Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
205171	5.8	警告	Netcreators	-	TYPO3 用 Modern FAQ エクステンションにおけるオープンリダイレクトの脆弱性	CWE-20 不適切な入力確認	CVE-2011-5079	2012-02-15 16:04	2012-02-14	Show	GitHub Exploit DB Packet Storm

205172	5	警告	The PHP Group	-	PHP のタイムゾーン機能におけるサービス運用妨害 (メモリ破損) の脆弱性	CWE-399 リソース管理の問題	CVE-2012-0789	2012-02-15 16:03	2012-01-10	Show	GitHub Exploit DB Packet Storm

205173	5	警告	The PHP Group	-	PHP の PDORow 実装におけるサービス運用妨害 (アプリケーションクラッシュ) の脆弱性	CWE-20 不適切な入力確認	CVE-2012-0788	2012-02-15 16:02	2012-01-10	Show	GitHub Exploit DB Packet Storm

205174	7.5	危険	Zoho Corporation	-	ManageEngine Applications Manager における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2012-1063	2012-02-15 15:55	2012-02-14	Show	GitHub Exploit DB Packet Storm

205175	4.3	警告	Zoho Corporation	-	ManageEngine Applications Manager におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-1062	2012-02-15 15:55	2012-02-14	Show	GitHub Exploit DB Packet Storm

205176	7.5	危険	GForge Group	-	GForge Advanced Server における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2012-1061	2012-02-15 15:54	2012-02-14	Show	GitHub Exploit DB Packet Storm

205177	2.1	注意	Rik de Boer	-	Drupal 用 Revisioning モジュールの revisioning_theme.inc におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-1060	2012-02-15 15:51	2012-02-14	Show	GitHub Exploit DB Packet Storm

205178	4.3	警告	osCommerce	-	OSCommerce Online Merchant の shirt モジュールにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-1059	2012-02-15 15:51	2012-02-14	Show	GitHub Exploit DB Packet Storm

205179	6	警告	Flyspray	-	Flyspray におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2012-1058	2012-02-15 15:50	2012-02-14	Show	GitHub Exploit DB Packet Storm

205180	6	警告	Sean Robertson	-	Drupal 用 Forward モジュールのクリックスルートラッキング機能におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2012-1057	2012-02-15 15:49	2012-02-14	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:Feb. 19, 2025, 4:10 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
257441	-	hp sun symantec conectiva gentoo	java_sdk-rte jdk jre enterprise_firewall linux hp-ux gateway_security_5400	The Sun Java Plugin capability in Java 2 Runtime Environment (JRE) 1.4.2_01, 1.4.2_04, and possibly earlier versions, does not properly restrict access between Javascript and Java applets during data…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2004-1029	2017-10-11 10:29	2005-03-1	Show	GitHub Exploit DB Packet Storm

257442	-	squirrelmail gentoo	squirrelmail linux	Cross-site scripting (XSS) vulnerability in the decoding of encoded text in certain headers in mime.php for SquirrelMail 1.4.3a and earlier, and 1.5.1-cvs before 23rd October 2004, allows remote atta…	NVD-CWE-Other	CVE-2004-1036	2017-10-11 10:29	2005-03-1	Show	GitHub Exploit DB Packet Storm

257443	-	linux ubuntu	linux_kernel ubuntu_linux	Direct Rendering Manager (DRM) driver in Linux kernel 2.6 does not properly check the DMA lock, which could allow remote attackers or local users to cause a denial of service (X Server crash) and pos…	NVD-CWE-Other	CVE-2004-1056	2017-10-11 10:29	2005-01-10	Show	GitHub Exploit DB Packet Storm

257444	-	linux redhat	linux_kernel enterprise_linux	Multiple drivers in Linux kernel 2.4.19 and earlier do not properly mark memory with the VM_IO flag, which causes incorrect reference counts and may lead to a denial of service (kernel panic) when ac…	NVD-CWE-Other	CVE-2004-1057	2017-10-11 10:29	2005-01-21	Show	GitHub Exploit DB Packet Storm

257445	-	linux redhat ubuntu	linux_kernel enterprise_linux enterprise_linux_desktop linux_advanced_workstation ubuntu_linux	A "missing serialization" error in the unix_dgram_recvmsg function in Linux 2.4.27 and earlier, and 2.6.x up to 2.6.9, allows local users to gain privileges via a race condition.	NVD-CWE-Other	CVE-2004-1068	2017-10-11 10:29	2005-01-10	Show	GitHub Exploit DB Packet Storm

257446	-	linux redhat suse trustix turbolinux	linux_kernel enterprise_linux enterprise_linux_desktop fedora_core linux_advanced_workstation suse_linux secure_linux turbolinux_server	The load_elf_binary function in the binfmt_elf loader (binfmt_elf.c) in Linux kernel 2.4.x up to 2.4.27, and 2.6.x up to 2.6.8, does not properly check return values from calls to the kernel_read fun…	NVD-CWE-Other	CVE-2004-1070	2017-10-11 10:29	2005-01-10	Show	GitHub Exploit DB Packet Storm

257447	-	linux redhat suse trustix turbolinux	linux_kernel enterprise_linux enterprise_linux_desktop fedora_core linux_advanced_workstation suse_linux secure_linux turbolinux_server	The binfmt_elf loader (binfmt_elf.c) in Linux kernel 2.4.x up to 2.4.27, and 2.6.x up to 2.6.8, does not properly handle a failed call to the mmap function, which causes an incorrect mapped image and…	NVD-CWE-Other	CVE-2004-1071	2017-10-11 10:29	2005-01-10	Show	GitHub Exploit DB Packet Storm

257448	-	linux redhat suse trustix turbolinux	linux_kernel enterprise_linux enterprise_linux_desktop fedora_core linux_advanced_workstation suse_linux secure_linux turbolinux_server	The binfmt_elf loader (binfmt_elf.c) in Linux kernel 2.4.x up to 2.4.27, and 2.6.x up to 2.6.8, may create an interpreter name string that is not NULL terminated, which could cause strings longer tha…	NVD-CWE-Other	CVE-2004-1072	2017-10-11 10:29	2005-01-10	Show	GitHub Exploit DB Packet Storm

257449	-	linux redhat suse trustix turbolinux	linux_kernel enterprise_linux enterprise_linux_desktop fedora_core linux_advanced_workstation suse_linux secure_linux turbolinux_server	The open_exec function in the execve functionality (exec.c) in Linux kernel 2.4.x up to 2.4.27, and 2.6.x up to 2.6.8, allows local users to read non-readable ELF binaries by using the interpreter (P…	NVD-CWE-Other	CVE-2004-1073	2017-10-11 10:29	2005-01-10	Show	GitHub Exploit DB Packet Storm

257450	-	-	-	The binfmt functionality in the Linux kernel, when "memory overcommit" is enabled, allows local users to cause a denial of service (kernel oops) via a malformed a.out binary.	NVD-CWE-Other	CVE-2004-1074	2017-10-11 10:29	2005-01-10	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed