Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Nov. 14, 2024, 6:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
196861	4.3	警告	ZyXEL	-	ZyXEL O2 DSL Router Classic の Forms/PortForwarding_Edit_1 におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2011-0746	2012-03-27 18:43	2011-04-13	Show	GitHub Exploit DB Packet Storm

196862	4	警告	SugarCRM	-	SugarCRM における顧客名などを発見される脆弱性	CWE-20 不適切な入力確認	CVE-2011-0745	2012-03-27 18:43	2011-03-16	Show	GitHub Exploit DB Packet Storm

196863	10	危険	Novell	-	Novell ZENworks Handheld Management の ZfHIPCND.exe におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2011-0742	2012-03-27 18:43	2011-01-25	Show	GitHub Exploit DB Packet Storm

196864	4.3	警告	MODX	-	ModX Evolution におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-0741	2012-03-27 18:43	2011-02-1	Show	GitHub Exploit DB Packet Storm

196865	4.3	警告	WordPress.org pleer	-	WordPress 用の RSS Feed Reader の magpie/scripts/magpie_slashbox.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-0740	2012-03-27 18:43	2011-02-1	Show	GitHub Exploit DB Packet Storm

196866	6.8	警告	Mikel Lindsaar	-	Ruby Mail gem の sendmail delivery agent の deliver 関数における任意のコマンドを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2011-0739	2012-03-27 18:43	2011-02-1	Show	GitHub Exploit DB Packet Storm

196867	4.3	警告	Globus ncsa	-	Globus Toolkit で使用される MyProxy におけるサーバを偽装される脆弱性	CWE-20 不適切な入力確認	CVE-2011-0738	2012-03-27 18:43	2011-01-18	Show	GitHub Exploit DB Packet Storm

196868	7.8	危険	Linux	-	Linux kernel の br_mdb_ip_get 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2011-0709	2012-03-27 18:43	2011-02-18	Show	GitHub Exploit DB Packet Storm

196869	7.5	危険	サン・マイクロシステムズレッドハット	-	OpenJDK Runtime Environment の IcedTea-Web における権限昇格の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-0706	2012-03-27 18:43	2011-02-15	Show	GitHub Exploit DB Packet Storm

196870	3.3	注意	daniel friesel	-	feh の feh_unique_filename 関数における任意のファイルを上書きされる脆弱性	CWE-59 リンク解釈の問題	CVE-2011-0702	2012-03-27 18:43	2011-02-14	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:Nov. 15, 2024, 6:05 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
265701	-	smarty	smarty	Smarty before 3.0.0 RC3 does not properly handle an on value of the asp_tags option in the php.ini file, which has unspecified impact and remote attack vectors.	NVD-CWE-noinfo	CVE-2010-4725	2011-02-15 14:00	2011-02-4	Show	GitHub Exploit DB Packet Storm

265702	-	intellicom	netbiter_easyconnect_ec150 netbiter_modbus_rtu-tcp_gateway_mb100 netbiter_serial_ethernet_server_ss100 netbiter_webscada_ws100 netbiter_webscada_ws200 netbiter_nb100 netbiter_nb200	Directory traversal vulnerability in cgi-bin/read.cgi in WebSCADA WS100 and WS200, Easy Connect EC150, Modbus RTU - TCP Gateway MB100, and Serial Ethernet Server SS100 on the IntelliCom NetBiter NB10…	CWE-22 Path Traversal	CVE-2010-4730	2011-02-15 14:00	2011-02-15	Show	GitHub Exploit DB Packet Storm

265703	-	intellicom	netbiter_easyconnect_ec150 netbiter_modbus_rtu-tcp_gateway_mb100 netbiter_serial_ethernet_server_ss100 netbiter_webscada_ws100 netbiter_webscada_ws200 netbiter_nb100 netbiter_nb200	Absolute path traversal vulnerability in cgi-bin/read.cgi in WebSCADA WS100 and WS200, Easy Connect EC150, Modbus RTU - TCP Gateway MB100, and Serial Ethernet Server SS100 on the IntelliCom NetBiter …	CWE-22 Path Traversal	CVE-2010-4731	2011-02-15 14:00	2011-02-15	Show	GitHub Exploit DB Packet Storm

265704	-	intellicom	netbiter_easyconnect_ec150 netbiter_modbus_rtu-tcp_gateway_mb100 netbiter_serial_ethernet_server_ss100 netbiter_webscada_ws100 netbiter_webscada_ws200 netbiter_nb100 netbiter_nb200	cgi-bin/read.cgi in WebSCADA WS100 and WS200, Easy Connect EC150, Modbus RTU - TCP Gateway MB100, and Serial Ethernet Server SS100 on the IntelliCom NetBiter NB100 and NB200 platforms allows remote a…	CWE-94 Code Injection	CVE-2010-4732	2011-02-15 14:00	2011-02-15	Show	GitHub Exploit DB Packet Storm

265705	-	intellicom	netbiter_easyconnect_ec150 netbiter_modbus_rtu-tcp_gateway_mb100 netbiter_serial_ethernet_server_ss100 netbiter_webscada_ws100 netbiter_webscada_ws200 netbiter_nb100 netbiter_nb200	WebSCADA WS100 and WS200, Easy Connect EC150, Modbus RTU - TCP Gateway MB100, and Serial Ethernet Server SS100 on the IntelliCom NetBiter NB100 and NB200 platforms have a default username and passwor…	CWE-255 Credentials Management	CVE-2010-4733	2011-02-15 14:00	2011-02-15	Show	GitHub Exploit DB Packet Storm

265706	-	smarty	smarty	Multiple unspecified vulnerabilities in Smarty before 3.0.0 beta 6 have unknown impact and attack vectors.	NVD-CWE-noinfo	CVE-2009-5052	2011-02-15 14:00	2011-02-4	Show	GitHub Exploit DB Packet Storm

265707	-	smarty	smarty	Unspecified vulnerability in Smarty before 3.0.0 beta 6 allows remote attackers to execute arbitrary PHP code by injecting this code into a cache file.	NVD-CWE-noinfo	CVE-2009-5053	2011-02-15 14:00	2011-02-4	Show	GitHub Exploit DB Packet Storm

265708	-	smarty	smarty	Smarty before 3.0.0 beta 4 does not consider the umask value when setting the permissions of files, which might allow attackers to bypass intended access restrictions via standard filesystem operatio…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2009-5054	2011-02-15 14:00	2011-02-4	Show	GitHub Exploit DB Packet Storm

265709	-	ibm	websphere_application_server	IBM WebSphere Application Server (WAS) 6.1.0.9, when the JAAS Login functionality is enabled, allows attackers to perform an internal application hashtable login by (1) not providing a password or (2…	CWE-20 Improper Input Validation	CVE-2008-7274	2011-02-15 14:00	2011-02-15	Show	GitHub Exploit DB Packet Storm

265710	-	zikula	zikula_application_framework	Cross-site scripting (XSS) vulnerability in the Users module in Zikula before 1.2.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: it is possible that …	CWE-79 Cross-site Scripting	CVE-2011-0911	2011-02-14 14:00	2011-02-9	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed