in Opera before 9.24 allows remote attackers to overwrite functions on pages from other domains and bypass the same-origin policy via unknown vectors. CWE-20
 Improper Input Validation 
CVE-2007-5540 2012-06-8 06:14 2007-10-18 Show GitHub Exploit DB Packet Storm
269125 - opera opera_browser Opera before 9.26 allows remote attackers to "bypass sanitization filters" and conduct cross-site scripting (XSS) attacks via crafted attribute values in an XML document, which are not properly handl… CWE-79
Cross-site Scripting
CVE-2008-1082 2012-06-8 03:06 2008-02-29 Show GitHub Exploit DB Packet Storm
269126 - opera opera_browser Opera before 9.26 allows user-assisted remote attackers to execute arbitrary script via images that contain custom comments, which are treated as script when the user displays the image properties. CWE-94
Code Injection
CVE-2008-1081 2012-06-8 03:02 2008-02-29 Show GitHub Exploit DB Packet Storm
269127 - opera opera_browser Opera before 9.26 allows user-assisted remote attackers to read arbitrary files by tricking a user into typing the characters of the target filename into a file input. CWE-20
 Improper Input Validation 
CVE-2008-1080 2012-06-8 02:58 2008-02-29 Show GitHub Exploit DB Packet Storm
269128 - opera opera_browser Opera before 9.63 does not block unspecified "scripted URLs" during the feed preview, which allows remote attackers to read existing subscriptions and force subscriptions to arbitrary feed URLs. NVD-CWE-Other
CVE-2008-5681 2012-06-8 02:24 2008-12-20 Show GitHub Exploit DB Packet Storm
269129 - opera opera_browser Cross-site scripting (XSS) vulnerability in Opera before 9.63 allows remote attackers to inject arbitrary web script or HTML via built-in XSLT templates. CWE-79
Cross-site Scripting
CVE-2008-5682 2012-06-8 02:22 2008-12-20 Show GitHub Exploit DB Packet Storm
269130 - opera opera_browser Unspecified vulnerability in Opera before 9.63 allows remote attackers to "reveal random data" via unknown vectors. NVD-CWE-noinfo
CWE-200
Information Exposure
CVE-2008-5683 2012-06-8 02:18 2008-12-20 Show GitHub Exploit DB Packet Storm