Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Nov. 18, 2024, 2:02 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
195651	6.5	警告	Best Practical Solutions	-	Best Practical Solutions RT における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2011-4460	2012-06-6 14:14	2012-06-4	Show	GitHub Exploit DB Packet Storm

195652	3.5	注意	Best Practical Solutions	-	Best Practical Solutions RT におけるアクセス制限を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-4459	2012-06-6 14:14	2012-06-4	Show	GitHub Exploit DB Packet Storm

195653	6.8	警告	Best Practical Solutions	-	Best Practical Solutions RT における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2011-4458	2012-06-6 14:12	2012-06-4	Show	GitHub Exploit DB Packet Storm

195654	6.8	警告	Best Practical Solutions	-	Best Practical Solutions RT におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2011-2085	2012-06-6 14:10	2012-06-4	Show	GitHub Exploit DB Packet Storm

195655	4	警告	Best Practical Solutions	-	Best Practical Solutions RT における過去のパスワードハッシュを読まれる脆弱性	CWE-200 情報漏えい	CVE-2011-2084	2012-06-6 14:09	2012-06-4	Show	GitHub Exploit DB Packet Storm

195656	4.3	警告	Best Practical Solutions	-	Best Practical Solutions RT におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-2083	2012-06-6 14:07	2012-06-4	Show	GitHub Exploit DB Packet Storm

195657	5	警告	Best Practical Solutions	-	Best Practical Solutions RT における平文パスワードを検出される脆弱性	CWE-255 証明書・パスワード管理	CVE-2011-2082	2012-06-6 14:05	2012-06-4	Show	GitHub Exploit DB Packet Storm

195658	5	警告	インターネットイニシアティブ	-	SEIL シリーズにおけるアクセス制限不備の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-2632	2012-06-6 12:01	2012-06-6	Show	GitHub Exploit DB Packet Storm

195659	5	警告	WassUp	-	WordPress 用プラグイン WassUp におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-2633	2012-06-6 12:00	2012-06-6	Show	GitHub Exploit DB Packet Storm

195660	4.3	警告	株式会社ウェブロジック	-	＠WEBショッピングカートにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-2631	2012-06-5 12:01	2012-06-5	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:Nov. 18, 2024, 12:12 p.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
260571	-	huawei	access_router	The Huawei Access Router (AR) before V200R002SPC003 allows remote attackers to cause a denial of service (device reset) via a crafted field in a DHCP request, as demonstrated by a request from an IP …	CWE-20 Improper Input Validation	CVE-2013-4632	2013-06-21 13:00	2013-06-21	Show	GitHub Exploit DB Packet Storm

260572	-	huawei	utps	Buffer overflow in the back-end component in Huawei UTPS 1.0 allows local users to gain privileges via a long IDS_PLUGIN_NAME string in a plug-in configuration file.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2012-6568	2013-06-21 13:00	2013-06-21	Show	GitHub Exploit DB Packet Storm

260573	-	huawei	ar_18-1x ar_18-2x ar_18-3x ar_19\/29\/49 ar_28\/46 s2000 s2300 s2700 s3000 s3300 s3300hi s3500 s3700 s3900 s5100 s5600 s7800 s8500	Stack-based buffer overflow in the HTTP module in the (1) Branch Intelligent Management System (BIMS) and (2) web management components on Huawei AR routers and S2000, S3000, S3500, S3900, S5100, S56…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2012-6569	2013-06-21 13:00	2013-06-21	Show	GitHub Exploit DB Packet Storm

260574	-	huawei	ar_18-1x ar_18-2x ar_18-3x ar_19\/29\/49 ar_28\/46 s2000 s2300 s2700 s3000 s3300 s3300hi s3500 s3700 s3900 s5100 s5600 s7800 s8500	The HTTP module in the (1) Branch Intelligent Management System (BIMS) and (2) web management components on Huawei AR routers and S2000, S3000, S3500, S3900, S5100, S5600, S7800, and S8500 switches d…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2012-6570	2013-06-21 13:00	2013-06-21	Show	GitHub Exploit DB Packet Storm

260575	-	x canonical	x.org-xserver ubuntu_linux	X.Org X server before 1.13.4 and 1.4.x before 1.14.1 does not properly restrict access to input events when adding a new hot-plug device, which might allow physically proximate attackers to obtain se…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2013-1940	2013-06-21 12:17	2013-05-14	Show	GitHub Exploit DB Packet Storm

260576	-	x canonical	x.org-xserver ubuntu_linux	Per http://www.ubuntu.com/usn/USN-1803-1/ "A security issue affects these releases of Ubuntu and its derivatives: Ubuntu 12.10 Ubuntu 12.04 LTS Ubuntu 11.10 Ubuntu 10.04 LTS"	CWE-264 Permissions, Privileges, and Access Controls	CVE-2013-1940	2013-06-21 12:17	2013-05-14	Show	GitHub Exploit DB Packet Storm

260577	-	xmlsoft	libxml2	Multiple use-after-free vulnerabilities in libxml2 2.9.0 and possibly other versions might allow context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code v…	CWE-399 Resource Management Errors	CVE-2013-1969	2013-06-21 12:17	2013-04-26	Show	GitHub Exploit DB Packet Storm

260578	-	x	libxext	Multiple integer overflows in X.org libXext 1.3.1 and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the (1) XcupGetReservedColormap…	CWE-189 Numeric Errors	CVE-2013-1982	2013-06-21 12:17	2013-06-16	Show	GitHub Exploit DB Packet Storm

260579	-	x	libx11	The (1) GetDatabase and (2) _XimParseStringFile functions in X.org libX11 1.5.99.901 (1.6 RC1) and earlier do not restrict the recursion depth when processing directives to include files, which allow…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2013-2004	2013-06-21 12:17	2013-06-16	Show	GitHub Exploit DB Packet Storm

260580	-	moodle	moodle	lib/formslib.php in Moodle 2.2.x before 2.2.6 and 2.3.x before 2.3.3 allows remote authenticated users to bypass intended access restrictions via a modified value of a frozen form field.	CWE-264 Permissions, Privileges, and Access Controls	CVE-2012-5472	2013-06-21 12:14	2012-11-21	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed