Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Nov. 18, 2024, 6:03 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
195601 7.2 危険 マイクロソフト - Microsoft Windows のカーネルモードドライバ内の win32k.sys における整数オーバーフローの脆弱性 CWE-399
リソース管理の問題 		CVE-2012-1867 2012-06-15 16:36 2012-06-12 Show GitHub Exploit DB Packet Storm
195602 4.3 警告 シスコシステムズ - 複数の Cisco 製品の SIP の実装におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-2545 2012-06-15 16:35 2012-06-12 Show GitHub Exploit DB Packet Storm
195603 6.9 警告 マイクロソフト - Microsoft Windows の win32k.sys のスレッド生成の実装における権限昇格の脆弱性 CWE-362
競合状態 		CVE-2012-1868 2012-06-15 16:35 2012-06-12 Show GitHub Exploit DB Packet Storm
195604 4.3 警告 マイクロソフト - Microsoft Internet Explorer におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-1872 2012-06-15 16:33 2012-06-12 Show GitHub Exploit DB Packet Storm
195605 4.3 警告 マイクロソフト - Microsoft Internet Explorer におけるプロセスメモリから重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2012-1873 2012-06-15 16:33 2012-06-12 Show GitHub Exploit DB Packet Storm
195606 6 警告 EFS Technology - AutoFORM PDM Archive におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-3347 2012-06-15 16:26 2012-06-13 Show GitHub Exploit DB Packet Storm
195607 9.3 危険 マイクロソフト - Microsoft Internet Explorer における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2012-1874 2012-06-15 16:26 2012-06-12 Show GitHub Exploit DB Packet Storm
195608 9.3 危険 マイクロソフト - Microsoft Internet Explorer 8 における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2012-1875 2012-06-15 16:25 2012-06-12 Show GitHub Exploit DB Packet Storm
195609 9.3 危険 マイクロソフト - Microsoft Internet Explorer における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2012-1877 2012-06-15 16:23 2012-06-12 Show GitHub Exploit DB Packet Storm
195610 9.3 危険 マイクロソフト - Microsoft Internet Explorer における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2012-1878 2012-06-15 16:22 2012-06-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Nov. 18, 2024, 4:13 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
260911 - nori_gem_project nori_gem The nori gem 2.0.x before 2.0.2, 1.1.x before 1.1.4, and 1.0.x before 1.0.3 for Ruby does not properly restrict casts of string values, which allows remote attackers to conduct object-injection attac… CWE-20
 Improper Input Validation  		CVE-2013-0285 2013-04-16 13:00 2013-04-10 Show GitHub Exploit DB Packet Storm
260912 - redhat jboss_enterprise_portal_platform The GateIn Portal export/import gadget in JBoss Enterprise Portal Platform 5.2.2 does not properly check authentication when importing Zip files, which allows remote attackers to modify site contents… CWE-287
Improper Authentication 		CVE-2013-0314 2013-04-15 13:00 2013-04-13 Show GitHub Exploit DB Packet Storm
260913 - redhat jboss_enterprise_portal_platform The GateIn Portal export/import gadget in JBoss Enterprise Portal Platform 5.2.2 allows remote attackers to read arbitrary files via a crafted external XML entity in an XML document, aka an XML Entit… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2013-0315 2013-04-15 13:00 2013-04-13 Show GitHub Exploit DB Packet Storm
260914 - cisco firewall_services_module_software The auth-proxy functionality in Cisco Firewall Services Module (FWSM) software 3.1 and 3.2 before 3.2(20.1), 4.0 before 4.0(15.2), and 4.1 before 4.1(5.1) allows remote attackers to cause a denial of… CWE-287
Improper Authentication 		CVE-2013-1155 2013-04-15 13:00 2013-04-11 Show GitHub Exploit DB Packet Storm
260915 - cisco unified_meetingplace The web server in Cisco Unified MeetingPlace Application Server 7.x before 7.1MR1 Patch 2, 8.0 before 8.0MR1 Patch 1, and 8.5 before 8.5MR3 Patch 1 does not invalidate a session upon a logout action,… NVD-CWE-noinfo
CVE-2013-1168 2013-04-15 13:00 2013-04-11 Show GitHub Exploit DB Packet Storm
260916 - cisco unified_meetingplace_web_conferencing_server Cisco Unified MeetingPlace Web Conferencing Server 7.x before 7.1MR1 Patch 2, 8.0 before 8.0MR1 Patch 2, and 8.5 before 8.5MR3 Patch 1, when the Remember Me option is used, does not properly verify c… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2013-1169 2013-04-15 13:00 2013-04-11 Show GitHub Exploit DB Packet Storm
260917 - qualcomm
motorola 		msm8960
android
atrix_hd
razr_hd
razr_m 		The TrustZone kernel, when used in conjunction with a certain Motorola build of Android 4.1.2, on Motorola Razr HD, Razr M, and Atrix HD devices with the Qualcomm MSM8960 chipset does not verify the … CWE-16
Configuration 		CVE-2013-3051 2013-04-15 13:00 2013-04-13 Show GitHub Exploit DB Packet Storm
260918 - redhat jboss_enterprise_portal_platform Cross-site request forgery (CSRF) vulnerability in the GateIn Portal component in JBoss Enterprise Portal Platform 5.2.2 and earlier allows remote attackers to hijack the authentication of unspecifie… CWE-352
 Origin Validation Error 		CVE-2012-3532 2013-04-15 13:00 2013-04-13 Show GitHub Exploit DB Packet Storm
260919 - ge intelligent_platforms_proficy_real-time_information_portal rifsrvd.exe in the Remote Interface Service in GE Intelligent Platforms Proficy Real-Time Information Portal 2.6 through 3.5 SP1 allows remote attackers to cause a denial of service (memory corruptio… CWE-20
 Improper Input Validation  		CVE-2012-3010 2013-04-13 11:55 2012-11-1 Show GitHub Exploit DB Packet Storm
260920 - ge intelligent_platforms_proficy_real-time_information_portal rifsrvd.exe in the Remote Interface Service in GE Intelligent Platforms Proficy Real-Time Information Portal 2.6 through 3.5 SP1 allows remote attackers to cause a denial of service (memory corruptio… CWE-20
 Improper Input Validation  		CVE-2012-3021 2013-04-13 11:55 2012-11-1 Show GitHub Exploit DB Packet Storm