Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Oct. 23, 2024, 2:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
197781	10	危険	Google	-	Windows 上の Google Chrome における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2011-2806	2011-11-22 10:46	2011-08-22	Show	GitHub Exploit DB Packet Storm

197782	2.6	注意	OWASP	-	OWASP HTML Sanitizer おける重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2011-4457	2011-11-21 16:10	2011-11-17	Show	GitHub Exploit DB Packet Storm

197783	7.5	危険	Google	-	Google Chrome で使用される Google V8 におけるサービス運用妨害 (DoS) の脆弱性	CWE-119 バッファエラー	CVE-2011-3900	2011-11-21 16:10	2011-11-16	Show	GitHub Exploit DB Packet Storm

197784	4.3	警告	The phpMyAdmin Project	-	phpMyAdmin の simplexml_load_string 関数における任意のファイルを読まれる脆弱性	CWE-200 情報漏えい	CVE-2011-4107	2011-11-21 16:08	2011-11-10	Show	GitHub Exploit DB Packet Storm

197785	5	警告	The phpMyAdmin Project	-	phpMyAdmin の phpmyadmin.css.php における重要な情報を取得される脆弱性	CWE-20 不適切な入力確認	CVE-2011-3646	2011-11-21 16:08	2011-10-17	Show	GitHub Exploit DB Packet Storm

197786	5	警告	Squid-cache.org	-	Squid の idnsGrokReply 関数におけるサービス運用妨害 (デーモンの停止) の脆弱性	CWE-399 リソース管理の問題	CVE-2011-4096	2011-11-21 16:05	2011-10-17	Show	GitHub Exploit DB Packet Storm

197787	5	警告	Openswan レッドハット	-	Openswan におけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2011-3380	2011-11-21 16:04	2011-10-5	Show	GitHub Exploit DB Packet Storm

197788	4.3	警告	ClamAV	-	ClamAV のバイトコードエンジンにおけるサービス運用妨害 (クラッシュ) の脆弱性	CWE-189 数値処理の問題	CVE-2011-3627	2011-11-21 16:03	2011-11-17	Show	GitHub Exploit DB Packet Storm

197789	4.3	警告	Robert Luberda	-	man2html の man2html.cgi.c におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-2770	2011-11-21 16:01	2011-11-17	Show	GitHub Exploit DB Packet Storm

197790	7.5	危険	ＨＰの回し者	-	ＨＰの回し者製日記における OS コマンドインジェクションの脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2011-4002	2011-11-21 12:02	2011-11-21	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:Oct. 23, 2024, 12:18 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
261	5.4	MEDIUM Network	sajjadhsagor	advanced_category_and_custom_taxonomy_image	The Advanced Category and Custom Taxonomy Image plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's ad_tax_image shortcode in all versions up to, and including, 1.0.9 d… Update	CWE-79 Cross-site Scripting	CVE-2024-9425	2024-10-22 22:55	2024-10-18	Show	GitHub Exploit DB Packet Storm

262	8.8	HIGH Network	mozilla	firefox	Heap-based buffer overflow in the nsBMPEncoder::AddImageFrame function in Mozilla Firefox before 49.0, Firefox ESR 45.x before 45.4, and Thunderbird < 45.4 allows remote attackers to execute arbitrar… Update	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2016-5278	2024-10-22 22:54	2016-09-23	Show	GitHub Exploit DB Packet Storm

263	9.8	CRITICAL Network	mozilla	firefox	Use-after-free vulnerability in the nsRefreshDriver::Tick function in Mozilla Firefox before 49.0, Firefox ESR 45.x before 45.4, and Thunderbird < 45.4 allows remote attackers to execute arbitrary co… Update	CWE-416 Use After Free	CVE-2016-5277	2024-10-22 22:54	2016-09-23	Show	GitHub Exploit DB Packet Storm

264	9.8	CRITICAL Network	mozilla	firefox	Use-after-free vulnerability in the mozilla::a11y::DocAccessible::ProcessInvalidationList function in Mozilla Firefox before 49.0, Firefox ESR 45.x before 45.4, and Thunderbird < 45.4 allows remote a… Update	CWE-416 Use After Free	CVE-2016-5276	2024-10-22 22:54	2016-09-23	Show	GitHub Exploit DB Packet Storm

265	9.8	CRITICAL Network	mozilla	firefox	Use-after-free vulnerability in the nsFrameManager::CaptureFrameState function in Mozilla Firefox before 49.0, Firefox ESR 45.x before 45.4, and Thunderbird < 45.4 allows remote attackers to execute … Update	CWE-416 Use After Free	CVE-2016-5274	2024-10-22 22:54	2016-09-23	Show	GitHub Exploit DB Packet Storm

266	8.8	HIGH Network	mozilla	firefox	The nsImageGeometryMixin class in Mozilla Firefox before 49.0, Firefox ESR 45.x before 45.4, and Thunderbird < 45.4 does not properly perform a cast of an unspecified variable during handling of INPU… Update	CWE-20 Improper Input Validation	CVE-2016-5272	2024-10-22 22:54	2016-09-23	Show	GitHub Exploit DB Packet Storm

267	9.8	CRITICAL Network	mozilla	firefox	Heap-based buffer overflow in the nsCaseTransformTextRunFactory::TransformString function in Mozilla Firefox before 49.0, Firefox ESR 45.x before 45.4, and Thunderbird < 45.4 allows remote attackers … Update	CWE-119 CWE-787 Incorrect Access of Indexable Resource ('Range Error') Out-of-bounds Write	CVE-2016-5270	2024-10-22 22:54	2016-09-23	Show	GitHub Exploit DB Packet Storm

268	9.8	CRITICAL Network	mozilla	firefox	Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 49.0, Firefox ESR 45.x before 45.4 and Thunderbird < 45.4 allow remote attackers to cause a denial of service (mem… Update	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2016-5257	2024-10-22 22:54	2016-09-23	Show	GitHub Exploit DB Packet Storm

269	5.5	MEDIUM Local	oracle mozilla	linux firefox	Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allow user-assisted remote attackers to bypass the Same Origin Policy, and conduct Universal XSS (UXSS) attacks or read arbitrary files, b… Update	CWE-79 CWE-200 Cross-site Scripting Information Exposure	CVE-2016-5265	2024-10-22 22:54	2016-08-5	Show	GitHub Exploit DB Packet Storm

270	8.8	HIGH Network	mozilla oracle	firefox linux	Use-after-free vulnerability in the nsNodeUtils::NativeAnonymousChildListChange function in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allows remote attackers to execute arbitrary c… Update	CWE-416 Use After Free	CVE-2016-5264	2024-10-22 22:54	2016-08-5	Show	GitHub Exploit DB Packet Storm