Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Dec. 25, 2024, 6:01 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
195851 5 警告 gf 3xplorer - GF-3XPLORER における設定情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2007-6476 2012-06-26 15:54 2007-12-20 Show GitHub Exploit DB Packet Storm
195852 6.4 警告 gf 3xplorer - GF-3XPLORER におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2007-6475 2012-06-26 15:54 2007-12-20 Show GitHub Exploit DB Packet Storm
195853 4.3 警告 gf 3xplorer - GF-3XPLORER におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2007-6474 2012-06-26 15:54 2007-12-20 Show GitHub Exploit DB Packet Storm
195854 7.5 危険 FreeWebshop - FreeWebshop の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2007-6466 2012-06-26 15:54 2007-12-19 Show GitHub Exploit DB Packet Storm
195855 4.3 警告 Ganglia - Ganglia の ganglia-web におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2007-6465 2012-06-26 15:54 2007-12-19 Show GitHub Exploit DB Packet Storm
195856 6.8 警告 form tools - Form ツールにおける PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション
CVE-2007-6464 2012-06-26 15:54 2007-12-19 Show GitHub Exploit DB Packet Storm
195857 4.3 警告 Flyspray - Flyspray の index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2007-6461 2012-06-26 15:54 2007-12-9 Show GitHub Exploit DB Packet Storm
195858 4.3 警告 anon proxy server - Anon Proxy Server におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2007-6460 2012-06-26 15:54 2007-12-19 Show GitHub Exploit DB Packet Storm
195859 6.8 警告 anon proxy server - Anon Proxy Server における任意のコマンドを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2007-6459 2012-06-26 15:54 2007-12-19 Show GitHub Exploit DB Packet Storm
195860 5 警告 balabit - Balabit syslog-ng におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2007-6437 2012-06-26 15:54 2007-12-19 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Dec. 26, 2024, 4:05 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
271221 - intel trusted_execution_technology Multiple unspecified vulnerabilities in Intel system software for Trusted Execution Technology (TXT) allow attackers to bypass intended loader integrity protections, as demonstrated by exploitation o… NVD-CWE-noinfo
CVE-2009-0066 2009-01-8 14:00 2009-01-8 Show GitHub Exploit DB Packet Storm
271222 - sun opensolaris
solaris
The name service cache daemon (nscd) in Sun Solaris 10 and OpenSolaris snv_50 through snv_104 does not properly check permissions, which allows local users to gain privileges and obtain sensitive inf… CWE-264
Permissions, Privileges, and Access Controls
CVE-2008-5699 2009-01-6 15:02 2008-12-23 Show GitHub Exploit DB Packet Storm
271223 - fujitsu-siemens webtransactions Multiple cross-site scripting (XSS) vulnerabilities in Fujitsu-Siemens WebTransactions 7.0, 7.1, and possibly other versions allow remote attackers to inject arbitrary web script or HTML via vectors … CWE-79
Cross-site Scripting
CVE-2008-5842 2009-01-6 14:00 2009-01-6 Show GitHub Exploit DB Packet Storm
271224 - ibm aix enq in bos.rte.printers in IBM AIX 6.1.0 through 6.1.2, when a print queue is defined in /etc/qconfig, allows local users to delete arbitrary files via unspecified vectors. CWE-264
Permissions, Privileges, and Access Controls
CVE-2008-5385 2008-12-17 15:40 2008-12-9 Show GitHub Exploit DB Packet Storm
271225 - ibm aix Buffer overflow in ndp in IBM AIX 6.1.0 through 6.1.2, when the netcd daemon is running, allows local users to gain privileges via unspecified vectors. CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2008-5386 2008-12-17 15:40 2008-12-9 Show GitHub Exploit DB Packet Storm
271226 - magnolia ce ActivationHandler in Magnolia CE 3.5.x before 3.5.4 does not check permissions during importing, which allows remote attackers to have an unknown impact via activation of a new item, possibly involvi… CWE-264
Permissions, Privileges, and Access Controls
CVE-2008-0701 2008-12-17 15:24 2008-02-12 Show GitHub Exploit DB Packet Storm
271227 - rsyslog rsyslog imudp in rsyslog 4.x before 4.1.2, 3.21 before 3.21.9 beta, and 3.20 before 3.20.2 generates a message even when it is sent by an unauthorized sender, which allows remote attackers to cause a denial … NVD-CWE-Other
CVE-2008-5618 2008-12-17 14:00 2008-12-17 Show GitHub Exploit DB Packet Storm
271228 - pvpgn pvpgn pvpgn-support-installer in pvpgn 1.8.1 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/pvpgn-support-1.0.tar.gz temporary file. CWE-59
Link Following
CVE-2008-5370 2008-12-16 14:00 2008-12-9 Show GitHub Exploit DB Packet Storm
271229 - netwin smsgate The SSL web administration service in NetWin SmsGate 1.1n and earlier allows remote attackers to cause a denial of service (hang) via (1) a large integer in the Content-Length HTTP header; (2) an inv… CWE-399
 Resource Management Errors
CVE-2008-5421 2008-12-12 14:00 2008-12-12 Show GitHub Exploit DB Packet Storm
271230 - netbsd netbsd
netbsd_current
The ipsec4_get_ulp function in the kernel in NetBSD 2.0 through 3.1 and NetBSD-current before 20071028, when the fast_ipsec subsystem is enabled, allows remote attackers to bypass the IPsec policy by… NVD-CWE-Other
CVE-2008-1335 2008-12-10 15:34 2008-03-14 Show GitHub Exploit DB Packet Storm