Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 9, 2025, 2:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
199861 6.8 警告 ヒューレット・パッカード - HP Insight Management Agents におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2012-2003 2012-05-7 16:25 2012-05-1 Show GitHub Exploit DB Packet Storm
199862 8.3 危険 ヒューレット・パッカード - HP SNMP Agents for Linux におけるオープンリダイレクトの脆弱性 CWE-20
不適切な入力確認 		CVE-2012-2002 2012-05-7 16:24 2012-05-1 Show GitHub Exploit DB Packet Storm
199863 4.3 警告 ヒューレット・パッカード - HP SNMP Agents for Linux におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-2001 2012-05-7 16:23 2012-05-1 Show GitHub Exploit DB Packet Storm
199864 7.5 危険 ヒューレット・パッカード - HP System Health Application and Command Line Utilities における任意のコードを実行される脆弱性 CWE-noinfo
情報不足 		CVE-2012-2000 2012-05-7 16:22 2012-05-1 Show GitHub Exploit DB Packet Storm
199865 9.3 危険 WellinTech - WellinTech KingView における権限を取得される脆弱性 CWE-Other
その他 		CVE-2012-1819 2012-05-7 16:01 2011-03-22 Show GitHub Exploit DB Packet Storm
199866 7.5 危険 Apache Software Foundation - Apache Qpid におけるクラスタのメッセージ機能およびジョブ機能へアクセスされる脆弱性 CWE-287
不適切な認証 		CVE-2011-3620 2012-05-7 15:59 2012-05-3 Show GitHub Exploit DB Packet Storm
199867 6.9 警告 Quest Software Inc. - Quest Toad for Data Analysts における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-0279 2012-05-7 15:57 2012-05-1 Show GitHub Exploit DB Packet Storm
199868 6.8 警告 IBM - IBM WebSphere Application Server の Web Server プラグインにおける重要な情報を取得される脆弱性 CWE-310
暗号の問題 		CVE-2012-2162 2012-05-7 15:56 2012-03-23 Show GitHub Exploit DB Packet Storm
199869 6.4 警告 HTC Corporation - 複数の HTC の Android 上で動作する HTC IQRD サービスにおける SMS メッセージを送信される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-2217 2012-05-7 15:54 2012-05-1 Show GitHub Exploit DB Packet Storm
199870 2.1 注意 Mumble - Mumble における平文パスワードおよび設定データを取得される脆弱性 CWE-310
暗号の問題 		CVE-2012-0863 2012-05-2 15:17 2012-04-30 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 9, 2025, 4:56 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
271441 - hp mercury_testdirector_for_quality_center Unspecified vulnerability in HP TestDirector for Quality Center 9.2 before Patch8 allows remote attackers to modify data via unknown vectors. NVD-CWE-noinfo
CVE-2010-1959 2010-05-29 14:47 2010-05-28 Show GitHub Exploit DB Packet Storm
271442 - sun lightweight_availability_collection_tool Race condition in the Sun Lightweight Availability Collection Tool 3.0 on Solaris 7 through 10 allows local users to overwrite arbitrary files via unspecified vectors. CWE-362
Race Condition 		CVE-2009-2314 2010-05-29 14:39 2009-07-6 Show GitHub Exploit DB Packet Storm
271443 - go-oo go-oo Multiple heap-based buffer overflows in cppcanvas/source/mtfrenderer/emfplus.cxx in Go-oo 2.x and 3.x before 3.0.1, previously named ooo-build and related to OpenOffice.org (OOo), allow remote attack… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2009-2140 2010-05-29 14:38 2009-09-22 Show GitHub Exploit DB Packet Storm
271444 - microsoft asp.net Microsoft ASP.NET 2.0 does not prevent setting the InnerHtml property on a control that inherits from HtmlContainerControl, which allows remote attackers to conduct cross-site scripting (XSS) attacks… CWE-79
Cross-site Scripting 		CVE-2010-2084 2010-05-28 13:00 2010-05-28 Show GitHub Exploit DB Packet Storm
271445 - microsoft .net_framework The default configuration of ASP.NET in Microsoft .NET before 1.1 has a value of FALSE for the EnableViewStateMac property, which allows remote attackers to conduct cross-site scripting (XSS) attacks… CWE-79
Cross-site Scripting 		CVE-2010-2085 2010-05-28 13:00 2010-05-28 Show GitHub Exploit DB Packet Storm
271446 - apache myfaces Apache MyFaces 1.1.7 and 1.2.8, as used in IBM WebSphere Application Server and other applications, does not properly handle an unencrypted view state, which allows remote attackers to conduct cross-… CWE-79
Cross-site Scripting 		CVE-2010-2086 2010-05-28 13:00 2010-05-28 Show GitHub Exploit DB Packet Storm
271447 - microsoft asp.net ASP.NET in Microsoft .NET 3.5 does not properly handle an unencrypted view state, which allows remote attackers to conduct cross-site scripting (XSS) attacks against the form control via the __VIEWST… CWE-79
Cross-site Scripting 		CVE-2010-2088 2010-05-28 13:00 2010-05-28 Show GitHub Exploit DB Packet Storm
271448 - cmsqlite cmsqlite SQL injection vulnerability in index.php in CMSQlite 1.2 and earlier allows remote attackers to execute arbitrary SQL commands via the c parameter. CWE-89
SQL Injection 		CVE-2010-2095 2010-05-28 13:00 2010-05-28 Show GitHub Exploit DB Packet Storm
271449 - cmsqlite cmsqlite Directory traversal vulnerability in index.php in CMSQlite 1.2 and earlier allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the mod parameter. CWE-22
Path Traversal 		CVE-2010-2096 2010-05-28 13:00 2010-05-28 Show GitHub Exploit DB Packet Storm
271450 - e107 e107 bbcode/php.bb in e107 0.7.20 and earlier does not perform access control checks for all inputs that could contain the php bbcode tag, which allows remote attackers to execute arbitrary PHP code, as d… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2010-2099 2010-05-28 13:00 2010-05-28 Show GitHub Exploit DB Packet Storm