Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
194191 2.6 注意 ジャストシステム - ATOK for Android における学習情報ファイルのアクセス権限に関する問題 CWE-264
認可・権限・アクセス制御 		CVE-2012-4016 2012-09-25 12:01 2012-09-25 Show GitHub Exploit DB Packet Storm
194192 6.8 警告 アップル - Apple iOS 6 未満で使用される WebKit における任意のコードを実行される脆弱性 CWE-119
CWE-399
CVE-2012-3747 2012-09-24 18:59 2012-09-20 Show GitHub Exploit DB Packet Storm
194193 4.3 警告 アップル - Apple iOS 6 未満の UIKit における平文のファイルコンテンツを取得される脆弱性 CWE-310
暗号の問題 		CVE-2012-3746 2012-09-24 18:59 2012-09-20 Show GitHub Exploit DB Packet Storm
194194 5 警告 アップル - Apple iOS 6 未満におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2012-3745 2012-09-24 18:59 2012-09-20 Show GitHub Exploit DB Packet Storm
194195 5 警告 アップル - Apple iOS 6 未満におけるテキストコミュニケーションを偽造される脆弱性 CWE-DesignError
CVE-2012-3744 2012-09-24 18:59 2012-09-20 Show GitHub Exploit DB Packet Storm
194196 5 警告 アップル - Apple iOS 6 未満のシステムログの実装における重要な情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-3743 2012-09-24 18:59 2012-09-20 Show GitHub Exploit DB Packet Storm
194197 5 警告 アップル - Apple iOS 6 未満の Safari における https 接続に偽装される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-3742 2012-09-24 18:59 2012-09-20 Show GitHub Exploit DB Packet Storm
194198 1.9 注意 アップル - Apple iOS 6 未満の制限の実装における Apple ID 認証ステップを回避される脆弱性 CWE-287
不適切な認証 		CVE-2012-3741 2012-09-24 18:59 2012-09-20 Show GitHub Exploit DB Packet Storm
194199 2.1 注意 アップル - Apple iOS 6 未満のパスコードロックの実装におけるパスコード要求を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-3740 2012-09-24 18:59 2012-09-20 Show GitHub Exploit DB Packet Storm
194200 5 警告 アップル - Apple iOS の CFNetwork における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2012-3724 2012-09-24 18:59 2012-09-20 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 23, 2025, 4:07 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
267381 - freevms freevms Buffer overflow in backup/src/vmsbackup.c (aka the backup utility) in FreeVMS before 0.3.6 might allow local users to gain privileges via a long string in response to an "extract [ny]" prompt. NVD-CWE-Other
CVE-2007-3124 2017-07-29 10:31 2007-06-8 Show GitHub Exploit DB Packet Storm
267382 - fersch formbankserver formbankcgi.exe in Fersch Formbankserver 1.9, when the PATH_INFO begins with (1) AbfrageForm or (2) EingabeForm, allows remote attackers to cause a denial of service (daemon crash) via multiple reque… NVD-CWE-Other
CVE-2007-0138 2017-07-29 10:30 2007-01-9 Show GitHub Exploit DB Packet Storm
267383 - bingo_news bingo_news PHP remote file inclusion vulnerability in bn_smrep1.php in BinGoPHP News (BP News) 3.01 allows remote attackers to execute arbitrary PHP code via a URL in the bnrep parameter, a different vector tha… NVD-CWE-Other
CVE-2007-0145 2017-07-29 10:30 2007-01-10 Show GitHub Exploit DB Packet Storm
267384 - geoip geoip Directory traversal vulnerability in the GeoIP_update_database_general function in libGeoIP/GeoIPUpdate.c in GeoIP 1.4.0 allows remote malicious update servers (possibly only update.maxmind.com) to o… NVD-CWE-Other
CVE-2007-0159 2017-07-29 10:30 2007-01-10 Show GitHub Exploit DB Packet Storm
267385 - unsanity application_enhancer Unsanity Application Enhancer (APE) 2.0.2 installs with insecure permissions for the (1) ApplicationEnhancer binary and the (2) /Library/Frameworks/ApplicationEnhancer.framework directory, which allo… NVD-CWE-Other
CVE-2007-0162 2017-07-29 10:30 2007-01-10 Show GitHub Exploit DB Packet Storm
267386 - b2evolution b2evolution Cross-site scripting (XSS) vulnerability in htsrv/login.php in b2evolution 1.8.6 allows remote attackers to inject arbitrary web script or HTML via scriptable attributes in the redirect_to parameter. CWE-79
Cross-site Scripting 		CVE-2007-0175 2017-07-29 10:30 2007-01-11 Show GitHub Exploit DB Packet Storm
267387 - mediawiki mediawiki Cross-site scripting (XSS) vulnerability in the AJAX module in MediaWiki before 1.6.9, 1.7 before 1.7.2, 1.8 before 1.8.3, and 1.9 before 1.9.0rc2, when wgUseAjax is enabled, allows remote attackers … NVD-CWE-Other
CVE-2007-0177 2017-07-29 10:30 2007-01-11 Show GitHub Exploit DB Packet Storm
267388 - ef_software ef_commander Stack-based buffer overflow in EF Commander 5.75 allows user-assisted attackers to execute arbitrary code via a crafted ISO file containing a file within several nested directories, which produces a … NVD-CWE-Other
CVE-2007-0180 2017-07-29 10:30 2007-01-11 Show GitHub Exploit DB Packet Storm
267389 - getahead direct_web_remoting Getahead Direct Web Remoting (DWR) before 1.1.4 allows attackers to obtain unauthorized access to public methods via a crafted request that bypasses the include/exclude checks. NVD-CWE-Other
CVE-2007-0184 2017-07-29 10:30 2007-01-12 Show GitHub Exploit DB Packet Storm
267390 - getahead direct_web_remoting Getahead Direct Web Remoting (DWR) before 1.1.4 allows attackers to cause a denial of service (memory exhaustion and servlet outage) via unknown vectors related to a large number of calls in a batch. NVD-CWE-Other
CVE-2007-0185 2017-07-29 10:30 2007-01-12 Show GitHub Exploit DB Packet Storm