Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Sept. 22, 2024, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
193381 6.9 警告 Debian - mono-debugger の mdb スクリプトおよび mdb-symbolreader スクリプトにおける権限を取得される脆弱性 CWE-DesignError
CVE-2010-3369 2012-03-27 18:42 2010-10-20 Show GitHub Exploit DB Packet Storm
193382 6.9 警告 zeus.physik.uni-bonn - Mn_Fit における権限を取得される脆弱性 CWE-DesignError
CVE-2010-3366 2012-03-27 18:42 2010-10-20 Show GitHub Exploit DB Packet Storm
193383 6.9 警告 mistelix - Mistelix における権限を取得される脆弱性 CWE-DesignError
CVE-2010-3365 2012-03-27 18:42 2010-10-20 Show GitHub Exploit DB Packet Storm
193384 6.9 警告 vips - VIPS の vips-7.22 スクリプトにおける権限を取得される脆弱性 CWE-DesignError
CVE-2010-3364 2012-03-27 18:42 2010-10-20 Show GitHub Exploit DB Packet Storm
193385 6.9 警告 roaraudio - roaraudio の roarify における権限を取得される脆弱性 CWE-DesignError
CVE-2010-3363 2012-03-27 18:42 2010-10-20 Show GitHub Exploit DB Packet Storm
193386 6.9 警告 last - lastfm における権限を取得される脆弱性 CWE-DesignError
CVE-2010-3362 2012-03-27 18:42 2010-10-20 Show GitHub Exploit DB Packet Storm
193387 6.9 警告 shrew - Shrew Soft IKE の iked スクリプトにおける権限を取得される脆弱性 CWE-DesignError
CVE-2010-3361 2012-03-27 18:42 2010-10-20 Show GitHub Exploit DB Packet Storm
193388 6.9 警告 pedro villavicencio garrido - Hipo における権限を取得される脆弱性 CWE-DesignError
CVE-2010-3360 2012-03-27 18:42 2010-10-20 Show GitHub Exploit DB Packet Storm
193389 6.9 警告 henner zeller - HenPlus JDBC SQL-Shell における権限を取得される脆弱性 CWE-DesignError
CVE-2010-3358 2012-03-27 18:42 2010-10-20 Show GitHub Exploit DB Packet Storm
193390 6.9 警告 pedro castro - gnome-subtitles における権限を取得される脆弱性 CWE-DesignError
CVE-2010-3357 2012-03-27 18:42 2010-10-20 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Sept. 23, 2024, 5:13 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
259611 - realnetworks realplayer
realplayer_sp 		Per: http://cwe.mitre.org/data/definitions/665.html 'CWE-665: Improper Initialization' NVD-CWE-Other
CVE-2010-0121 2011-01-19 14:00 2010-12-15 Show GitHub Exploit DB Packet Storm
259612 - oracle e-business_suite Unspecified vulnerability in the Oracle Applications Manager component in Oracle E-Business Suite 11.5.10.2 allows remote attackers to affect confidentiality and integrity via unknown vectors. NVD-CWE-noinfo
CVE-2010-2388 2011-01-19 14:00 2010-10-14 Show GitHub Exploit DB Packet Storm
259613 - hypermail-project hypermail Cross-site scripting (XSS) vulnerability in Hypermail 2.2.0 allows remote attackers to inject arbitrary web script or HTML via a crafted From address, which is not properly handled when indexing mess… CWE-79
Cross-site Scripting 		CVE-2010-4339 2011-01-18 14:00 2011-01-15 Show GitHub Exploit DB Packet Storm
259614 - ecava integraxor Directory traversal vulnerability in Ecava IntegraXor 3.6.4000.0 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the file_name parameter in an open request. CWE-22
Path Traversal 		CVE-2010-4598 2011-01-14 15:48 2010-12-24 Show GitHub Exploit DB Packet Storm
259615 - cstr festival festival_server in Centre for Speech Technology Research (CSTR) Festival, probably 2.0.95-beta and earlier, places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gai… NVD-CWE-Other
CVE-2010-3996 2011-01-14 15:47 2010-11-6 Show GitHub Exploit DB Packet Storm
259616 - squid-cache squid The string-comparison functions in String.cci in Squid 3.x before 3.1.8 and 3.2.x before 3.2.0.2 allow remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a … NVD-CWE-Other
CVE-2010-3072 2011-01-14 15:46 2010-09-21 Show GitHub Exploit DB Packet Storm
259617 - squid-cache squid Per: http://cwe.mitre.org/data/definitions/476.html 'CWE-476: NULL Pointer Dereference' NVD-CWE-Other
CVE-2010-3072 2011-01-14 15:46 2010-09-21 Show GitHub Exploit DB Packet Storm
259618 - arg0 encfs SSL_Cipher.cpp in EncFS before 1.7.0 does not properly handle integer data sizes when constructing headers intended for randomization of initialization vectors, which makes it easier for local users … CWE-310
Cryptographic Issues 		CVE-2010-3073 2011-01-14 15:46 2010-09-18 Show GitHub Exploit DB Packet Storm
259619 - arg0 encfs SSL_Cipher.cpp in EncFS before 1.7.0 uses an improper combination of an AES cipher and a CBC cipher mode for encrypted filesystems, which allows local users to obtain sensitive information via a wate… CWE-310
Cryptographic Issues 		CVE-2010-3074 2011-01-14 15:46 2010-09-18 Show GitHub Exploit DB Packet Storm
259620 - linux-ipv6 umip The mipv6 daemon in UMIP 0.4 does not verify that netlink messages originated in the kernel, which allows local users to spoof netlink socket communication via a crafted unicast message. CWE-264
Permissions, Privileges, and Access Controls 		CVE-2010-2522 2011-01-14 15:45 2010-07-14 Show GitHub Exploit DB Packet Storm