Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
205081 7.5 危険 BASE - Basic Analysis and Security Engine の base_ag_main.php における任意のコードを実行される脆弱性 CWE-287
不適切な認証 		CVE-2012-1198 2012-02-21 16:45 2012-02-18 Show GitHub Exploit DB Packet Storm
205082 6.8 警告 ACD Systems International - ACDSee の IDE_ACDStd.apl モジュールにおける整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2012-1197 2012-02-21 16:44 2012-02-18 Show GitHub Exploit DB Packet Storm
205083 5 警告 LANDesk - Lenovo ThinkManagement Console におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2012-1196 2012-02-21 16:44 2012-02-18 Show GitHub Exploit DB Packet Storm
205084 7.5 危険 LANDesk - Lenovo ThinkManagement Console の ServerSetup web サービスにおける任意のコードを実行される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-1195 2012-02-21 16:43 2012-02-18 Show GitHub Exploit DB Packet Storm
205085 4.3 警告 Craig Barratt - BackupPC の RestoreFile.pm におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-5081 2012-02-21 16:42 2012-02-18 Show GitHub Exploit DB Packet Storm
205086 4.3 警告 Craig Barratt - BackupPC の View.pm におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-4923 2012-02-21 16:41 2012-02-18 Show GitHub Exploit DB Packet Storm
205087 9.3 危険 TYPO3 Association - TYPO3 の workspaces system エクステンションにおける PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2011-4614 2012-02-21 16:40 2011-12-16 Show GitHub Exploit DB Packet Storm
205088 4.3 警告 Craig Barratt - BackupPC の CGI/Browse.pm におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-3361 2012-02-21 16:34 2012-02-18 Show GitHub Exploit DB Packet Storm
205089 7.5 危険 Earl Miles - Drupal 用 Views モジュールにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2011-4113 2012-02-21 16:33 2012-02-17 Show GitHub Exploit DB Packet Storm
205090 2.1 注意 Robert Ancell - LightDM における任意のファイルの所有権を変更される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2011-4105 2012-02-21 16:26 2012-02-17 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 24, 2025, 4:05 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
257351 - php php Integer overflow in the substr_compare function in PHP 5.2.1 and earlier allows context-dependent attackers to read sensitive memory via a large value in the length argument, a different vulnerabilit… NVD-CWE-Other
CVE-2007-1375 2017-10-11 10:31 2007-03-10 Show GitHub Exploit DB Packet Storm
257352 - php com_extensions The PHP COM extensions for PHP on Windows systems allow context-dependent attackers to execute arbitrary code via a WScript.Shell COM object, as demonstrated by using the Run method of this object to… NVD-CWE-Other
CVE-2007-1382 2017-10-11 10:31 2007-03-10 Show GitHub Exploit DB Packet Storm
257353 - linux linux_kernel The do_ipv6_setsockopt function in net/ipv6/ipv6_sockglue.c in Linux kernel before 2.6.20, and possibly other versions, allows local users to cause a denial of service (oops) by calling setsockopt wi… CWE-399
 Resource Management Errors 		CVE-2007-1388 2017-10-11 10:31 2007-03-11 Show GitHub Exploit DB Packet Storm
257354 - netforo netforo Directory traversal vulnerability in down.php in netForo! 0.1g allows remote attackers to read arbitrary files via a .. (dot dot) in the file_to_download parameter. NVD-CWE-Other
CVE-2007-1392 2017-10-11 10:31 2007-03-11 Show GitHub Exploit DB Packet Storm
257355 - geo_soft magic_cms PHP remote file inclusion vulnerability in mysave.php in Magic CMS 4.2.747 allows remote attackers to execute arbitrary PHP code via a URL in the file parameter. NVD-CWE-Other
CVE-2007-1393 2017-10-11 10:31 2007-03-11 Show GitHub Exploit DB Packet Storm
257356 - flat_chat flat_chat Direct static code injection vulnerability in startsession.php in Flat Chat 2.0 allows remote attackers to execute arbitrary PHP code via the Chat Name field, which is inserted into online.txt and in… NVD-CWE-Other
CVE-2007-1394 2017-10-11 10:31 2007-03-11 Show GitHub Exploit DB Packet Storm
257357 - snort snort The frag3 preprocessor in Snort 2.6.1.1, 2.6.1.2, and 2.7.0 beta, when configured for inline use on Linux without the ip_conntrack module loaded, allows remote attackers to cause a denial of service … NVD-CWE-Other
CVE-2007-1398 2017-10-11 10:31 2007-03-11 Show GitHub Exploit DB Packet Storm
257358 - macromedia shockwave Multiple stack-based buffer overflows in an ActiveX control in SwDir.dll 10.1.4.20 in Macromedia Shockwave allow remote attackers to cause a denial of service (Internet Explorer 7 crash) and possibly… NVD-CWE-Other
CVE-2007-1403 2017-10-11 10:31 2007-03-11 Show GitHub Exploit DB Packet Storm
257359 - prosysinfo tftp_server_tftpdwin tftpd.exe in ProSysInfo TFTP Server TFTPDWIN 0.4.2 allows remote attackers to cause a denial of service via a long UDP packet that is not properly handled in a recv_from call. NOTE: this issue might… NVD-CWE-Other
CVE-2007-1404 2017-10-11 10:31 2007-03-11 Show GitHub Exploit DB Packet Storm
257360 - gaziyapboz game_portal SQL injection vulnerability in kategori.asp in GaziYapBoz Game Portal allows remote attackers to execute arbitrary SQL commands via the kategori parameter. NVD-CWE-Other
CVE-2007-1410 2017-10-11 10:31 2007-03-11 Show GitHub Exploit DB Packet Storm