Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Nov. 19, 2024, 6:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
198771 7.5 危険 php-programs - APBoard Developers APBoard の board/board.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-4955 2012-02-29 14:06 2011-10-9 Show GitHub Exploit DB Packet Storm
198772 7.5 危険 Gambio - xt:Commerce Gambio 2008 の product_reviews_info.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-4954 2012-02-29 14:05 2011-10-9 Show GitHub Exploit DB Packet Storm
198773 10 危険 Jens Witt - TYPO3 用 JW Calendar エクステンションにおける任意のコードを実行される脆弱性 CWE-noinfo
情報不足 		CVE-2010-4953 2012-02-29 11:55 2011-10-9 Show GitHub Exploit DB Packet Storm
198774 7.5 危険 Joachim Ruhs - TYPO3 用 FE user statistic エクステンションにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-4952 2012-02-29 11:51 2011-10-9 Show GitHub Exploit DB Packet Storm
198775 5 警告 Thomas Mammitzsch - TYPO3 用 xaJax Shoutbox エクステンションにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-4951 2012-02-29 11:48 2011-10-9 Show GitHub Exploit DB Packet Storm
198776 7.5 危険 Joachim Ruhs - TYPO3 用 Event エクステンションにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-4950 2012-02-29 11:42 2011-10-9 Show GitHub Exploit DB Packet Storm
198777 4.3 警告 Codologic.com - Joomla! 用 FreiChat および FreiChatPure におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-4949 2012-02-29 11:21 2011-10-9 Show GitHub Exploit DB Packet Storm
198778 7.5 危険 Phpgalleryscript - PHP Free Photo Gallery script における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2010-4948 2012-02-29 11:19 2011-10-9 Show GitHub Exploit DB Packet Storm
198779 4.3 警告 Allpcscript - ALLPC の advanced_search_result.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-4947 2012-02-29 11:17 2011-10-9 Show GitHub Exploit DB Packet Storm
198780 7.5 危険 Allpcscript - ALLPC の product_info.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-4946 2012-02-29 11:16 2011-10-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Nov. 19, 2024, 4:16 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
261391 - cisco 200_series_smart_switches
300_series_managed_switches
200_series_smart_switches_software
500_series_stackable_managed_switches 		The Cisco Small Business 200 Series Smart Switch 1.2.7.76 and earlier, Small Business 300 Series Managed Switch 1.2.7.76 and earlier, and Small Business 500 Series Stackable Managed Switch 1.2.7.76 a… CWE-399
 Resource Management Errors 		CVE-2013-1154 2013-03-9 01:24 2013-03-8 Show GitHub Exploit DB Packet Storm
261392 - nec universal_raid_utility NEC Universal RAID Utility 1.40 Rev 680 and earlier, 2.31 Rev 1492 and earlier, and 2.5 Rev 2244 and earlier does not provide access control, which allows remote attackers to perform arbitrary RAID d… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2013-0706 2013-03-8 14:00 2013-02-22 Show GitHub Exploit DB Packet Storm
261393 - cisco prime_infrastructure Cross-site request forgery (CSRF) vulnerability in the web interface in Cisco Prime Infrastructure allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCue84676. CWE-352
 Origin Validation Error 		CVE-2013-1153 2013-03-8 14:00 2013-03-8 Show GitHub Exploit DB Packet Storm
261394 - google chrome_frame The Hook_Terminate function in chrome_frame/protocol_sink_wrap.cc in the Google Chrome Frame plugin before 26.0.1410.28 for Internet Explorer does not properly handle attach tab requests, which allow… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2013-2493 2013-03-8 14:00 2013-03-8 Show GitHub Exploit DB Packet Storm
261395 - opera opera_browser The TLS implementation in Opera before 12.13 does not properly consider timing side-channel attacks on a MAC check operation during the processing of malformed CBC padding, which allows remote attack… CWE-310
Cryptographic Issues 		CVE-2013-1618 2013-03-8 13:12 2013-02-9 Show GitHub Exploit DB Packet Storm
261396 - polarssl polarssl Array index error in the SSL module in PolarSSL before 1.2.5 might allow remote attackers to cause a denial of service via vectors involving a crafted padding-length value during validation of CBC pa… CWE-20
 Improper Input Validation  		CVE-2013-1621 2013-03-8 13:12 2013-02-9 Show GitHub Exploit DB Packet Storm
261397 - opera opera_browser Opera before 12.13 allows remote attackers to execute arbitrary code via vectors involving DOM events. CWE-94
Code Injection 		CVE-2013-1637 2013-03-8 13:12 2013-02-8 Show GitHub Exploit DB Packet Storm
261398 - opera opera_browser Opera before 12.13 allows remote attackers to execute arbitrary code via crafted clipPaths in an SVG document. CWE-94
Code Injection 		CVE-2013-1638 2013-03-8 13:12 2013-02-8 Show GitHub Exploit DB Packet Storm
261399 - opera opera_browser Opera before 12.13 does not send CORS preflight requests in all required cases, which allows remote attackers to bypass a CSRF protection mechanism via a crafted web site that triggers a CORS request. CWE-352
 Origin Validation Error 		CVE-2013-1639 2013-03-8 13:12 2013-02-8 Show GitHub Exploit DB Packet Storm
261400 - linux linux_kernel The xen_failsafe_callback function in Xen for the Linux kernel 2.6.23 and other versions, when running a 32-bit PVOPS guest, allows local users to cause a denial of service (guest crash) by triggerin… CWE-20
 Improper Input Validation  		CVE-2013-0190 2013-03-8 13:11 2013-02-13 Show GitHub Exploit DB Packet Storm