Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Nov. 19, 2024, 12:03 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
199511	4.3	警告	The phpMyAdmin Project	-	phpMyAdmin の libraries/display_export.lib.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-4780	2011-12-26 16:30	2011-12-21	Show	GitHub Exploit DB Packet Storm

199512	4.3	警告	The phpMyAdmin Project	-	phpMyAdmin の libraries/config/ConfigFile.class.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-4782	2011-12-26 16:29	2011-12-21	Show	GitHub Exploit DB Packet Storm

199513	6.5	警告	WordPress.org	-	WordPress において任意の PHP コードが実行可能な脆弱性	CWE-94 コード・インジェクション	-	2011-12-26 14:27	2011-12-26	Show	GitHub Exploit DB Packet Storm

199514	4.3	警告	WordPress.org	-	WordPress 日本語版におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	-	2011-12-26 12:01	2011-12-26	Show	GitHub Exploit DB Packet Storm

199515	4.3	警告	藤本壱	-	Movable Type 用メールフォームプラグインにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2007-6751	2011-12-26 12:00	2011-12-26	Show	GitHub Exploit DB Packet Storm

199516	7.2	危険	FreeBSD	-	FreeBSD のカーネルにおけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2011-4062	2011-12-26 10:43	2011-09-28	Show	GitHub Exploit DB Packet Storm

199517	6.8	警告	Mozilla Foundation	-	Mac OS X 上で稼働する Mozilla Firefox および Thunderbird におけるアクセス制限を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-3666	2011-12-22 15:43	2011-12-20	Show	GitHub Exploit DB Packet Storm

199518	7.5	危険	Mozilla Foundation	-	複数の Mozilla 製品におけるサービス運用妨害 (アプリケーションクラッシュ) の脆弱性	CWE-399 リソース管理の問題	CVE-2011-3665	2011-12-22 15:43	2011-12-20	Show	GitHub Exploit DB Packet Storm

199519	6.8	警告	Mozilla Foundation	-	Mac OS X 上で稼働する複数の Mozilla 製品におけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2011-3664	2011-12-22 15:42	2011-12-20	Show	GitHub Exploit DB Packet Storm

199520	4.3	警告	Mozilla Foundation	-	複数の Mozilla 製品におけるキー入力をキャプチャされる脆弱性	CWE-200 情報漏えい	CVE-2011-3663	2011-12-22 15:42	2011-12-20	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:Nov. 19, 2024, 1:08 p.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
261591	-	colorbox_node	dennis_blake	Multiple cross-site scripting (XSS) vulnerabilities in the Colorbox Node module 7.x-2.x before 7.x-2.2 for Drupal allow remote attackers to inject arbitrary web script or HTML via unspecified paramet…	CWE-79 Cross-site Scripting	CVE-2012-4474	2013-01-30 13:54	2012-12-1	Show	GitHub Exploit DB Packet Storm

261592	-	sixapart	movable_type	lib/MT/Upgrade.pm in mt-upgrade.cgi in Movable Type 4.2x and 4.3x through 4.38 does not require authentication for requests to database-migration functions, which allows remote attackers to conduct e…	CWE-287 Improper Authentication	CVE-2013-0209	2013-01-29 14:00	2013-01-23	Show	GitHub Exploit DB Packet Storm

261593	-	ge	intelligent_platforms_proficy_hmi\/scada_cimplicity intelligent_platforms_proficy_process_systems_with_cimplicity intelligent_platforms_proficy_process_systems	Directory traversal vulnerability in substitute.bcl in the WebView CimWeb subsystem in GE Intelligent Platforms Proficy HMI/SCADA - CIMPLICITY 4.01 through 8.0, and Proficy Process Systems with CIMPL…	CWE-22 Path Traversal	CVE-2013-0653	2013-01-29 14:00	2013-01-28	Show	GitHub Exploit DB Packet Storm

261594	-	ge	intelligent_platforms_proficy_hmi\/scada_cimplicity intelligent_platforms_proficy_process_systems_with_cimplicity intelligent_platforms_proficy_process_systems	CimWebServer in GE Intelligent Platforms Proficy HMI/SCADA - CIMPLICITY 4.01 through 8.0, and Proficy Process Systems with CIMPLICITY, allows remote attackers to execute arbitrary commands or cause a…	CWE-20 Improper Input Validation	CVE-2013-0654	2013-01-29 14:00	2013-01-28	Show	GitHub Exploit DB Packet Storm

261595	-	sitecom	wlm-2501	Multiple cross-site request forgery (CSRF) vulnerabilities in Sitecom WLM-2501 allow remote attackers to hijack the authentication of administrators for requests that modify settings for (1) Mac Filt…	CWE-352 Origin Validation Error	CVE-2012-1922	2013-01-29 14:00	2013-01-24	Show	GitHub Exploit DB Packet Storm

261596	-	ge	intelligent_platforms_proficy_hmi\/scada_cimplicity intelligent_platforms_proficy_process_systems_with_cimplicity intelligent_platforms_proficy_process_systems	Integer overflow in CimWebServer.exe in GE Intelligent Platforms Proficy HMI/SCADA - CIMPLICITY 4.01 through 8.0, and Proficy Process Systems with CIMPLICITY, allows remote attackers to cause a denia…	CWE-189 Numeric Errors	CVE-2012-4689	2013-01-29 14:00	2013-01-18	Show	GitHub Exploit DB Packet Storm

261597	-	siemens	automation_license_manager	Memory leak in Siemens Automation License Manager (ALM) 4.x and 5.x before 5.2 allows remote attackers to cause a denial of service (memory consumption) via crafted packets.	CWE-399 Resource Management Errors	CVE-2012-4691	2013-01-29 14:00	2012-12-18	Show	GitHub Exploit DB Packet Storm

261598	-	siemens	automation_license_manager	Per: http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-783261.pdf "The attacker must have access to the local subnet where ALM is located. During i…	CWE-399 Resource Management Errors	CVE-2012-4691	2013-01-29 14:00	2012-12-18	Show	GitHub Exploit DB Packet Storm

261599	-	tropos	mesh_os 1310_distrubution_automation_mesh_router 1410_mesh_router 1410_wireless_mesh_router 3310_indoor_mesh_router 3320_indoor_mesh_router 4310_mobile_mesh_router 6310_mesh_rout…	Mesh OS before 7.9.1.1 on Tropos wireless mesh routers does not use a sufficient source of entropy for SSH keys, which makes it easier for man-in-the-middle attackers to spoof a device or modify a cl…	CWE-310 Cryptographic Issues	CVE-2012-4898	2013-01-29 14:00	2012-12-18	Show	GitHub Exploit DB Packet Storm

261600	-	welcart	welcart_plugin	Cross-site request forgery (CSRF) vulnerability in the Welcart plugin before 1.2.2 for WordPress allows remote attackers to hijack the authentication of arbitrary users for requests that complete a p…	CWE-352 Origin Validation Error	CVE-2012-5178	2013-01-29 14:00	2012-12-19	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed