Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Jan. 5, 2025, 10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
192601	4	警告	Digium	-	Certified Asterisk および Asterisk Open Source におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2012-2948	2012-06-27 16:24	2012-05-25	Show	GitHub Exploit DB Packet Storm

192602	2.6	注意	Digium	-	Certified Asterisk および Asterisk Open Source におけるサービス運用妨害 (デーモンクラッシュ) の脆弱性	CWE-16 環境設定	CVE-2012-2947	2012-06-27 16:23	2012-05-29	Show	GitHub Exploit DB Packet Storm

192603	7.5	危険	The OTR Development Team	-	Pidgin 用の OTR pidgin-otr プラグインにおけるフォーマットストリングの脆弱性	CWE-134 書式文字列の問題	CVE-2012-2369	2012-06-27 15:35	2012-05-16	Show	GitHub Exploit DB Packet Storm

192604	4.3	警告	アドビシステムズ日立	-	Adobe RoboHelp および RoboHelp Server におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-0524	2012-06-27 13:52	2009-02-24	Show	GitHub Exploit DB Packet Storm

192605	3.5	注意	Apache Software Foundation	-	Apache Roller におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-2381	2012-06-27 11:20	2012-06-26	Show	GitHub Exploit DB Packet Storm

192606	9.3	危険	Apache Software Foundation	-	Apache Roller の admin/editor コンソールにおけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2012-2380	2012-06-27 11:18	2012-06-26	Show	GitHub Exploit DB Packet Storm

192607	5.8	警告	nicholas thompson	-	Drupal 用の Global Redirect モジュールにおけるオープンリダイレクトの脆弱性	CWE-20 不適切な入力確認	CVE-2010-2021	2012-06-27 11:09	2012-06-13	Show	GitHub Exploit DB Packet Storm

192608	4.3	警告	アドビシステムズ日立	-	Adobe RoboHelp Server におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-0523	2012-06-27 11:05	2009-02-24	Show	GitHub Exploit DB Packet Storm

192609	4.3	警告	アドビシステムズ日立	-	Adobe RoboHelp によって作成されたファイルにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-0642	2012-06-27 11:02	2008-02-12	Show	GitHub Exploit DB Packet Storm

192610	4.3	警告	Webmin Project	-	Webmin におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-1937	2012-06-27 10:56	2011-05-31	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:Jan. 5, 2025, 4:07 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
275911	-	surfcontrol	superscout_email_filter	The administrative web interface (STEMWADM) for SurfControl SuperScout Email Filter allows users to obtain usernames and plaintext passwords via a request to the userlist.asp program, which includes …	NVD-CWE-Other	CVE-2002-1530	2008-09-6 05:30	2003-03-31	Show	GitHub Exploit DB Packet Storm

275912	-	surfcontrol	superscout_email_filter	The administrative web interface (STEMWADM) for SurfControl SuperScout Email Filter allows remote attackers to cause a denial of service (crash) via an HTTP request without a Content-Length parameter.	NVD-CWE-Other	CVE-2002-1531	2008-09-6 05:30	2003-03-31	Show	GitHub Exploit DB Packet Storm

275913	-	surfcontrol	superscout_email_filter	The administrative web interface (STEMWADM) for SurfControl SuperScout Email Filter allows remote attackers to cause a denial of service (resource exhaustion) via a GET request without the terminatin…	NVD-CWE-Other	CVE-2002-1532	2008-09-6 05:30	2003-03-31	Show	GitHub Exploit DB Packet Storm

275914	-	jetty	jetty	Cross-site scripting (XSS) vulnerability in Jetty JSP servlet engine allows remote attackers to insert arbitrary HTML or script via an HTTP request to a .jsp file whose name contains the malicious sc…	NVD-CWE-Other	CVE-2002-1533	2008-09-6 05:30	2003-03-31	Show	GitHub Exploit DB Packet Storm

275915	-	macromedia	flash_player	Macromedia Flash Player allows remote attackers to read arbitrary files via XML script in a .swf file that is hosted on a remote SMB share.	NVD-CWE-Other	CVE-2002-1534	2008-09-6 05:30	2003-03-31	Show	GitHub Exploit DB Packet Storm

275916	-	symantec	enterprise_firewall raptor_firewall	Secure Webserver 1.1 in Raptor 6.5 and Symantec Enterprise Firewall 6.5.2 allows remote attackers to identify IP addresses of hosts on the internal network via a CONNECT request, which generates diff…	NVD-CWE-Other	CVE-2002-1535	2008-09-6 05:30	2003-03-31	Show	GitHub Exploit DB Packet Storm

275917	-	hans_persson	molly	Molly IRC bot 0.5 allows remote attackers to execute arbitrary commands via shell metacharacters in (1) the $host variable for nslookup.pl, (2) the $to, $from, or $message variables in pop.pl, (3) th…	NVD-CWE-Other	CVE-2002-1536	2008-09-6 05:30	2003-03-31	Show	GitHub Exploit DB Packet Storm

275918	-	phpbb_group	phpbb	admin_ug_auth.php in phpBB 2.0.0 allows local users to gain administrator privileges by directly calling admin_ug_auth.php with modifed form fields such as "u".	NVD-CWE-Other	CVE-2002-1537	2008-09-6 05:30	2003-03-31	Show	GitHub Exploit DB Packet Storm

275919	-	acuma	acusend	Acuma Acusend 4, and possibly earlier versions, allows remote authenticated users to read the reports of other users by inferring the full URL, whose name is easily predictable.	NVD-CWE-Other	CVE-2002-1538	2008-09-6 05:30	2003-03-31	Show	GitHub Exploit DB Packet Storm

275920	-	alt-n	mdaemon	Buffer overflow in MDaemon POP server 6.0.7 and earlier allows remote authenticated users to cause a denial of service via long (1) DELE or (2) UIDL arguments.	NVD-CWE-Other	CVE-2002-1539	2008-09-6 05:30	2003-03-31	Show	GitHub Exploit DB Packet Storm