Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Nov. 15, 2024, 6:02 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
192721 7.5 危険 badblue - BadBlue の ext.dll の PassThru 機能におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2007-6377 2012-06-26 15:54 2007-12-14 Show GitHub Exploit DB Packet Storm
192722 7.5 危険 francisco burzi - Francisco Burzi PHP-Nuke の autohtml.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2007-6376 2012-06-26 15:54 2007-12-14 Show GitHub Exploit DB Packet Storm
192723 7.5 危険 Bitweaver - Bitweaver における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2007-6375 2012-06-26 15:54 2007-12-14 Show GitHub Exploit DB Packet Storm
192724 4.3 警告 Bitweaver - Bitweaver におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-6374 2012-06-26 15:54 2007-12-14 Show GitHub Exploit DB Packet Storm
192725 7.5 危険 gestdown - GestDown における任意の SQL コマンドを実行される脆弱性 CWE-89
SQLインジェクション 		CVE-2007-6373 2012-06-26 15:54 2007-12-14 Show GitHub Exploit DB Packet Storm
192726 5 警告 ezcontents - ezContents の index.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2007-6368 2012-06-26 15:54 2007-12-14 Show GitHub Exploit DB Packet Storm
192727 4.3 警告 bcoos - bcoos の modules/ecal/display.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-6365 2012-06-26 15:54 2007-12-14 Show GitHub Exploit DB Packet Storm
192728 5 警告 gekkoware - Gekko における temp/ 配下の特定のファイルを読み取られる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2007-6361 2012-06-26 15:54 2007-12-14 Show GitHub Exploit DB Packet Storm
192729 4.9 警告 glyph and cog - alternate pdftops filter の pdftops.pl における任意のファイルを上書きされる脆弱性 CWE-DesignError
CVE-2007-6358 2012-06-26 15:54 2007-12-3 Show GitHub Exploit DB Packet Storm
192730 5 警告 aertherwide - exiftags におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2007-6356 2012-06-26 15:54 2007-12-18 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Nov. 15, 2024, 4:16 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
258731 - trendnet tew-812dru TRENDnet TEW-812DRU router allows remote authenticated users to execute arbitrary commands via shell metacharacters in the (1) wan network prefix to internet/ipv6.asp; (2) remote port to adm/manageme… CWE-78
OS Command  		CVE-2013-3365 2014-02-5 23:26 2014-02-5 Show GitHub Exploit DB Packet Storm
258732 - trendnet tew-812dru_firmware
tew-812dru 		Multiple cross-site request forgery (CSRF) vulnerabilities in TRENDnet TEW-812DRU router with firmware before 1.0.9.0 allow remote attackers to hijack the authentication of administrators for request… CWE-352
 Origin Validation Error 		CVE-2013-3098 2014-02-5 23:19 2014-02-5 Show GitHub Exploit DB Packet Storm
258733 - dennis_bruecke jquery_countdown Cross-site scripting (XSS) vulnerability in the jQuery Countdown module 7.x-1.x before 7.x-1.1 for Drupal allows remote authenticated users with the "access administration pages" permission to inject… CWE-79
Cross-site Scripting 		CVE-2013-4383 2014-02-5 05:40 2014-02-1 Show GitHub Exploit DB Packet Storm
258734 - gatehouse
harris
hughes_network_systems
inmarsat
japan_radio
thuraya_telecommunications 		gatehouse
bgan
9201
9450
9502
inmarsat
jue-250
jue-500
ip 		The firmware on GateHouse; Harris BGAN RF-7800B-VU204 and BGAN RF-7800B-DU204; Hughes Network Systems 9201, 9450, and 9502; Inmarsat; Japan Radio JUE-250 and JUE-500; and Thuraya IP satellite termina… CWE-287
Improper Authentication 		CVE-2013-6035 2014-02-5 01:26 2014-02-4 Show GitHub Exploit DB Packet Storm
258735 - gatehouse
harris
hughes_network_systems
inmarsat
japan_radio
thuraya_telecommunications 		gatehouse
bgan
9201
9450
9502
inmarsat
jue-250
jue-500
ip 		The firmware on GateHouse; Harris BGAN RF-7800B-VU204 and BGAN RF-7800B-DU204; Hughes Network Systems 9201, 9450, and 9502; Inmarsat; Japan Radio JUE-250 and JUE-500; and Thuraya IP satellite termina… CWE-255
Credentials Management 		CVE-2013-6034 2014-02-5 01:25 2014-02-4 Show GitHub Exploit DB Packet Storm
258736 - lexmark c52x
c53x
c920
c935dn
e250
e350
e450
t64x
w840 		Multiple cross-site scripting (XSS) vulnerabilities on Lexmark W840 through LS.HA.P252, T64x before LS.ST.P344, C935dn through LC.JO.P091, C920 through LS.TA.P152, C53x through LS.SW.P069, C52x throu… CWE-79
Cross-site Scripting 		CVE-2013-6033 2014-02-5 00:37 2014-02-4 Show GitHub Exploit DB Packet Storm
258737 - lexmark 25xxn
c52x
c53x
c77x
c78x
c920
c935dn
e250
e350
e450
n4000
n4050e
n70xxe
t64x
w840
x642
x644
x646
x64xef
x772
x78x
x85x
x94x 		cgi-bin/postpf/cgi-bin/dynamic/config/config.html on Lexmark X94x before LC.BR.P142, X85x through LC4.BE.P487, X644 and X646 before LC2.MC.P374, X642 through LC2.MB.P318, W840 through LS.HA.P252, T64… CWE-20
 Improper Input Validation  		CVE-2013-6032 2014-02-5 00:29 2014-02-4 Show GitHub Exploit DB Packet Storm
258738 - craig_drummond cantata Cantata before 1.2.2 does not restrict access to files in the play queue, which allows remote attackers to obtain sensitive information by reading the songs in the queue. CWE-264
Permissions, Privileges, and Access Controls 		CVE-2013-7301 2014-02-4 03:44 2014-02-2 Show GitHub Exploit DB Packet Storm
258739 - robert_ancell lightdm Light Display Manager (aka LightDM) 1.4.x before 1.4.3, 1.6.x before 1.6.2, and 1.7.x before 1.7.14 uses 0664 permissions for the temporary .Xauthority file, which allows local users to obtain sensit… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2013-4331 2014-02-4 03:22 2014-02-2 Show GitHub Exploit DB Packet Storm
258740 - enghouseinteractive ivr_pro An unspecified Enghouse Interactive Professional Services "addon product" in Enghouse Interactive IVR Pro (VIP2000) 9.0.3 (rel903), when using OpenVZ and fallback customization, uses the same SSH pri… CWE-310
Cryptographic Issues 		CVE-2013-6838 2014-01-31 15:07 2014-01-28 Show GitHub Exploit DB Packet Storm