Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Jan. 31, 2025, 4:03 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
202071	4.3	警告	dlo	-	WordPress 用 Sabre プラグインにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-2916	2012-05-23 18:46	2012-05-21	Show	GitHub Exploit DB Packet Storm

202072	4.3	警告	Hind	-	WordPress 用 Leaflet プラグインにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-2913	2012-05-23 18:41	2012-05-21	Show	GitHub Exploit DB Packet Storm

202073	4.3	警告	Kolja Schleich	-	WordPress 用 LeagueManager プラグインにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-2912	2012-05-23 18:25	2012-05-21	Show	GitHub Exploit DB Packet Storm

202074	5	警告	Chevereto Software	-	Chevereto の Upload/engine.php におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2012-2919	2012-05-23 18:19	2012-05-21	Show	GitHub Exploit DB Packet Storm

202075	4.3	警告	Chevereto Software	-	Chevereto の Upload/engine.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-2918	2012-05-23 18:18	2012-05-21	Show	GitHub Exploit DB Packet Storm

202076	7.5	危険	Johan Cwiklinski	-	Galette の includes/picture.class.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2012-2338	2012-05-23 18:16	2012-05-21	Show	GitHub Exploit DB Packet Storm

202077	10	危険	DMSoft Technologies	-	SkinCrafter の InitLicenKeys 関数におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2012-2271	2012-05-23 18:15	2012-05-21	Show	GitHub Exploit DB Packet Storm

202078	9.3	危険	Lattice Semiconductor	-	Lattice Semiconductor PAC-Designer におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2012-2915	2012-05-23 18:04	2012-05-21	Show	GitHub Exploit DB Packet Storm

202079	5	警告	リアルネットワークス	-	RealNetworks RealPlayer および RealPlayer SP におけるサービス運用妨害 (DoS) の脆弱性	CWE-119 バッファエラー	CVE-2012-1904	2012-05-23 18:04	2012-03-28	Show	GitHub Exploit DB Packet Storm

202080	4.3	警告	unijimpe	-	Unijimpe Captcha の captchademo.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-2914	2012-05-23 18:02	2012-05-21	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:Feb. 2, 2025, 4:09 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
270131	-	linux ubuntu	linux_kernel ubuntu_linux	Race condition in SELinux 2.6.x through 2.6.9 allows local users to cause a denial of service (kernel crash) via SOCK_SEQPACKET unix domain sockets, which are not properly handled in the sock_dgram_s…	NVD-CWE-Other	CVE-2004-1069	2017-07-11 10:30	2005-01-10	Show	GitHub Exploit DB Packet Storm

270132	-	zwiki	zwiki	Cross-site scripting (XSS) vulnerability in standard_error_message.dtml for Zwiki after 0.10.0rc1 to 0.36.2 allows remote attackers to inject arbitrary HTML and web script via a malformed URL, which …	NVD-CWE-Other	CVE-2004-1075	2017-07-11 10:30	2005-01-10	Show	GitHub Exploit DB Packet Storm

270133	-	apple	darwin_streaming_server quicktime_streaming_server mac_os_x mac_os_x_server	The Application Framework (AppKit) for Apple Mac OS X 10.2.8 and 10.3.6 does not properly restrict access to a secure text input field, which allows local users to read keyboard input from other appl…	NVD-CWE-Other	CVE-2004-1081	2017-07-11 10:30	2004-12-2	Show	GitHub Exploit DB Packet Storm

270134	-	apple	darwin_streaming_server quicktime_streaming_server mac_os_x mac_os_x_server	Apache for Apple Mac OS X 10.2.8 and 10.3.6 allows remote attackers to read files and resource fork content via HTTP requests to certain special file names related to multiple data streams in HFS+, w…	NVD-CWE-Other	CVE-2004-1084	2017-07-11 10:30	2004-12-2	Show	GitHub Exploit DB Packet Storm

270135	-	apple	darwin_streaming_server quicktime_streaming_server mac_os_x mac_os_x_server	Human Interface Toolbox (HIToolBox) for Apple Mac 0S X 10.3.6 allows local users to exit applications via the force-quit key combination, even when the system is running in kiosk mode.	NVD-CWE-Other	CVE-2004-1085	2017-07-11 10:30	2004-12-2	Show	GitHub Exploit DB Packet Storm

270136	-	apple	darwin_streaming_server quicktime_streaming_server mac_os_x mac_os_x_server	Buffer overflow in PSNormalizer for Apple Mac OS X 10.3.6 allows remote attackers to execute arbitrary code via a crafted PostScript input file.	NVD-CWE-Other	CVE-2004-1086	2017-07-11 10:30	2004-12-2	Show	GitHub Exploit DB Packet Storm

270137	-	apple	darwin_streaming_server quicktime_streaming_server mac_os_x mac_os_x_server	Terminal for Apple Mac OS X 10.3.6 may indicate that "Secure Keyboard Entry" is enabled even when it is not, which could result in a false sense of security for the user.	NVD-CWE-Other	CVE-2004-1087	2017-07-11 10:30	2004-12-2	Show	GitHub Exploit DB Packet Storm

270138	-	apple	darwin_streaming_server quicktime_streaming_server mac_os_x mac_os_x_server	Postfix server for Apple Mac OS X 10.3.6, when using CRAM-MD5, allows remote attackers to send mail without authentication by replaying authentication information.	NVD-CWE-Other	CVE-2004-1088	2017-07-11 10:30	2004-12-2	Show	GitHub Exploit DB Packet Storm

270139	-	apple	darwin_streaming_server quicktime_streaming_server mac_os_x mac_os_x_server	Unknown vulnerability in Apple Mac OS X 10.3.6 server, when using Kerberos authentication and Cyrus IMAP allows local users to access mailboxes of other users.	NVD-CWE-Other	CVE-2004-1089	2017-07-11 10:30	2004-12-2	Show	GitHub Exploit DB Packet Storm

270140	-	midnight_commander debian gentoo redhat suse turbolinux	midnight_commander debian_linux linux enterprise_linux linux_advanced_workstation suse_linux turbolinux_server turbolinux_workstation	Midnight commander (mc) 4.5.55 and earlier allows remote attackers to cause a denial of service via "a corrupt section header."	NVD-CWE-Other	CVE-2004-1090	2017-07-11 10:30	2005-04-14	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed