Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Oct. 23, 2024, 10:02 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
197701	7.5	危険	GBU grafici	-	GBU Facebook コンポーネントにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-5056	2011-11-25 11:47	2011-11-23	Show	GitHub Exploit DB Packet Storm

197702	7.5	危険	Almnzm	-	Almnzm の index.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-5055	2011-11-25 11:46	2011-11-23	Show	GitHub Exploit DB Packet Storm

197703	4.3	警告	JAMWiki	-	JAMWiki の Special:Login におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-5054	2011-11-25 11:46	2010-04-1	Show	GitHub Exploit DB Packet Storm

197704	4.3	警告	The GetSimple Team	-	GetSimple CMS の admin/components.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-5052	2011-11-25 11:45	2011-11-23	Show	GitHub Exploit DB Packet Storm

197705	4.3	警告	razorCMS	-	razorCMS の admin/core/admin_func.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-5051	2011-11-25 11:44	2011-11-23	Show	GitHub Exploit DB Packet Storm

197706	4.3	警告	Zoho Corporation	-	ManageEngine ADManager Plus におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-5050	2011-11-25 11:43	2011-11-23	Show	GitHub Exploit DB Packet Storm

197707	7.5	危険	Zabbix	-	Zabbix の events.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-5049	2011-11-25 11:42	2011-11-23	Show	GitHub Exploit DB Packet Storm

197708	4.3	警告	JoomlaTune Joomla!	-	JoomlaTune JComments におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-5048	2011-11-25 11:42	2011-11-23	Show	GitHub Exploit DB Packet Storm

197709	7.5	危険	V-EVA	-	V-EVA Press Release Script における任意の SQL コマンドを実行される脆弱性	CWE-89 SQLインジェクション	CVE-2010-5047	2011-11-25 11:41	2011-11-23	Show	GitHub Exploit DB Packet Storm

197710	4.3	警告	ecoCMS	-	ecoCMS の admin.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-5046	2011-11-25 11:40	2011-11-23	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:Oct. 23, 2024, 5:58 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
321	-		mozilla canonical opensuse oracle	firefox ubuntu_linux opensuse solaris	Heap-based buffer overflow in the resize_context_buffers function in libvpx in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 allows remote attackers to execute arbitrary code via malfo… Update	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2015-4485	2024-10-22 22:42	2015-08-16	Show	GitHub Exploit DB Packet Storm

322	-		canonical opensuse mozilla oracle	ubuntu_linux opensuse firefox solaris	The js::jit::AssemblerX86Shared::lock_addl function in the JavaScript implementation in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 allows remote attackers to cause a denial of servi… Update	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2015-4484	2024-10-22 22:42	2015-08-16	Show	GitHub Exploit DB Packet Storm

323	-		opensuse mozilla oracle	opensuse firefox solaris	mar_read.c in the Updater in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 allows local users to gain privileges or cause a denial of service (out-of-bounds write) via a crafted name o… Update	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2015-4482	2024-10-22 22:42	2015-08-16	Show	GitHub Exploit DB Packet Storm

324	-		mozilla opensuse oracle	firefox opensuse solaris	Race condition in the Mozilla Maintenance Service in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 on Windows allows local users to write to arbitrary files and consequently gain privi… Update	CWE-362 Race Condition	CVE-2015-4481	2024-10-22 22:42	2015-08-16	Show	GitHub Exploit DB Packet Storm

325	-		canonical opensuse mozilla	ubuntu_linux opensuse firefox	Integer overflow in the stagefright::SampleTable::isValid function in libstagefright in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 allows remote attackers to execute arbitrary code … Update	CWE-189 Numeric Errors	CVE-2015-4480	2024-10-22 22:42	2015-08-16	Show	GitHub Exploit DB Packet Storm

326	-		mozilla canonical opensuse	firefox ubuntu_linux opensuse	Multiple integer overflows in libstagefright in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 allow remote attackers to execute arbitrary code via a crafted saio chunk in MPEG-4 video … Update	CWE-189 Numeric Errors	CVE-2015-4479	2024-10-22 22:42	2015-08-16	Show	GitHub Exploit DB Packet Storm

327	-		canonical opensuse mozilla	ubuntu_linux opensuse firefox	Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 do not impose certain ECMAScript 6 requirements on JavaScript object properties, which allows remote attackers to bypass the Same Origin P… Update	CWE-200 Information Exposure	CVE-2015-4478	2024-10-22 22:42	2015-08-16	Show	GitHub Exploit DB Packet Storm

328	-		mozilla canonical opensuse	firefox ubuntu_linux opensuse	The mozilla::AudioSink function in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 mishandles inconsistent sample formats within MP3 audio data, which allows remote attackers to execute … Update	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2015-4475	2024-10-22 22:42	2015-08-16	Show	GitHub Exploit DB Packet Storm

329	-		canonical debian opensuse mozilla	ubuntu_linux debian_linux opensuse firefox	Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 allow remote attackers to cause a denial of service (memory corruption and a… Update	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2015-4473	2024-10-22 22:42	2015-08-16	Show	GitHub Exploit DB Packet Storm

330	8.8	HIGH Network	mozilla oracle canonical redhat suse opensuse	firefox firefox_os solaris ubuntu_linux enterprise_linux_desktop enterprise_linux_server enterprise_linux_workstation enterprise_linux_eus enterprise_linux_server_tus enter…	The PDF reader in Mozilla Firefox before 39.0.3, Firefox ESR 38.x before 38.1.1, and Firefox OS before 2.2 allows remote attackers to bypass the Same Origin Policy, and read arbitrary files or gain p… Update	NVD-CWE-noinfo	CVE-2015-4495	2024-10-22 22:42	2015-08-8	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed