Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Nov. 18, 2024, 4:02 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
199071 4.3 警告 Google - Android の Bluetooth サービスにおける連絡先データを取得される脆弱性 CWE-200
情報漏えい 		CVE-2011-4276 2012-01-27 15:43 2011-10-28 Show GitHub Exploit DB Packet Storm
199072 5.8 警告 Tencent - Android 用 Tencent QQPhoto における連絡先情報およびパスワードハッシュを読まれる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2011-4867 2012-01-27 15:18 2012-01-25 Show GitHub Exploit DB Packet Storm
199073 6.4 警告 Kaixin001 - Android 用 Kaixin001 における連絡先情報および平文パスワードを読まれる脆弱性 CWE-200
情報漏えい 		CVE-2011-4866 2012-01-27 15:18 2012-01-25 Show GitHub Exploit DB Packet Storm
199074 5.8 警告 Tencent - Android 用 Tencent WBlog および MicroBlogPad におけるドラフトメッセージおよび検索キーワードを読まれる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2011-4865 2012-01-27 15:12 2012-01-25 Show GitHub Exploit DB Packet Storm
199075 5.8 警告 Tencent - Android 用 Tencent MobileQQ におけるメッセージおよびフレンドリストを読まれる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2011-4864 2012-01-27 15:10 2012-01-25 Show GitHub Exploit DB Packet Storm
199076 5.8 警告 Tencent - Android 用 Tencent QQPimSecure における SMS/MMS メッセージおよび連絡先リストを読まれる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2011-4863 2012-01-27 15:08 2012-01-25 Show GitHub Exploit DB Packet Storm
199077 5.8 警告 AnGuanJia - Android 用 AnGuanJia における SMS/MMS メッセージおよび連絡先リストを読まれる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2011-4773 2012-01-27 15:07 2012-01-25 Show GitHub Exploit DB Packet Storm
199078 5.8 警告 Qihoo 360 Technology - Android 用 360 KouXin における SMS メッセージおよび連絡先リストを読まれる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2011-4772 2012-01-27 15:06 2012-01-25 Show GitHub Exploit DB Packet Storm
199079 5.8 警告 Lucion Technologies - Android 用 Scan to PDF Free におけるスキャンされたファイルおよび Google アカウントを読まれる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2011-4771 2012-01-27 15:05 2012-01-25 Show GitHub Exploit DB Packet Storm
199080 5.8 警告 QIWI Wallet - Android 用 QIWI Wallet における金銭に関する情報を読まれる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2011-4770 2012-01-27 15:03 2012-01-25 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Nov. 18, 2024, 4:13 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
268721 - apple safari Cross-domain vulnerability in Apple Safari for Windows 3.0.1 allows remote attackers to bypass the "same origin policy" and access restricted information from other domains via JavaScript that overwr… CWE-79
Cross-site Scripting 		CVE-2007-3482 2008-11-15 14:00 2007-06-29 Show GitHub Exploit DB Packet Storm
268722 - squirrelmail gpg_plugin Unspecified vulnerability in the G/PGP (GPG) Plugin 2.0 for Squirrelmail 1.4.10a allows remote authenticated users to execute arbitrary commands via unspecified vectors, possibly related to the passp… NVD-CWE-noinfo
CVE-2007-3634 2008-11-15 14:00 2007-07-10 Show GitHub Exploit DB Packet Storm
268723 - squirrelmail gpg_plugin
squirrelmail 		Multiple unspecified vulnerabilities in the G/PGP (GPG) Plugin before 2.1 for Squirrelmail might allow "local authenticated users" to inject certain commands via unspecified vectors. NOTE: this might… NVD-CWE-noinfo
CVE-2007-3635 2008-11-15 14:00 2007-07-10 Show GitHub Exploit DB Packet Storm
268724 - mkportal mkportal SQL injection vulnerability in MKPortal 1.1.1 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, aka ZD-00000008. this information is based upon a vague advisory by a… CWE-89
SQL Injection 		CVE-2007-3637 2008-11-15 14:00 2007-07-10 Show GitHub Exploit DB Packet Storm
268725 - numedia_soft_inc nmsdvdx_dvd_burning_sdk Multiple unspecified vulnerabilities in NMSDVDXU.DLL in NuMedia NMSDVDX allow remote attackers to cause a denial of service via "improperly initialized" (1) LoadSegmentWord, (2) PartitionType, (3) Se… NVD-CWE-noinfo
CVE-2007-3668 2008-11-15 14:00 2007-07-11 Show GitHub Exploit DB Packet Storm
268726 - innovasys dockstudioxp Multiple unspecified vulnerabilities in the Innovasys DockStudioXP InnovaDSXP2.OCX ActiveX Control have unspecified attack vectors and impact, including a denial of service via "improper use" of the … NVD-CWE-noinfo
CVE-2007-3669 2008-11-15 14:00 2007-07-11 Show GitHub Exploit DB Packet Storm
268727 - fsp c_library Multiple stack-based buffer overflows in fsplib.c in fsplib before 0.9 might allow remote attackers to execute arbitrary code via (1) a long filename that is not properly handled by the fsp_readdir_n… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2007-3962 2008-11-15 14:00 2007-07-26 Show GitHub Exploit DB Packet Storm
268728 - opera opera_browser The canvas.createPattern function in Opera 9.x before 9.22 for Linux, FreeBSD, and Solaris does not clear memory before using it to process a new pattern, which allows remote attackers to obtain sens… NVD-CWE-Other
CVE-2007-4944 2008-11-15 14:00 2007-09-19 Show GitHub Exploit DB Packet Storm
268729 - wilson_windowware webbatch webbatch.exe in WebBatch allows remote attackers to obtain sensitive information via the dumpinputdata parameter. CWE-200
Information Exposure 		CVE-2007-5011 2008-11-15 14:00 2007-09-21 Show GitHub Exploit DB Packet Storm
268730 - suse suse_linux Untrusted search path vulnerability in yast2-core in SUSE Linux might allow local users to execute arbitrary code by creating a malicious yast2 module in the current working directory. CWE-264
Permissions, Privileges, and Access Controls 		CVE-2007-6167 2008-11-15 14:00 2007-11-29 Show GitHub Exploit DB Packet Storm