Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Nov. 14, 2024, 6:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
196061 7.8 危険 シスコシステムズ - Cisco IOS の NAT 機能におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2012-0383 2012-04-2 15:20 2012-03-28 Show GitHub Exploit DB Packet Storm
196062 7.1 危険 シスコシステムズ - Cisco IOS および IOS XE におけるサービス運用妨害 (デバイスリロード) の脆弱性 CWE-399
リソース管理の問題 		CVE-2012-0382 2012-04-2 14:05 2012-03-28 Show GitHub Exploit DB Packet Storm
196063 7.8 危険 シスコシステムズ - Cisco IOS および IOS XE におけるサービス運用妨害 (デバイスリロード) の脆弱性 CWE-310
暗号の問題 		CVE-2012-0381 2012-04-2 13:44 2012-03-28 Show GitHub Exploit DB Packet Storm
196064 6.2 警告 マイクロソフト - Microsoft Windows の Shell32.dll おける権限昇格の脆弱性 CWE-Other
その他 		CVE-2007-6753 2012-03-30 15:21 2012-03-28 Show GitHub Exploit DB Packet Storm
196065 5 警告 Apache Software Foundation - Apache Traffic Server にバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2012-0256 2012-03-29 17:38 2012-03-23 Show GitHub Exploit DB Packet Storm
196066 3.3 注意 GoLismero - GoLismero の libs/updater.py における任意のファイルを上書きされる脆弱性 CWE-59
リンク解釈の問題 		CVE-2012-0054 2012-03-29 17:31 2012-03-19 Show GitHub Exploit DB Packet Storm
196067 7.5 危険 Inspire IRCd - InspIRCd にメモリ破損の脆弱性 CWE-119
バッファエラー 		CVE-2012-1836 2012-03-29 16:29 2012-03-21 Show GitHub Exploit DB Packet Storm
196068 6.4 警告 Opera Software ASA - Opera におけるアドレスフィールドを偽装される脆弱性 CWE-20
不適切な入力確認 		CVE-2012-1927 2012-03-29 16:23 2012-03-27 Show GitHub Exploit DB Packet Storm
196069 5 警告 atmail pty ltd - Atmail オープンソースの Atmail WebMail Client における設定情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2012-1920 2012-03-29 16:20 2012-03-27 Show GitHub Exploit DB Packet Storm
196070 5 警告 atmail pty ltd - Atmail オープンソースの Atmail WebMail Client におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2012-1918 2012-03-29 16:19 2012-03-27 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Nov. 14, 2024, 5:03 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
259631 - cisco mediasense Cross-site scripting (XSS) vulnerability in the oraservice page in Cisco MediaSense allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCuj23328. CWE-79
Cross-site Scripting 		CVE-2013-5501 2013-10-3 04:44 2013-09-21 Show GitHub Exploit DB Packet Storm
259632 - cisco mediasense Multiple cross-site scripting (XSS) vulnerabilities in the oraadmin service page in Cisco MediaSense allow remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bu… CWE-79
Cross-site Scripting 		CVE-2013-5500 2013-10-3 04:43 2013-09-21 Show GitHub Exploit DB Packet Storm
259633 - ovislink
sony 		airlive_wl2600cam
snc_ch140
snc_ch180
snc_ch240
snc_ch280
snc_dh140
snc_dh140t
snc_dh180
snc_dh240
snc_dh240t
snc_dh280 		Cross-site request forgery (CSRF) vulnerability in the command/user.cgi in Sony SNC CH140, SNC CH180, SNC CH240, SNC CH280, SNC DH140, SNC DH140T, SNC DH180, SNC DH240, SNC DH240T, SNC DH280, and pos… CWE-352
 Origin Validation Error 		CVE-2013-3539 2013-10-3 04:26 2013-10-2 Show GitHub Exploit DB Packet Storm
259634 - grandstream gxv_device_firmware
gxv3500
gxv3501
gxv3504
gxv3601
gxv3601hd\/ll
gxv3611hd\/ll
gxv3615w\/p
gxv3615wp_hd
gxv3651fhd
gxv3662hd 		Cross-site scripting (XSS) vulnerability in Grandstream GXV3501, GXV3504, GXV3601, GXV3601HD/LL, GXV3611HD/LL, GXV3615W/P, GXV3651FHD, GXV3662HD, GXV3615WP_HD, GXV3500, and possibly other camera mode… CWE-79
Cross-site Scripting 		CVE-2013-3962 2013-10-3 02:28 2013-10-2 Show GitHub Exploit DB Packet Storm
259635 - brickom 100ap_device_firmware
fb-100ap
md-100ap
ob-100ae
osd-040e
wcb-100ap
wfb-100ap 		Cross-site request forgery (CSRF) vulnerability in cgi-bin/users.cgi in Brickcom FB-100Ap, WCB-100Ap, MD-100Ap, WFB-100Ap, OB-100Ae, OSD-040E, and possibly other camera models with firmware 3.1.0.8 a… CWE-352
 Origin Validation Error 		CVE-2013-3690 2013-10-3 02:21 2013-10-2 Show GitHub Exploit DB Packet Storm
259636 - grandstream gxv_device_firmware
gxv3500
gxv3501
gxv3504
gxv3601
gxv3601hd\/ll
gxv3611hd\/ll
gxv3615w\/p
gxv3615wp_hd
gxv3651fhd
gxv3662hd 		Cross-site request forgery (CSRF) vulnerability in goform/usermanage in Grandstream GXV3501, GXV3504, GXV3601, GXV3601HD/LL, GXV3611HD/LL, GXV3615W/P, GXV3651FHD, GXV3662HD, GXV3615WP_HD, GXV3500, an… CWE-352
 Origin Validation Error 		CVE-2013-3963 2013-10-3 02:14 2013-10-2 Show GitHub Exploit DB Packet Storm
259637 - samsung shr-5082
shr-5162 		Cross-site scripting (XSS) vulnerability in Samsung SHR-5162, SHR-5082, and possibly other models, allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO. CWE-79
Cross-site Scripting 		CVE-2013-3964 2013-10-3 02:10 2013-10-2 Show GitHub Exploit DB Packet Storm
259638 - emc geosynchrony
vplex_geo
vplex_local
vplex_metro 		EMC VPLEX before VPLEX GeoSynchrony 5.2 SP1 uses cleartext for storage of the LDAP/AD bind password, which allows local users to obtain sensitive information by reading the management-server configur… CWE-255
Credentials Management 		CVE-2013-3278 2013-10-3 00:16 2013-10-1 Show GitHub Exploit DB Packet Storm
259639 - wordpress wordpress wp-includes/functions.php in WordPress before 3.6.1 does not properly determine whether data has been serialized, which allows remote attackers to execute arbitrary code by triggering erroneous PHP u… CWE-94
Code Injection 		CVE-2013-4338 2013-10-2 13:29 2013-09-12 Show GitHub Exploit DB Packet Storm
259640 - wordpress wordpress wp-admin/includes/post.php in WordPress before 3.6.1 allows remote authenticated users to spoof the authorship of a post by leveraging the Author role and providing a modified user_ID parameter. CWE-264
Permissions, Privileges, and Access Controls 		CVE-2013-4340 2013-10-2 13:29 2013-09-12 Show GitHub Exploit DB Packet Storm