Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Dec. 29, 2024, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
199291	8.3	危険	VMware	-	複数の VMware 製品におけるゲスト OS の権限を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-1518	2012-04-19 15:44	2012-04-12	Show	GitHub Exploit DB Packet Storm

199292	5.1	警告	Igor Sysoev	-	nginx の ngx_http_mp4_module.c におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2012-2089	2012-04-19 15:41	2012-04-17	Show	GitHub Exploit DB Packet Storm

199293	3.5	注意	SyndeoCMS	-	SyndeoCMS の starnet/index.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-1979	2012-04-19 15:37	2012-04-17	Show	GitHub Exploit DB Packet Storm

199294	9.3	危険	Google	-	Google SketchUp における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2011-2478	2012-04-19 15:24	2012-04-17	Show	GitHub Exploit DB Packet Storm

199295	4.3	警告	アップル PNG Development Group サン・マイクロシステムズ	-	libpng の pngrtran.c におけるサービス運用妨害 (DoS) の脆弱性	CWE-DesignError	CVE-2007-5268	2012-04-18 18:53	2007-10-8	Show	GitHub Exploit DB Packet Storm

199296	4.3	警告	アップル PNG Development Group サン・マイクロシステムズ	-	libpng の pngset.c における一つずれエラーの脆弱性	CWE-189 数値処理の問題	CVE-2007-5267	2012-04-18 18:52	2007-10-8	Show	GitHub Exploit DB Packet Storm

199297	4.3	警告	アップル PNG Development Group サン・マイクロシステムズ	-	libpng の pngset.c における一つずれエラーの脆弱性	CWE-189 数値処理の問題	CVE-2007-5266	2012-04-18 18:51	2007-10-18	Show	GitHub Exploit DB Packet Storm

199298	4.3	警告	アップルサイバートラスト株式会社 PNG Development Group サン・マイクロシステムズ VMware レッドハット	-	libpng における初期化されていないメモリ内の情報の一部を読まれる脆弱性	CWE-200 情報漏えい	CVE-2009-2042	2012-04-18 18:50	2009-06-12	Show	GitHub Exploit DB Packet Storm

199299	7.5	危険	アップルサイバートラスト株式会社 PNG Development Group サン・マイクロシステムズレッドハット	-	libpng の PNG ファイル処理における任意のコードを実行される脆弱性	CWE-189 数値処理の問題	CVE-2008-1382	2012-04-18 17:58	2008-04-14	Show	GitHub Exploit DB Packet Storm

199300	5	警告	アップルサイバートラスト株式会社 PNG Development Group サン・マイクロシステムズレッドハット	-	libpng の複数のチャンクハンドラにおけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2007-5269	2012-04-18 17:57	2007-10-8	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:Dec. 29, 2024, 4:05 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
270081	-	osticket	osticket	Cross-site scripting (XSS) vulnerability in scp/ajax.php in osTicket before 1.6.0 Stable allows remote authenticated users to inject arbitrary web script or HTML via the f parameter, possibly related…	CWE-79 Cross-site Scripting	CVE-2010-0606	2010-11-4 03:16	2010-02-12	Show	GitHub Exploit DB Packet Storm

270082	-	novaboard	novaboard	SQL injection vulnerability in header.php in NovaBoard 1.1.2 allows remote attackers to execute arbitrary SQL commands via the nova_name cookie parameter. NOTE: the provenance of this information is…	CWE-89 SQL Injection	CVE-2010-0609	2010-11-4 02:46	2010-02-12	Show	GitHub Exploit DB Packet Storm

270083	-	ibm	websphere_application_server	The Single Sign-on (SSO) functionality in IBM WebSphere Application Server (WAS) 7.0.0.0 through 7.0.0.8 does not recognize the Requires SSL configuration option, which might allow remote attackers t…	CWE-200 Information Exposure	CVE-2010-0563	2010-11-3 13:00	2010-02-9	Show	GitHub Exploit DB Packet Storm

270084	-	nos_microsystems	getplus_download_manager	Stack-based buffer overflow in the getPlus ActiveX control in gp.ocx 1.2.2.50 in NOS Microsystems getPlus Download Manager, as used for the Adobe Reader 8.1 installation process and other downloads, …	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2008-5364	2010-10-25 13:00	2008-12-8	Show	GitHub Exploit DB Packet Storm

270085	-	ibm	db2	The Install component in IBM DB2 9.5 before FP5 and 9.7 before FP1 configures the High Availability (HA) scripts with incorrect file-permission and authorization settings, which has unknown impact an…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2009-4331	2010-10-7 14:44	2009-12-17	Show	GitHub Exploit DB Packet Storm

270086	-	ibm	db2	IBM DB2 8 before FP18, 9.1 before FP8, 9.5 before FP4, and 9.7 before FP2 does not perform the expected drops of certain table functions upon a loss of privileges by the functions' definers, which ha…	NVD-CWE-noinfo	CVE-2009-3471	2010-10-7 14:42	2009-09-30	Show	GitHub Exploit DB Packet Storm

270087	-	opera	opera_browser	Opera before 10.10 permits cross-origin loading of CSS stylesheets even when the stylesheet download has an incorrect MIME type and the stylesheet document is malformed, which allows remote attackers…	CWE-200 Information Exposure	CVE-2010-0653	2010-09-21 14:46	2010-02-19	Show	GitHub Exploit DB Packet Storm

270088	-	fujitsu	e-pares	Session fixation vulnerability in Fujitsu e-Pares V01 L01, L03, L10, L20, L30 allows remote attackers to hijack web sessions via unspecified vectors.	CWE-287 Improper Authentication	CVE-2010-2149	2010-09-21 13:00	2010-06-4	Show	GitHub Exploit DB Packet Storm

270089	-	linux	linux_kernel	umount, when running with the Linux 2.6.15 kernel on Slackware Linux 10.2, allows local users to trigger a NULL dereference and application crash by invoking the program with a pathname for a USB pen…	NVD-CWE-Other	CVE-2007-0822	2010-09-15 14:43	2007-02-8	Show	GitHub Exploit DB Packet Storm

270090	-	suse	suse_linux	Multiple buffer overflows in ulogd for SUSE Linux 9.3 up to 10.1, and possibly other distributions, have unknown impact and attack vectors related to "improper string length calculations."	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2007-0460	2010-09-15 14:41	2007-01-24	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed