Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
205201 5 警告 AdaCore - AdaCore Ada Web Services におけるサービス運用妨害 (CPU 資源の消費) の脆弱性 CWE-20
不適切な入力確認
CVE-2012-1035 2012-02-13 16:39 2012-01-27 Show GitHub Exploit DB Packet Storm
205202 6.5 警告 サイベース - Sybase M-Business Anywhere の Web 管理インターフェイスにおけるユーザーアカウントをリストアップされる脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2011-5078 2012-02-13 16:15 2012-02-8 Show GitHub Exploit DB Packet Storm
205203 5 警告 INRIA - OCaml におけるサービス運用妨害 (CPU 資源の消費) の脆弱性 CWE-20
不適切な入力確認
CVE-2012-0839 2012-02-13 16:13 2012-02-8 Show GitHub Exploit DB Packet Storm
205204 9.3 危険 リアルネットワークス - RealNetworks RealPlayer および RealPlayer SP における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2012-0927 2012-02-13 14:37 2012-02-6 Show GitHub Exploit DB Packet Storm
205205 9.3 危険 リアルネットワークス - RealNetworks RealPlayer および RealPlayer SP の RV10 コーデックにおける任意のコードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2012-0926 2012-02-13 14:36 2012-02-6 Show GitHub Exploit DB Packet Storm
205206 9.3 危険 リアルネットワークス - RealNetworks RealPlayer および RealPlayer SP における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2012-0924 2012-02-13 14:34 2012-02-6 Show GitHub Exploit DB Packet Storm
205207 9.3 危険 リアルネットワークス - RealNetworks RealPlayer および RealPlayer SP の rvrender.dll における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2012-0922 2012-02-13 14:32 2012-02-6 Show GitHub Exploit DB Packet Storm
205208 5.1 警告 ESTsoft Japan 株式会社 - ALFTP における実行ファイル読み込みに関する脆弱性 CWE-Other
その他
CVE-2012-0315 2012-02-13 14:00 2012-02-13 Show GitHub Exploit DB Packet Storm
205209 5 警告 Google - Google Chrome の Shader Translator 実装におけるサービス運用妨害 (out-of-bounds read) の脆弱性 CWE-119
バッファエラー
CVE-2011-3972 2012-02-13 10:47 2012-02-8 Show GitHub Exploit DB Packet Storm
205210 5 警告 Google - Google Chrome におけるサービス運用妨害 (out-of-bounds read) の脆弱性 CWE-119
バッファエラー
CVE-2011-3970 2012-02-13 10:46 2012-02-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 13, 2025, 4:12 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
274881 - groove
hp
persits
virtual_office
loadrunner
xupload
Buffer overflow in the XUpload.ocx ActiveX control in Persits Software XUpload 2.1.0.1, and probably other versions before 3.0, as used by HP Mercury LoadRunner and Groove Virtual Office, allows remo… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2007-6530 2011-03-8 12:03 2007-12-28 Show GitHub Exploit DB Packet Storm
274882 - xfce xfce Stack-based buffer overflow in the Panel (xfce4-panel) component in Xfce before 4.4.2 might allow remote attackers to execute arbitrary code via Launcher tooltips. NOTE: a second buffer overflow (ov… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2007-6531 2011-03-8 12:03 2008-01-10 Show GitHub Exploit DB Packet Storm
274883 - xfce xfce Double free vulnerability in the Widget Library (libxfcegui4) in Xfce before 4.4.2 might allow remote attackers to execute arbitrary code via unknown vectors related to the "cliend id, program name a… NVD-CWE-noinfo
CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2007-6532 2011-03-8 12:03 2008-01-10 Show GitHub Exploit DB Packet Storm
274884 - sun java_system_web_proxy_server
java_system_web_server
Cross-site scripting (XSS) vulnerability in the View Error Log functionality in Sun Java System Web Proxy Server 4.x before 4.0.6 allows remote attackers to inject arbitrary web script or HTML via un… CWE-79
Cross-site Scripting
CVE-2007-6569 2011-03-8 12:03 2007-12-29 Show GitHub Exploit DB Packet Storm
274885 - ibm lotus_notes IBM Lotus Notes 8 for Linux before 8.0.1 uses (1) unspecified weak permissions for the installation kit obtained through a Notes 8 download and (2) 0777 permissions for the installdata file that is c… CWE-264
Permissions, Privileges, and Access Controls
CVE-2007-6594 2011-03-8 12:03 2007-12-29 Show GitHub Exploit DB Packet Storm
274886 - mongrel mongrel Directory traversal vulnerability in DirHandler (lib/mongrel/handlers.rb) in Mongrel 1.0.4 and 1.1.x before 1.1.3 allows remote attackers to read arbitrary files via an HTTP request containing double… CWE-22
Path Traversal
CVE-2007-6612 2011-03-8 12:03 2008-01-4 Show GitHub Exploit DB Packet Storm
274887 - ibm aix Trusted Execution in IBM AIX 6.1 uses an incorrect pathname argument in a call to the trustchk_block_write function, which might allow local users to modify trusted files, related to an error in the … NVD-CWE-Other
CVE-2007-6680 2011-03-8 12:03 2008-01-11 Show GitHub Exploit DB Packet Storm
274888 - ibm lotus_notes Unspecified vulnerability in nlnotes.dll in the client in IBM Lotus Notes 6.5, 7.0.x before 7.0.2 CCH or 7.0.3, and possibly 8.0 allows remote attackers to execute arbitrary code via crafted text in … CWE-94
Code Injection
CVE-2007-6706 2011-03-8 12:03 2008-03-9 Show GitHub Exploit DB Packet Storm
274889 - xunlei web_thunder Heap-based buffer overflow in the PPlayer.XPPlayer.1 ActiveX control in pplayer.dll_1_work in Xunlei Thunder 5.7.4.401 allows remote attackers to execute arbitrary code via a long string in a FlvPlay… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2007-6144 2011-03-8 12:02 2007-11-28 Show GitHub Exploit DB Packet Storm
274890 - hitachi jp1_file_transmission_server Hitachi JP1/File Transmission Server/FTP 01-00 through 08-10-02 on Windows might allow remote attackers to cause a denial of service (service stop) via a "specific file" argument to an FTP command. CWE-20
 Improper Input Validation 
CVE-2007-6146 2011-03-8 12:02 2007-11-28 Show GitHub Exploit DB Packet Storm