Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 31, 2025, 4:03 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
198201 5 警告 gelatocms - Gelato の classes/imgsize.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-3675 2012-06-26 16:02 2008-08-14 Show GitHub Exploit DB Packet Storm
198202 5 警告 Linux
Acronis International GmbH		 - Acronis True Image Echo Server における重要な情報を取得される脆弱性 CWE-310
暗号の問題 		CVE-2008-3671 2012-06-26 16:02 2008-08-13 Show GitHub Exploit DB Packet Storm
198203 6.8 警告 articlefriendly - Article Friendly Pro の authordetail.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-3670 2012-06-26 16:02 2008-08-13 Show GitHub Exploit DB Packet Storm
198204 5 警告 Bharat Mediratta - Gallery におけるクッキーをキャプチャされる脆弱性 CWE-310
暗号の問題 		CVE-2008-3662 2012-06-26 16:02 2008-09-18 Show GitHub Exploit DB Packet Storm
198205 6.8 警告 articlefriendly - Article Friendly Standard の categorydetail.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-3649 2012-06-26 16:02 2008-08-12 Show GitHub Exploit DB Packet Storm
198206 8.5 危険 21degrees - Twentyone Degrees Symphony の File Manager における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2008-3592 2012-06-26 16:02 2008-08-11 Show GitHub Exploit DB Packet Storm
198207 7.5 危険 21degrees - 212cafeBoard の lib/class.admin.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-3591 2012-06-26 16:02 2008-08-11 Show GitHub Exploit DB Packet Storm
198208 7.5 危険 egi zaberl - E. Z. Poll の admin/login.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-3590 2012-06-26 16:02 2008-08-11 Show GitHub Exploit DB Packet Storm
198209 7.8 危険 Linux
calacode		 - CalaCode @Mail における重要な情報を取得される脆弱性 CWE-287
不適切な認証 		CVE-2008-3579 2012-06-26 16:02 2008-08-10 Show GitHub Exploit DB Packet Storm
198210 7.5 危険 ezcontents - ezContents の modules/calendar/minicalendar.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2008-3575 2012-06-26 16:02 2008-08-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 1, 2025, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
274661 - opera opera_browser Cross-site scripting (XSS) vulnerability in Opera before 9.52 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. CWE-79
Cross-site Scripting 		CVE-2008-4196 2011-02-2 03:09 2008-09-27 Show GitHub Exploit DB Packet Storm
274662 - typo3 ttpedit SQL injection vulnerability in the TT_Products editor (ttpedit) extension 0.0.2 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. CWE-89
SQL Injection 		CVE-2010-0338 2011-02-1 14:00 2010-01-16 Show GitHub Exploit DB Packet Storm
274663 - phpmyadmin phpmyadmin libraries/File.class.php in phpMyAdmin 2.11.x before 2.11.10 uses predictable filenames for temporary files, which has unknown impact and attack vectors. CWE-310
Cryptographic Issues 		CVE-2008-7252 2011-01-28 14:00 2010-01-20 Show GitHub Exploit DB Packet Storm
274664 - php php Multiple format string vulnerabilities in the phar extension in PHP 5.3 before 5.3.2 allow context-dependent attackers to obtain sensitive information (memory contents) and possibly execute arbitrary… CWE-134
Use of Externally-Controlled Format String 		CVE-2010-2094 2011-01-26 15:48 2010-05-28 Show GitHub Exploit DB Packet Storm
274665 - ibm
openafs 		afs
openafs 		The cache manager in the client in OpenAFS 1.0 through 1.4.8 and 1.5.0 through 1.5.58, and IBM AFS 3.6 before Patch 19, on Linux allows remote attackers to cause a denial of service (system crash) vi… CWE-189
Numeric Errors 		CVE-2009-1250 2011-01-26 15:35 2009-04-9 Show GitHub Exploit DB Packet Storm
274666 - unix
openafs 		unix
openafs 		Heap-based buffer overflow in the cache manager in the client in OpenAFS 1.0 through 1.4.8 and 1.5.0 through 1.5.58 on Unix platforms allows remote attackers to cause a denial of service (system cras… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2009-1251 2011-01-26 15:35 2009-04-9 Show GitHub Exploit DB Packet Storm
274667 - typsoft typsoft_ftp_server Typsoft FTP Server 1.11, with "Sub Directory Include" enabled, allows remote attackers to cause a denial of service (crash) by sending multiple RETR commands. NOTE: it was later reported that 1.10 i… CWE-399
 Resource Management Errors 		CVE-2005-3294 2011-01-26 14:00 2005-10-24 Show GitHub Exploit DB Packet Storm
274668 - xfig xfig Stack consumption vulnerability in u_bound.c in Xfig 3.2.5b and earlier allows remote attackers to cause a denial of service (application crash) via a long string in a malformed .fig file that uses t… CWE-399
 Resource Management Errors 		CVE-2009-4228 2011-01-20 15:37 2009-12-9 Show GitHub Exploit DB Packet Storm
274669 - io-socket-ssl io-socket-ssl The verify_hostname_of_cert function in the certificate checking feature in IO-Socket-SSL (IO::Socket::SSL) 1.14 through 1.25 only matches the prefix of a hostname when no wildcard is used, which all… CWE-310
Cryptographic Issues 		CVE-2009-3024 2011-01-20 15:35 2009-09-1 Show GitHub Exploit DB Packet Storm
274670 - wordpress wordpress WordPress 2.9 before 2.9.2 allows remote authenticated users to read trash posts from other authors via a direct request with a modified p parameter. CWE-264
Permissions, Privileges, and Access Controls 		CVE-2010-0682 2011-01-19 15:55 2010-02-24 Show GitHub Exploit DB Packet Storm