Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Nov. 18, 2024, 6:03 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
198641	4.3	警告	Antisocial Media LLC	-	WordPress 用 Antisnews テーマにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-3857	2012-03-5 11:05	2011-09-28	Show	GitHub Exploit DB Packet Storm

198642	4.3	警告	A Tasty Pixel	-	WordPress 用 Elegant Grunge テーマにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-3856	2012-03-5 11:05	2011-09-28	Show	GitHub Exploit DB Packet Storm

198643	4.3	警告	Graph Paper Press	-	WordPress 用 F8 Lite テーマにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-3855	2012-03-5 11:04	2011-09-28	Show	GitHub Exploit DB Packet Storm

198644	4.3	警告	Quirm	-	WordPress 用 ZenLite テーマにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-3854	2012-03-5 11:04	2011-09-28	Show	GitHub Exploit DB Packet Storm

198645	4.3	警告	ThemeHybrid	-	WordPress 用 Hybrid テーマにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-3853	2012-03-5 11:04	2011-09-28	Show	GitHub Exploit DB Packet Storm

198646	4.3	警告	Theme4Press	-	WordPress 用 EvoLve テーマにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-3852	2012-03-5 11:03	2011-09-28	Show	GitHub Exploit DB Packet Storm

198647	4.3	警告	DevPress	-	WordPress 用 News テーマにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-3851	2012-03-5 11:03	2011-09-28	Show	GitHub Exploit DB Packet Storm

198648	4.3	警告	Bytes For All	-	WordPress 用 Atahualpa テーマにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-3850	2012-03-5 11:02	2011-09-28	Show	GitHub Exploit DB Packet Storm

198649	5.1	警告	Mozilla Foundation	-	Bugzilla の xmlrpc.cgi におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2012-0453	2012-03-2 15:18	2012-02-9	Show	GitHub Exploit DB Packet Storm

198650	9.3	危険	シスコシステムズ	-	Cisco Wireless LAN Controller デバイスにおける設定を読まれる脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-0371	2012-03-2 15:04	2012-02-29	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:Nov. 18, 2024, 4:13 p.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
260041	-	ovislink	airlive_od-2025hd airlive_od-2060hd airlive_poe100hd airlive_poe200hd airlive_poe250hd airlive_poe2600hd	Cross-site request forgery (CSRF) vulnerability in cgi-bin/admin/usrgrp.cgi in AirLive POE2600HD, POE250HD, POE200HD, OD-325HD, OD-2025HD, OD-2060HD, POE100HD, and possibly other camera models allows…	CWE-352 Origin Validation Error	CVE-2013-3540	2013-10-7 23:55	2013-10-5	Show	GitHub Exploit DB Packet Storm

260042	-	citrix	netscaler_application_delivery_controller_firmware netscaler_application_delivery_controller	Citrix NetScaler Application Delivery Controller (ADC) 10.0 before 10.0-76.7 allows remote attackers to cause a denial of service (nsconfigd crash and appliance reboot) via a crafted request.	CWE-20 Improper Input Validation	CVE-2013-6011	2013-10-7 23:52	2013-10-5	Show	GitHub Exploit DB Packet Storm

260043	-	rsyslog	rsyslog	Double free vulnerability in the writeDataError function in the ElasticSearch plugin (omelasticsearch) in rsyslog before 7.4.2 and before 7.5.2 devel, when errorfile is set to local logging, allows r…	CWE-399 Resource Management Errors	CVE-2013-4758	2013-10-7 23:29	2013-10-5	Show	GitHub Exploit DB Packet Storm

260044	-	iij	seil\%2fx1_firmware seil\/x1 seil\%2fb1_firmware seil\/b1 seil\%2fx2_firmware seil\/x2 seil\%2fx86_firmware seil\/x86 seil\%2fturbo_firmware seil\/turbo seil\%2fneu_2fe_…	The PPP Access Concentrator (PPPAC) in Internet Initiative Japan Inc. SEIL/x86 1.00 through 2.80, SEIL/X1 1.00 through 4.30, SEIL/X2 1.00 through 4.30, SEIL/B1 1.00 through 4.30, SEIL/Turbo 1.80 thro…	CWE-310 Cryptographic Issues	CVE-2013-4708	2013-10-7 23:06	2013-10-2	Show	GitHub Exploit DB Packet Storm

260045	-	corel	pdf_fusion	Stack-based buffer overflow in Corel PDF Fusion 1.11 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a long ZIP directory entry name in an XPS f…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2013-0742	2013-10-7 22:35	2013-10-4	Show	GitHub Exploit DB Packet Storm

260046	-	apple	mac_os_x	Directory Services in Apple Mac OS X before 10.8.5 Supplemental Update allows local users to bypass password-based authentication and modify arbitrary Directory Services records via unspecified vecto…	CWE-287 Improper Authentication	CVE-2013-5163	2013-10-7 22:06	2013-10-4	Show	GitHub Exploit DB Packet Storm

260047	-	apple	mac_os_x	per http://lists.apple.com/archives/security-announce/2013/Oct/msg00000.html version 10.8.5 is vulnerable.	CWE-287 Improper Authentication	CVE-2013-5163	2013-10-7 22:06	2013-10-4	Show	GitHub Exploit DB Packet Storm

260048	-	martin_pitt canonical	jockey ubuntu_linux	backend.py in Jockey before 0.9.7-0ubuntu7.11 does not properly use D-Bus for communication with a polkit authority, which allows local users to bypass intended access restrictions by leveraging a Po…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2013-1065	2013-10-5 01:59	2013-10-4	Show	GitHub Exploit DB Packet Storm

260049	-	canonical evan_dandrea	ubuntu_linux usb-creator	usb-creator 0.2.47 before 0.2.47.1, 0.2.40 before 0.2.40ubuntu2, and 0.2.38 before 0.2.38.2 does not properly use D-Bus for communication with a polkit authority, which allows local users to bypass i…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2013-1063	2013-10-5 01:58	2013-10-4	Show	GitHub Exploit DB Packet Storm

260050	-	tp-link	tl-sc3130 tl-sc3130g tl-sc3171 tl-sc3171g lm_firmware	The TP-Link IP Cameras TL-SC3171, TL-SC3130, TL-SC3130G, TL-SC3171G, and possibly other models before beta firmware LM.1.6.18P12_sign6, does not properly restrict access to certain administrative fun…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2013-3688	2013-10-5 01:43	2013-10-2	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed