Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Nov. 18, 2024, 6:03 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
195651	4.3	警告	ForeScout Technologies	-	ForeScout CounterACT にクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-1825	2012-06-13 11:43	2012-06-11	Show	GitHub Exploit DB Packet Storm

195652	6	警告	dotCMS	-	dotCMS に任意のコードが実行される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-1826	2012-06-12 15:54	2012-05-28	Show	GitHub Exploit DB Packet Storm

195653	6.5	警告	CollabNet, Inc.	-	ScrumWorks Pro に権限昇格の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-2603	2012-06-12 15:51	2012-06-8	Show	GitHub Exploit DB Packet Storm

195654	5	警告	Igor Sysoev	-	nginx における重要な情報を取得される脆弱性	CWE-399 リソース管理の問題	CVE-2012-1180	2012-06-12 15:48	2012-04-17	Show	GitHub Exploit DB Packet Storm

195655	6.8	警告	Bloxx	-	Bloxx Web Filtering で使用される Microdasys におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2012-3343	2012-06-12 15:23	2011-06-9	Show	GitHub Exploit DB Packet Storm

195656	5	警告	Bloxx	-	Bloxx Web Filtering における IP アドレスとドメインの制限を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-2566	2012-06-12 15:19	2011-06-9	Show	GitHub Exploit DB Packet Storm

195657	5.8	警告	Bloxx	-	Bloxx Web Filtering における平文パスワードを容易に推測される脆弱	CWE-264 認可・権限・アクセス制御	CVE-2012-2565	2012-06-12 15:17	2011-06-9	Show	GitHub Exploit DB Packet Storm

195658	6.8	警告	Bloxx	-	Bloxx Web Filtering の管理インターフェースにおけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2012-2564	2012-06-12 15:14	2011-06-9	Show	GitHub Exploit DB Packet Storm

195659	4.3	警告	Bloxx	-	Bloxx Web Filtering におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-2563	2012-06-12 15:10	2011-06-9	Show	GitHub Exploit DB Packet Storm

195660	5.8	警告	シーメンス	-	Siemens WinCC の Web アプリケーションにおけるオープンリダイレクトの脆弱性	CWE-20 不適切な入力確認	CVE-2012-3003	2012-06-12 14:31	2012-06-5	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:Nov. 18, 2024, 4:13 p.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
260591	-	huawei	utps	Buffer overflow in the back-end component in Huawei UTPS 1.0 allows local users to gain privileges via a long IDS_PLUGIN_NAME string in a plug-in configuration file.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2012-6568	2013-06-21 13:00	2013-06-21	Show	GitHub Exploit DB Packet Storm

260592	-	huawei	ar_18-1x ar_18-2x ar_18-3x ar_19\/29\/49 ar_28\/46 s2000 s2300 s2700 s3000 s3300 s3300hi s3500 s3700 s3900 s5100 s5600 s7800 s8500	Stack-based buffer overflow in the HTTP module in the (1) Branch Intelligent Management System (BIMS) and (2) web management components on Huawei AR routers and S2000, S3000, S3500, S3900, S5100, S56…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2012-6569	2013-06-21 13:00	2013-06-21	Show	GitHub Exploit DB Packet Storm

260593	-	huawei	ar_18-1x ar_18-2x ar_18-3x ar_19\/29\/49 ar_28\/46 s2000 s2300 s2700 s3000 s3300 s3300hi s3500 s3700 s3900 s5100 s5600 s7800 s8500	The HTTP module in the (1) Branch Intelligent Management System (BIMS) and (2) web management components on Huawei AR routers and S2000, S3000, S3500, S3900, S5100, S5600, S7800, and S8500 switches d…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2012-6570	2013-06-21 13:00	2013-06-21	Show	GitHub Exploit DB Packet Storm

260594	-	x canonical	x.org-xserver ubuntu_linux	X.Org X server before 1.13.4 and 1.4.x before 1.14.1 does not properly restrict access to input events when adding a new hot-plug device, which might allow physically proximate attackers to obtain se…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2013-1940	2013-06-21 12:17	2013-05-14	Show	GitHub Exploit DB Packet Storm

260595	-	x canonical	x.org-xserver ubuntu_linux	Per http://www.ubuntu.com/usn/USN-1803-1/ "A security issue affects these releases of Ubuntu and its derivatives: Ubuntu 12.10 Ubuntu 12.04 LTS Ubuntu 11.10 Ubuntu 10.04 LTS"	CWE-264 Permissions, Privileges, and Access Controls	CVE-2013-1940	2013-06-21 12:17	2013-05-14	Show	GitHub Exploit DB Packet Storm

260596	-	xmlsoft	libxml2	Multiple use-after-free vulnerabilities in libxml2 2.9.0 and possibly other versions might allow context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code v…	CWE-399 Resource Management Errors	CVE-2013-1969	2013-06-21 12:17	2013-04-26	Show	GitHub Exploit DB Packet Storm

260597	-	x	libxext	Multiple integer overflows in X.org libXext 1.3.1 and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the (1) XcupGetReservedColormap…	CWE-189 Numeric Errors	CVE-2013-1982	2013-06-21 12:17	2013-06-16	Show	GitHub Exploit DB Packet Storm

260598	-	x	libx11	The (1) GetDatabase and (2) _XimParseStringFile functions in X.org libX11 1.5.99.901 (1.6 RC1) and earlier do not restrict the recursion depth when processing directives to include files, which allow…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2013-2004	2013-06-21 12:17	2013-06-16	Show	GitHub Exploit DB Packet Storm

260599	-	moodle	moodle	lib/formslib.php in Moodle 2.2.x before 2.2.6 and 2.3.x before 2.3.3 allows remote authenticated users to bypass intended access restrictions via a modified value of a frozen form field.	CWE-264 Permissions, Privileges, and Access Controls	CVE-2012-5472	2013-06-21 12:14	2012-11-21	Show	GitHub Exploit DB Packet Storm

260600	-	canonical	telepathy-idle ubuntu_linux	telepathy-idle before 0.1.15 does not verify (1) that the issuer is a trusted CA, (2) that the server hostname matches a domain name in the subject's Common Name (CN), or (3) the expiration date of t…	CWE-20 Improper Input Validation	CVE-2007-6746	2013-06-21 11:26	2013-05-22	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed