Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Nov. 15, 2024, 6:02 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
202881	5	警告	Opera Software ASA	-	Opera におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2010-1989	2010-09-27 16:17	2010-05-20	Show	GitHub Exploit DB Packet Storm

202882	9.3	危険	Opera Software ASA	-	Windows および Mac OS X 上で稼働する Opera における任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2010-1728	2010-09-27 16:17	2010-04-30	Show	GitHub Exploit DB Packet Storm

202883	10	危険	Opera Software ASA	-	Opera における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2010-1349	2010-09-27 16:17	2010-04-12	Show	GitHub Exploit DB Packet Storm

202884	5	警告	Opera Software ASA	-	Opera における重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2010-1310	2010-09-27 16:16	2010-03-22	Show	GitHub Exploit DB Packet Storm

202885	4.3	警告	Opera Software ASA	-	Opera における重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2010-0653	2010-09-27 16:16	2010-02-18	Show	GitHub Exploit DB Packet Storm

202886	10	危険	Opera Software ASA	-	Opera における脆弱性	CWE-noinfo 情報不足	CVE-2009-4072	2010-09-27 16:16	2009-11-23	Show	GitHub Exploit DB Packet Storm

202887	5.8	警告	Opera Software ASA	-	Opera におけるクロスサイトスクリプティングの脆弱性	CWE-16 環境設定	CVE-2009-4071	2010-09-27 16:16	2009-11-24	Show	GitHub Exploit DB Packet Storm

202888	5.8	警告	Opera Software ASA	-	Windows 上で稼働する Opera におけるアドレスフィールドを偽装される脆弱性	CWE-20 不適切な入力確認	CVE-2009-3832	2010-09-27 16:16	2009-10-28	Show	GitHub Exploit DB Packet Storm

202889	5	警告	Opera Software ASA	-	Opera におけるフィッシング攻撃の脆弱性	CWE-Other その他	CVE-2009-3049	2010-09-27 16:15	2009-09-1	Show	GitHub Exploit DB Packet Storm

202890	4.3	警告	Opera Software ASA	-	Opera における意図しないファイルをアップロードさせられる脆弱性	CWE-20 不適切な入力確認	CVE-2009-3048	2010-09-27 16:15	2009-09-1	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:Nov. 15, 2024, 4:16 p.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
257351	-	redhat	enterprise_mrg	Cumin (aka MRG Management Console), as used in Red Hat Enterprise MRG 2.5, uses the DES-based crypt function to hash passwords, which makes it easier for attackers to obtain sensitive information via…	CWE-310 Cryptographic Issues	CVE-2013-6445	2014-07-19 03:50	2014-04-30	Show	GitHub Exploit DB Packet Storm

257352	-	super_project	super	super.c in Super 3.30.0 does not check the return value of the setuid function when the -F flag is set, which allows local users to gain privileges via unspecified vectors, aka an RLIMIT_NPROC attack.	CWE-264 Permissions, Privileges, and Access Controls	CVE-2014-0470	2014-07-19 03:40	2014-04-30	Show	GitHub Exploit DB Packet Storm

257353	-	fortinet	fortiweb	Cross-site scripting (XSS) vulnerability in FortiGuard FortiWeb before 5.0.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.	CWE-79 Cross-site Scripting	CVE-2014-1955	2014-07-19 03:38	2014-04-30	Show	GitHub Exploit DB Packet Storm

257354	-	fortinet	fortiweb	CRLF injection vulnerability in FortiGuard FortiWeb before 5.0.3 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors.	NVD-CWE-Other	CVE-2014-1956	2014-07-19 03:38	2014-04-30	Show	GitHub Exploit DB Packet Storm

257355	-	fortinet	fortiweb	CWE-113: Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') "http://cwe.mitre.org/data/definitions/113.html"	NVD-CWE-Other	CVE-2014-1956	2014-07-19 03:38	2014-04-30	Show	GitHub Exploit DB Packet Storm

257356	-	fortinet	fortiweb	FortiGuard FortiWeb before 5.0.3 allows remote authenticated users to gain privileges via unspecified vectors.	CWE-264 Permissions, Privileges, and Access Controls	CVE-2014-1957	2014-07-19 03:32	2014-04-30	Show	GitHub Exploit DB Packet Storm

257357	-	canonical	ubuntu_linux	The Ubuntu Date and Time Indicator (aka indicator-datetime) 13.10.0+13.10.x before 13.10.0+13.10.20131023.2-0ubuntu1.1 does not properly restrict access to Evolution, which allows local users to bypa…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2013-7374	2014-07-19 03:15	2014-05-2	Show	GitHub Exploit DB Packet Storm

257358	-	citrix	netscaler_access_gateway_firmware netscaler_application_delivery_controller_firmware netscaler_application_delivery_controller netscaler_access_gateway	Unspecified vulnerability in the Diffie-Hellman key agreement implementation in the management GUI Java applet in Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway before 9…	NVD-CWE-noinfo	CVE-2014-2881	2014-07-19 03:14	2014-05-2	Show	GitHub Exploit DB Packet Storm

257359	-	citrix	netscaler_access_gateway_firmware netscaler_application_delivery_controller_firmware netscaler_access_gateway netscaler_application_delivery_controller	Unspecified vulnerability in the management GUI in Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway before 9.3-66.5 and 10.x before 10.1-122.17 has unspecified impact and …	NVD-CWE-noinfo	CVE-2014-2882	2014-07-19 03:00	2014-05-2	Show	GitHub Exploit DB Packet Storm

257360	-	gdm-guest-session_project canonical	gdm-guest-session ubuntu_linux	gdm/guest-session-cleanup.sh in gdm-guest-session 0.24 and earlier, as used in Ubuntu Linux 10.04 LTS, 10.10, and 11.04, allows local users to delete arbitrary files via a space in the name of a file…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2012-6648	2014-07-19 02:49	2014-05-23	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed