Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Jan. 10, 2025, 6:04 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
202781	5	警告	Broadwin アドバンテック株式会社	-	Advantech/BroadWin WebAccess の uaddUpAdmin.asp における管理者パスワードを変更される脆弱性	CWE-287 不適切な認証	CVE-2012-0239	2012-02-23 11:32	2012-02-21	Show	GitHub Exploit DB Packet Storm

202782	7.5	危険	Broadwin アドバンテック株式会社	-	Advantech/BroadWin WebAccess の opcImg.asp におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2012-0238	2012-02-23 11:29	2012-02-21	Show	GitHub Exploit DB Packet Storm

202783	6.4	警告	Broadwin アドバンテック株式会社	-	Advantech/BroadWin WebAccess における日付と時刻の同期設定を変更される脆弱性	CWE-119 バッファエラー	CVE-2012-0237	2012-02-23 11:27	2012-02-21	Show	GitHub Exploit DB Packet Storm

202784	5	警告	Broadwin アドバンテック株式会社	-	Advantech/BroadWin WebAccess における重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2012-0236	2012-02-23 11:23	2012-02-21	Show	GitHub Exploit DB Packet Storm

202785	6	警告	Broadwin アドバンテック株式会社	-	Advantech/BroadWin WebAccess におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2012-0235	2012-02-23 11:22	2012-02-21	Show	GitHub Exploit DB Packet Storm

202786	7.5	危険	Broadwin アドバンテック株式会社	-	Advantech/BroadWin WebAccess における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2012-0234	2012-02-23 11:21	2012-02-21	Show	GitHub Exploit DB Packet Storm

202787	4.3	警告	Broadwin アドバンテック株式会社	-	Advantech/BroadWin WebAccess におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-0233	2012-02-23 11:20	2012-02-21	Show	GitHub Exploit DB Packet Storm

202788	10	危険	Broadwin アドバンテック株式会社	-	Advantech/BroadWin WebAccess の ActiveX コントロールにおけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2011-4526	2012-02-23 11:19	2012-02-21	Show	GitHub Exploit DB Packet Storm

202789	7.5	危険	Broadwin アドバンテック株式会社	-	Advantech/BroadWin WebAccess における任意のコードを実行される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-4525	2012-02-23 11:18	2012-02-21	Show	GitHub Exploit DB Packet Storm

202790	7.5	危険	Broadwin アドバンテック株式会社	-	Advantech/BroadWin WebAccess におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2011-4524	2012-02-23 11:02	2012-02-21	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:Jan. 10, 2025, 4:11 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
270631	-	pancake.org	zina	Multiple unspecified vulnerabilities in Zina 1.0rc1 and earlier have unknown impact and attack vectors related to "Potential security bugs."	NVD-CWE-Other	CVE-2007-0303	2011-03-8 11:49	2007-01-18	Show	GitHub Exploit DB Packet Storm

270632	-	apple	mac_os_x	The do_hfs_truncate function in Mac OS X 10.4.8 allows context-dependent attackers to cause a denial of service (kernel panic) via a crafted HFS+ filesystem in a DMG image, which causes an access of …	NVD-CWE-Other	CVE-2007-0318	2011-03-8 11:49	2007-01-18	Show	GitHub Exploit DB Packet Storm

270633	-	trend_micro	client-server-messaging_security officescan_corporate_edition	Multiple buffer overflows in the Trend Micro OfficeScan Web-Deployment SetupINICtrl ActiveX control in OfficeScanSetupINI.dll, as used in OfficeScan 7.0 before Build 1344, OfficeScan 7.3 before Build…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2007-0325	2011-03-8 11:49	2007-02-21	Show	GitHub Exploit DB Packet Storm

270634	-	trend_micro	client-server-messaging_security officescan_corporate_edition	Successful exploitation requires that OfficeScan client was installed using web deployment.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2007-0325	2011-03-8 11:49	2007-02-21	Show	GitHub Exploit DB Packet Storm

270635	-	trend_micro	client-server-messaging_security officescan_corporate_edition	The vendor has issued a fix (7.0 Security Patch - Build 1344; 7.3 Security Patch - Build 1241).	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2007-0325	2011-03-8 11:49	2007-02-21	Show	GitHub Exploit DB Packet Storm

270636	-	bea	weblogic_server	BEA Weblogic Server 8.1 through 8.1 SP4 does not properly validate client certificates when reusing cached connections, which allows remote attackers to obtain access via an untrusted X.509 certifica…	NVD-CWE-Other	CVE-2007-0408	2011-03-8 11:49	2007-01-23	Show	GitHub Exploit DB Packet Storm

270637	-	bea	weblogic_server	BEA WebLogic 7.0 through 7.0 SP6, 8.1 through 8.1 SP4, and 9.0 initial release does not encrypt passwords stored in the JDBCDataSourceFactory MBean Properties, which allows local administrative users…	NVD-CWE-Other	CVE-2007-0409	2011-03-8 11:49	2007-01-23	Show	GitHub Exploit DB Packet Storm

270638	-	bea	weblogic_server	BEA WebLogic Server 8.1 through 8.1 SP5, 9.0, 9.1, and 9.2 Gold, when WS-Security is used, does not properly validate certificates, which allows remote attackers to conduct a man-in-the-middle (MITM)…	NVD-CWE-Other	CVE-2007-0411	2011-03-8 11:49	2007-01-23	Show	GitHub Exploit DB Packet Storm

270639	-	bea	weblogic_server	BEA WebLogic Server 8.1 through 8.1 SP5 stores cleartext data in a backup of config.xml after offline editing, which allows local users to obtain sensitive information by reading this backup file.	NVD-CWE-Other	CVE-2007-0413	2011-03-8 11:49	2007-01-23	Show	GitHub Exploit DB Packet Storm

270640	-	bea	weblogic_server	BEA WebLogic Server 6.1 through 6.1 SP7, 7.0 through 7.0 SP6, 8.1 through 8.1 SP5, and 9.0 allows remote attackers to cause a denial of service (server hang) via certain requests that cause muxer thr…	NVD-CWE-Other	CVE-2007-0414	2011-03-8 11:49	2007-01-23	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed