Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
201941 5 警告 Bloxx - Bloxx Web Filtering における IP アドレスとドメインの制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-2566 2012-06-12 15:19 2011-06-9 Show GitHub Exploit DB Packet Storm
201942 5.8 警告 Bloxx - Bloxx Web Filtering における平文パスワードを容易に推測される脆弱 CWE-264
認可・権限・アクセス制御 		CVE-2012-2565 2012-06-12 15:17 2011-06-9 Show GitHub Exploit DB Packet Storm
201943 6.8 警告 Bloxx - Bloxx Web Filtering の管理インターフェースにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2012-2564 2012-06-12 15:14 2011-06-9 Show GitHub Exploit DB Packet Storm
201944 4.3 警告 Bloxx - Bloxx Web Filtering におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-2563 2012-06-12 15:10 2011-06-9 Show GitHub Exploit DB Packet Storm
201945 5.8 警告 シーメンス - Siemens WinCC の Web アプリケーションにおけるオープンリダイレクトの脆弱性 CWE-20
不適切な入力確認 		CVE-2012-3003 2012-06-12 14:31 2012-06-5 Show GitHub Exploit DB Packet Storm
201946 4.3 警告 シーメンス - Siemens WinCC の DiagAgent Web サーバにおけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2012-2598 2012-06-12 14:27 2012-06-5 Show GitHub Exploit DB Packet Storm
201947 4 警告 シーメンス - Siemens WinCC におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2012-2597 2012-06-12 14:26 2012-06-5 Show GitHub Exploit DB Packet Storm
201948 5.5 警告 シーメンス - Siemens WinCC の Web アプリケーションの XPath 機能における設定を読まれる脆弱性 CWE-94
コード・インジェクション 		CVE-2012-2596 2012-06-12 14:22 2012-06-5 Show GitHub Exploit DB Packet Storm
201949 4.3 警告 シーメンス - Siemens WinCC の Web アプリケーションにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-2595 2012-06-12 14:02 2012-06-5 Show GitHub Exploit DB Packet Storm
201950 6.4 警告 エマソン - Emerson の DeltaV 製品の ActiveX コントロールにおける任意のファイルを上書きされる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-1818 2012-06-12 12:30 2012-05-30 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 26, 2025, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
266851 - innovaage innovashop Multiple cross-site scripting (XSS) vulnerabilities in InnovaAge InnovaShop allow remote attackers to inject arbitrary web script or HTML via the (1) msg parameter to msg.jsp, and the (2) contentid p… CWE-79
Cross-site Scripting 		CVE-2007-5480 2017-07-29 10:33 2007-10-17 Show GitHub Exploit DB Packet Storm
266852 - distributed_checksum_clearinghouse dcc Distributed Checksum Clearinghouse (DCC) 1.3.65 allows remote attackers to cause a denial of service (crash) via a "SOCKS flood." NVD-CWE-Other
CVE-2007-5481 2017-07-29 10:33 2007-10-17 Show GitHub Exploit DB Packet Storm
266853 - sun storagetek_3510
storedge 		Unspecified vulnerability in the FTP service in Sun StorEdge/StorageTek 3510 FC Array with firmware before 4.21 allows remote attackers, with access to the Ethernet management interface, to cause a d… NVD-CWE-noinfo
CVE-2007-5482 2017-07-29 10:33 2007-10-17 Show GitHub Exploit DB Packet Storm
266854 - ibm websphere_application_server Unspecified vulnerability in the Administrative Scripting Tools (such as wsadmin or ANT) in IBM WebSphere Application Server 5.x and 6.0.x has unknown impact and attack vectors. NVD-CWE-noinfo
CVE-2007-5483 2017-07-29 10:33 2007-10-17 Show GitHub Exploit DB Packet Storm
266855 - dotproject dotproject dotProject before 2.1 does not properly check privileges when invoking the Companies module, which allows remote attackers to access this module via a crafted URL. NOTE: some of these details are ob… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2007-5486 2017-07-29 10:33 2007-10-17 Show GitHub Exploit DB Packet Storm
266856 - asterisk asterisk-addons Multiple SQL injection vulnerabilities in cdr_addon_mysql in Asterisk-Addons before 1.2.8, and 1.4.x before 1.4.4, allow remote attackers to execute arbitrary SQL commands via the (1) source and (2) … CWE-89
SQL Injection 		CVE-2007-5488 2017-07-29 10:33 2007-10-18 Show GitHub Exploit DB Packet Storm
266857 - openssl fips_object_module The PRNG implementation for the OpenSSL FIPS Object Module 1.1.1 does not perform auto-seeding during the FIPS self-test, which generates random data that is more predictable than expected and makes … CWE-310
Cryptographic Issues 		CVE-2007-5502 2017-07-29 10:33 2007-12-1 Show GitHub Exploit DB Packet Storm
266858 - runcms runcms Unspecified vulnerability in newbb_plus in RunCms 1.5.2 has unknown impact and attack vectors. NVD-CWE-noinfo
CVE-2007-5535 2017-07-29 10:33 2007-10-18 Show GitHub Exploit DB Packet Storm
266859 - cisco unified_callmanager
unified_communications_manager 		Cisco Unified Communications Manager (CUCM, formerly CallManager) 5.1 before 5.1(2), and Unified CallManager 5.0, allow remote attackers to cause a denial of service (kernel panic) via a flood of SIP… CWE-399
 Resource Management Errors 		CVE-2007-5537 2017-07-29 10:33 2007-10-18 Show GitHub Exploit DB Packet Storm
266860 - cisco unified_callmanager
unified_communications_manager 		Buffer overflow in the Centralized TFTP File Locator Service in Cisco Unified Communications Manager (CUCM, formerly CallManager) 5.1 before 5.1(3), and Unified CallManager 5.0, allows remote attacke… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2007-5538 2017-07-29 10:33 2007-10-18 Show GitHub Exploit DB Packet Storm