Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 12, 2025, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
192581 2.1 注意 Debian - cifs-utils の mount.cifs における情報漏えいの脆弱性 CWE-200
情報漏えい 		CVE-2012-1586 2012-08-29 17:57 2012-03-27 Show GitHub Exploit DB Packet Storm
192582 5 警告 FFmpeg - FFmpeg の libavcodec におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2012-0855 2012-08-29 17:41 2012-08-27 Show GitHub Exploit DB Packet Storm
192583 4.3 警告 FFmpeg - FFmpeg の libavcodec/j2k_dwt.c における整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2012-0849 2012-08-29 17:39 2011-12-16 Show GitHub Exploit DB Packet Storm
192584 4.3 警告 Andreas Gohr - DokuWiki の doku.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-2129 2012-08-29 15:57 2012-04-19 Show GitHub Exploit DB Packet Storm
192585 4.3 警告 TYPO3 Association - TYPO3 の例外ハンドラにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-2112 2012-08-29 15:56 2012-04-17 Show GitHub Exploit DB Packet Storm
192586 4.3 警告 Sourcefabric - Newscoop の admin/login.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-4679 2012-08-29 15:55 2012-04-5 Show GitHub Exploit DB Packet Storm
192587 4.3 警告 Sourcefabric - Newscoop におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-1935 2012-08-29 15:54 2012-04-5 Show GitHub Exploit DB Packet Storm
192588 7.5 危険 Sourcefabric - Newscoop の admin/country/edit.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2012-1934 2012-08-29 15:53 2012-04-5 Show GitHub Exploit DB Packet Storm
192589 6.8 警告 Sourcefabric - Newscoop における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2012-1933 2012-08-29 15:52 2012-04-5 Show GitHub Exploit DB Packet Storm
192590 4.4 警告 Google - Tunnelblick における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-4677 2012-08-29 11:53 2012-08-26 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 13, 2025, 4:09 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
270291 - linux linux_kernel Unspecified vulnerability in the EXT4_IOC_MOVE_EXT (aka move extents) ioctl implementation in the ext4 filesystem in the Linux kernel 2.6.32-git6 and earlier allows local users to cause a denial of s… NVD-CWE-noinfo
CVE-2009-4306 2012-03-19 13:00 2009-12-13 Show GitHub Exploit DB Packet Storm
270292 - linux linux_kernel The fuse_ioctl_copy_user function in the ioctl handler in fs/fuse/file.c in the Linux kernel 2.6.29-rc1 through 2.6.30.y uses the wrong variable in an argument to the kunmap function, which allows lo… NVD-CWE-Other
CVE-2009-4410 2012-03-19 13:00 2009-12-25 Show GitHub Exploit DB Packet Storm
270293 - linux linux_kernel The nfs_lock function in fs/nfs/file.c in the Linux kernel 2.6.9 does not properly remove POSIX locks on files that are setgid without group-execute permission, which allows local users to cause a de… CWE-399
 Resource Management Errors 		CVE-2007-6733 2012-03-19 13:00 2010-03-17 Show GitHub Exploit DB Packet Storm
270294 - cacti cacti SQL injection vulnerability in graph.php in Cacti 0.8.7e and earlier allows remote attackers to execute arbitrary SQL commands via a crafted rra_id parameter in a GET request in conjunction with a va… CWE-89
SQL Injection 		CVE-2010-2092 2012-02-16 13:04 2010-05-28 Show GitHub Exploit DB Packet Storm
270295 - cacti cacti SQL injection vulnerability in templates_export.php in Cacti 0.8.7e and earlier allows remote attackers to execute arbitrary SQL commands via the export_item_id parameter. CWE-89
SQL Injection 		CVE-2010-1431 2012-02-16 13:02 2010-05-5 Show GitHub Exploit DB Packet Storm
270296 - hp power_manager Stack-based buffer overflow in goform/formExportDataLogs in HP Power Manager before 4.2.10 allows remote attackers to execute arbitrary code via a long fileName parameter. CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2009-3999 2012-02-14 12:49 2010-01-21 Show GitHub Exploit DB Packet Storm
270297 - cafuego simple_document_management_system Multiple SQL injection vulnerabilities in Simple Document Management System (SDMS) 2.0-CVS and earlier allow remote attackers to execute arbitrary SQL commands via the (1) folder_id parameter in list… CWE-89
SQL Injection 		CVE-2005-3877 2012-02-7 14:00 2005-11-29 Show GitHub Exploit DB Packet Storm
270298 - sitracker support_incident_tracker Multiple unspecified vulnerabilities in Salford Software Support Incident Tracker (SiT!) before 3.30 have unknown impact and attack vectors. NVD-CWE-noinfo
CVE-2007-5635 2012-02-2 14:00 2007-10-24 Show GitHub Exploit DB Packet Storm
270299 - kde kdelibs KDE KSSL in kdelibs 3.5.4, 4.2.4, and 4.3 does not properly handle a '\0' character in a domain name in the Subject Alternative Name field of an X.509 certificate, which allows man-in-the-middle atta… CWE-310
Cryptographic Issues 		CVE-2009-2702 2012-01-19 12:40 2009-09-9 Show GitHub Exploit DB Packet Storm
270300 - semanticscuttle semanticscuttle Multiple cross-site request forgery (CSRF) vulnerabilities in SemanticScuttle before 0.91 allow remote attackers to (1) hijack the authentication of administrators via unknown vectors or (2) hijack t… CWE-352
 Origin Validation Error 		CVE-2009-0708 2012-01-5 14:00 2009-02-24 Show GitHub Exploit DB Packet Storm