Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
205481 4 警告 オラクル - Oracle Communications Unified における Calendar Server の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2011-3573 2012-01-23 10:58 2012-01-17 Show GitHub Exploit DB Packet Storm
205482 4.6 警告 オラクル - Oracle Communications Unified における Calendar Server の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2011-3565 2012-01-23 10:56 2012-01-17 Show GitHub Exploit DB Packet Storm
205483 2.1 注意 オラクル - Oracle GlassFish Enterprise Server における認証の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2011-3564 2012-01-23 10:42 2012-01-17 Show GitHub Exploit DB Packet Storm
205484 3.7 注意 オラクル - Oracle GlassFish Server における認証の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2012-0081 2012-01-23 10:33 2012-01-17 Show GitHub Exploit DB Packet Storm
205485 5 警告 オラクル - Oracle GlassFish Server における Web Container の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2012-0104 2012-01-23 10:32 2012-01-17 Show GitHub Exploit DB Packet Storm
205486 1.9 注意 オラクル - Oracle Solaris における Kernel の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2012-0098 2012-01-23 10:25 2012-01-17 Show GitHub Exploit DB Packet Storm
205487 2.1 注意 オラクル - Oracle Solaris における ksh93 シェルの処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2012-0097 2012-01-23 10:16 2012-01-17 Show GitHub Exploit DB Packet Storm
205488 2.6 注意 オラクル - Oracle Solaris における sshd の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2012-0099 2012-01-23 10:13 2012-01-17 Show GitHub Exploit DB Packet Storm
205489 3.6 注意 オラクル - Oracle Solaris における TCP/IP の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2012-0109 2012-01-23 10:09 2012-01-17 Show GitHub Exploit DB Packet Storm
205490 4.9 警告 オラクル - Oracle Solaris における Kernel の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2012-0103 2012-01-23 10:04 2012-01-17 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 13, 2025, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
264501 - menalto gallery Cross-site scripting (XSS) vulnerability in Menalto Gallery before 2.2.5 allows remote attackers to inject arbitrary web script or HTML via the (1) host and (2) path components of a URL. CWE-79
Cross-site Scripting 		CVE-2008-2720 2017-08-8 10:31 2008-06-17 Show GitHub Exploit DB Packet Storm
264502 - menalto gallery Unspecified vulnerability in the album-select module in Menalto Gallery before 2.2.5 allows remote attackers to obtain titles of hidden albums by attempting to add a new album to a hidden album. CWE-200
Information Exposure 		CVE-2008-2721 2017-08-8 10:31 2008-06-17 Show GitHub Exploit DB Packet Storm
264503 - menalto gallery Menalto Gallery before 2.2.5 allows remote attackers to bypass permissions for sub-albums via a ZIP archive. CWE-264
Permissions, Privileges, and Access Controls 		CVE-2008-2722 2017-08-8 10:31 2008-06-17 Show GitHub Exploit DB Packet Storm
264504 - menalto gallery embed.php in Menalto Gallery before 2.2.5 allows remote attackers to obtain the full path via unknown vectors related to "spoofing the remote address." CWE-200
Information Exposure 		CVE-2008-2723 2017-08-8 10:31 2008-06-17 Show GitHub Exploit DB Packet Storm
264505 - menalto gallery Menalto Gallery before 2.2.5 does not enforce permissions for non-album items that have been protected by a password, which might allow remote attackers to bypass intended access restrictions. CWE-264
Permissions, Privileges, and Access Controls 		CVE-2008-2724 2017-08-8 10:31 2008-06-17 Show GitHub Exploit DB Packet Storm
264506 - cisco unified_communications_manager The Real-Time Information Server (RIS) Data Collector service in Cisco Unified Communications Manager (CUCM) 5.x before 5.1(3) and 6.x before 6.1(1) allows remote attackers to bypass authentication, … CWE-287
Improper Authentication 		CVE-2008-2730 2017-08-8 10:31 2008-06-27 Show GitHub Exploit DB Packet Storm
264507 - cisco adaptive_security_appliance_5500
pix 		Multiple unspecified vulnerabilities in the SIP inspection functionality in Cisco PIX and Adaptive Security Appliance (ASA) 5500 devices 7.0 before 7.0(7)16, 7.1 before 7.1(2)71, 7.2 before 7.2(4)7, … NVD-CWE-noinfo
CVE-2008-2732 2017-08-8 10:31 2008-09-5 Show GitHub Exploit DB Packet Storm
264508 - cisco adaptive_security_appliance_5500
pix 		Cisco PIX and Adaptive Security Appliance (ASA) 5500 devices 7.2 before 7.2(4)2, 8.0 before 8.0(3)14, and 8.1 before 8.1(1)4, when configured as a client VPN endpoint, do not properly process IPSec c… NVD-CWE-noinfo
CVE-2008-2733 2017-08-8 10:31 2008-09-5 Show GitHub Exploit DB Packet Storm
264509 - cisco adaptive_security_appliance_5500 Memory leak in the crypto functionality in Cisco Adaptive Security Appliance (ASA) 5500 devices 7.2 before 7.2(4)2, 8.0 before 8.0(3)14, and 8.1 before 8.1(1)4, when configured as a clientless SSL VP… NVD-CWE-noinfo
CWE-399
 Resource Management Errors 		CVE-2008-2734 2017-08-8 10:31 2008-09-5 Show GitHub Exploit DB Packet Storm
264510 - cisco adaptive_security_appliance_5500 The HTTP server in Cisco Adaptive Security Appliance (ASA) 5500 devices 8.0 before 8.0(3)15 and 8.1 before 8.1(1)5, when configured as a clientless SSL VPN endpoint, does not properly process URIs, w… NVD-CWE-noinfo
CWE-20
 Improper Input Validation  		CVE-2008-2735 2017-08-8 10:31 2008-09-5 Show GitHub Exploit DB Packet Storm