Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Dec. 30, 2024, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
203461	4.9	警告	オラクル	-	Oracle Solaris における Kernel/Performance Counter BackEnd Module の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2011-3542	2011-10-27 16:10	2011-10-18	Show	GitHub Exploit DB Packet Storm

203462	5.6	警告	オラクル	-	Oracle Solaris における Process File System (procfs) の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2011-3515	2011-10-27 16:09	2011-10-18	Show	GitHub Exploit DB Packet Storm

203463	9.3	危険	オラクル	-	Oracle Solaris における LDAP library の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2011-3508	2011-10-27 16:09	2011-10-18	Show	GitHub Exploit DB Packet Storm

203464	4.3	警告	オラクル	-	Oracle Solaris における ZFS の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2011-2313	2011-10-27 16:08	2011-10-18	Show	GitHub Exploit DB Packet Storm

203465	5	警告	オラクル	-	Oracle Supply Chain Products Suite の Oracle Agile Product Supplier Collaboration for Process コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2011-3532	2011-10-27 16:06	2011-10-18	Show	GitHub Exploit DB Packet Storm

203466	4.3	警告	オラクル	-	Oracle Industry Applications の Health Sciences - Oracle Thesaurus Management System コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2011-2323	2011-10-27 10:07	2011-10-18	Show	GitHub Exploit DB Packet Storm

203467	4.3	警告	オラクル	-	Oracle Industry Applications の Health Sciences - Oracle Clinical、Remote Data Capture における脆弱性	CWE-noinfo 情報不足	CVE-2011-2309	2011-10-27 10:07	2011-10-18	Show	GitHub Exploit DB Packet Storm

203468	6.8	警告	オラクル	-	Oracle Virtualization の Sun Ray コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2011-3538	2011-10-27 10:06	2011-10-18	Show	GitHub Exploit DB Packet Storm

203469	5.5	警告	オラクル	-	Oracle Linux の Oracle Validated 処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2011-2306	2011-10-27 10:05	2011-10-19	Show	GitHub Exploit DB Packet Storm

203470	2.1	注意	オラクル	-	複数の Oracle Sun 製品における Integrated Lights Out Manager CLI の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2011-3522	2011-10-27 10:04	2011-10-18	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:Dec. 31, 2024, 4:05 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
257561	-	opensymphony apache	xwork struts	ParametersInterceptor in OpenSymphony XWork 2.0.x before 2.0.6 and 2.1.x before 2.1.2, as used in Apache Struts and other products, does not properly restrict # (pound sign) references to context obj…	CWE-20 Improper Input Validation	CVE-2008-6504	2017-08-17 10:29	2009-03-23	Show	GitHub Exploit DB Packet Storm

257562	-	phpbb	phpbb	Unspecified vulnerability in phpBB before 3.0.4 allows attackers to bypass intended access restrictions and activate de-activated accounts via unknown vectors.	CWE-264 Permissions, Privileges, and Access Controls	CVE-2008-6506	2017-08-17 10:29	2009-03-24	Show	GitHub Exploit DB Packet Storm

257563	-	google	gears	Cross-domain vulnerability in the WorkerPool API in Google Gears before 0.5.4.2 allows remote attackers to bypass the Same Origin Policy and the intended access restrictions of the allowCrossOrigin f…	NVD-CWE-Other	CVE-2008-6512	2017-08-17 10:29	2009-03-24	Show	GitHub Exploit DB Packet Storm

257564	-	vclcomponents	yappa-ng	Cross-site scripting (XSS) vulnerability in Fritz Berger yet another php photo album - next generation (yappa-ng) allows remote attackers to inject arbitrary web script or HTML via the query string t…	CWE-79 Cross-site Scripting	CVE-2008-6515	2017-08-17 10:29	2009-03-24	Show	GitHub Exploit DB Packet Storm

257565	-	phpkf	phpkf-portal	Multiple directory traversal vulnerabilities in phpKF-Portal 1.10 allow remote attackers to include arbitrary files via a .. (dot dot) in the (1) tema_dizin parameter to baslik.php and (2) portal_aya…	CWE-22 Path Traversal	CVE-2008-6516	2017-08-17 10:29	2009-03-26	Show	GitHub Exploit DB Packet Storm

257566	-	imatix	xitami	Multiple format string vulnerabilities in the SSI filter in Xitami Web Server 2.5c2, and possibly other versions, allow remote attackers to cause a denial of service (daemon crash) and possibly execu…	CWE-134 Use of Externally-Controlled Format String	CVE-2008-6520	2017-08-17 10:29	2009-03-26	Show	GitHub Exploit DB Packet Storm

257567	-	drupal	drupal	Multiple cross-site request forgery (CSRF) vulnerabilities in the update feature in Drupal 5.x before 5.13 and 6.x before 6.7 allow remote attackers to perform unauthorized actions as the superuser v…	CWE-352 Origin Validation Error	CVE-2008-6532	2017-08-17 10:29	2009-03-27	Show	GitHub Exploit DB Packet Storm

257568	-	drupal	drupal	Drupal 5.x before 5.13 and 6.x before 6.7 does not delete all related content when an input format is deleted, which prevents the content from being properly filtered and allows remote attackers to c…	CWE-79 Cross-site Scripting	CVE-2008-6533	2017-08-17 10:29	2009-03-27	Show	GitHub Exploit DB Packet Storm

257569	-	7-zip	7-zip	Unspecified vulnerability in 7-zip before 4.5.7 has unknown impact and remote attack vectors, as demonstrated by the PROTOS GENOME test suite for Archive Formats (c10).	NVD-CWE-noinfo	CVE-2008-6536	2017-08-17 10:29	2009-03-30	Show	GitHub Exploit DB Packet Storm

257570	-	dotnetnuke	dotnetnuke	Unspecified vulnerability in the Skin Manager in DotNetNuke before 4.8.2 allows remote authenticated administrators to perform "server-side execution of application logic" by uploading a static file …	NVD-CWE-noinfo	CVE-2008-6542	2017-08-17 10:29	2009-03-30	Show	GitHub Exploit DB Packet Storm