Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Nov. 16, 2024, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
191931 6.8 警告 fuzzylime - fuzzylime (cms) の rss.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-3165 2012-06-26 16:02 2008-07-14 Show GitHub Exploit DB Packet Storm
191932 7.6 危険 fuzzylime - fuzzylime (cms) の blog.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-3164 2012-06-26 16:02 2008-07-14 Show GitHub Exploit DB Packet Storm
191933 9.3 危険 FFmpeg - FFmpeg の str_read_packet 関数におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2008-3162 2012-06-26 16:02 2008-07-14 Show GitHub Exploit DB Packet Storm
191934 7.8 危険 F5 Networks - F5 FirePass 1200 の SNMP デーモンにおけるサービス運用妨害 (DoS) の脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-3149 2012-06-26 16:02 2008-07-11 Show GitHub Exploit DB Packet Storm
191935 7.5 危険 ashopsoftware - AShop Deluxe の catalogue.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-3136 2012-06-26 16:02 2008-07-10 Show GitHub Exploit DB Packet Storm
191936 5 警告 GraphicsMagick - GraphicsMagick におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2008-3134 2012-06-26 16:02 2008-07-10 Show GitHub Exploit DB Packet Storm
191937 6.8 警告 barenuked - BareNuked CMS の admin/index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-3133 2012-06-26 16:02 2008-07-10 Show GitHub Exploit DB Packet Storm
191938 7.5 危険 catviz - Catviz の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-3129 2012-06-26 16:02 2008-07-10 Show GitHub Exploit DB Packet Storm
191939 7.5 危険 dreamlevels - DreamNews Manager の dreamnews-rss.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-3189 2012-06-26 16:02 2008-07-16 Show GitHub Exploit DB Packet Storm
191940 4.3 警告 Chipmunk Scripts - Blogger におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-3186 2012-06-26 16:02 2008-07-15 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Nov. 17, 2024, 5:17 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
259401 - phpmyadmin phpmyadmin phpMyAdmin 3.5.x before 3.5.8 and 4.x before 4.0.0-rc3, when a SaveDir directory is configured, allows remote authenticated users to execute arbitrary code by using a double extension in the filename… CWE-94
Code Injection 		CVE-2013-3239 2013-11-19 13:48 2013-04-26 Show GitHub Exploit DB Packet Storm
259402 - phpmyadmin phpmyadmin Directory traversal vulnerability in the Export feature in phpMyAdmin 4.x before 4.0.0-rc3 allows remote authenticated users to read arbitrary files or possibly have unspecified other impact via a pa… CWE-22
Path Traversal 		CVE-2013-3240 2013-11-19 13:48 2013-04-26 Show GitHub Exploit DB Packet Storm
259403 - phpmyadmin phpmyadmin export.php (aka the export script) in phpMyAdmin 4.x before 4.0.0-rc3 overwrites global variables on the basis of the contents of the POST superglobal array, which allows remote authenticated users t… NVD-CWE-noinfo
CVE-2013-3241 2013-11-19 13:48 2013-04-26 Show GitHub Exploit DB Packet Storm
259404 - cisco adaptive_security_appliance_cx_context-aware_security_software The Safe Search enforcement feature in Cisco Adaptive Security Appliance (ASA) CX Context-Aware Security Software does not properly perform filtering, which allows remote attackers to bypass intended… CWE-20
 Improper Input Validation  		CVE-2013-5561 2013-11-16 03:15 2013-11-5 Show GitHub Exploit DB Packet Storm
259405 - emc networker The NetWorker Management Console (NMC) in EMC NetWorker 8.0.x before 8.0.2.3, when using Active Directory/LDAP for authentication, allows remote authenticated users to discover cleartext administrato… CWE-310
Cryptographic Issues 		CVE-2013-3285 2013-11-16 02:58 2013-11-3 Show GitHub Exploit DB Packet Storm
259406 - libraw libraw The "faster LJPEG decoder" in libraw 0.13.x, 0.14.x, and 0.15.x before 0.15.4 allows context-dependent attackers to cause a denial of service (NULL pointer dereference) via a crafted photo file. NVD-CWE-Other
CVE-2013-1439 2013-11-15 13:39 2013-09-17 Show GitHub Exploit DB Packet Storm
259407 - cisco ios_xr The OSPFv3 functionality in Cisco IOS XR 5.1 allows remote attackers to cause a denial of service (process crash) via a malformed LSA Type-1 packet, aka Bug ID CSCuj82176. CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2013-5565 2013-11-15 04:57 2013-11-8 Show GitHub Exploit DB Packet Storm
259408 - cisco nx-os Cisco NX-OS 5.0 and earlier on MDS 9000 devices allows remote attackers to cause a denial of service (supervisor CPU consumption) via Authentication Header (AH) authentication in a Virtual Router Red… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2013-5566 2013-11-15 04:56 2013-11-8 Show GitHub Exploit DB Packet Storm
259409 - cisco unified_ip_phone_firmware
unified_ip_phone_8961
unified_ip_phone_9951
unified_ip_phone_9971 		The firmware on Cisco Unified IP phones 8961, 9951, and 9971 uses weak permissions for memory block devices, which allows local users to gain privileges by mounting a device with a setuid file in its… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2013-6685 2013-11-15 04:45 2013-11-14 Show GitHub Exploit DB Packet Storm
259410 - qualcomm quic_mobile_station_modem_kernel goodix_tool.c in the Goodix gt915 touchscreen driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, relies on user-sp… CWE-362
Race Condition 		CVE-2013-4740 2013-11-15 04:43 2013-11-12 Show GitHub Exploit DB Packet Storm