Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
205641 9.3 危険 Splunk - Splunk における任意のファイルを読まれる脆弱性 CWE-287
不適切な認証
CVE-2011-4644 2012-01-5 16:28 2012-01-3 Show GitHub Exploit DB Packet Storm
205642 4 警告 Splunk - Splunk におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2011-4643 2012-01-5 16:27 2011-12-12 Show GitHub Exploit DB Packet Storm
205643 4.6 警告 Splunk - Splunk の Splunk Web 内にある mappy.py における任意のコードを実行される脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2011-4642 2012-01-5 16:27 2011-12-12 Show GitHub Exploit DB Packet Storm
205644 6.8 警告 Mozilla Foundation - Bugzilla の attachment.cgi におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2011-3669 2012-01-5 16:26 2011-11-20 Show GitHub Exploit DB Packet Storm
205645 6.8 警告 Mozilla Foundation - Bugzilla の post_bug.cgi におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2011-3668 2012-01-5 16:26 2011-11-20 Show GitHub Exploit DB Packet Storm
205646 6.8 警告 Mozilla Foundation - Bugzilla の User.offer_account_by_email の WebService メソッドにおける脆弱性 CWE-287
不適切な認証
CVE-2011-3667 2012-01-5 16:23 2011-12-17 Show GitHub Exploit DB Packet Storm
205647 4.3 警告 Mozilla Foundation - Bugzilla におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2011-3657 2012-01-5 16:21 2011-10-27 Show GitHub Exploit DB Packet Storm
205648 9.3 危険 Steve Baker - PLIB の util/ulError.cxx 内の ulSetError 関数におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2011-4620 2012-01-5 16:21 2011-12-31 Show GitHub Exploit DB Packet Storm
205649 1.2 注意 Celery - virtualenv の virtualenv.py における任意のファイルを上書きされる脆弱性 CWE-59
リンク解釈の問題
CVE-2011-4617 2012-01-5 16:20 2011-12-31 Show GitHub Exploit DB Packet Storm
205650 7.5 危険 Novell - Novell XTier framework の HTTP サーバにおける整数オーバーフローの脆弱性 CWE-189
数値処理の問題
CVE-2011-1710 2012-01-5 16:19 2011-12-31 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 19, 2025, 4:10 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
258971 - dmxready online_notebook_manager Multiple SQL injection vulnerabilities in DMXReady Online Notebook Manager 1.1 allow remote attackers to execute arbitrary SQL commands via the (1) username or (2) password field. NOTE: some third p… CWE-89
SQL Injection
CVE-2009-0454 2017-09-29 10:33 2009-02-10 Show GitHub Exploit DB Packet Storm
258972 - sourdough sourdough PHP remote file inclusion vulnerability in examples/example_clientside_javascript.php in patForms, as used in Sourdough 0.3.5, allows remote attackers to execute arbitrary PHP code via a URL in the n… CWE-94
Code Injection
CVE-2009-0456 2017-09-29 10:33 2009-02-10 Show GitHub Exploit DB Packet Storm
258973 - magtrb aja_portal Multiple directory traversal vulnerabilities in AJA Portal 1.2 allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the currentlang parameter to ad… CWE-22
Path Traversal
CVE-2009-0457 2017-09-29 10:33 2009-02-10 Show GitHub Exploit DB Packet Storm
258974 - clicktech clickcart Multiple SQL injection vulnerabilities in customer_login_check.asp in ClickTech ClickCart 6.0 allow remote attackers to execute arbitrary SQL commands via (1) the txtEmail parameter (aka E-MAIL field… CWE-89
SQL Injection
CVE-2009-0462 2017-09-29 10:33 2009-02-10 Show GitHub Exploit DB Packet Storm
258975 - groonesworld glinks PHP remote file inclusion vulnerability in includes/header.php in Groone GLinks 2.1 allows remote attackers to execute arbitrary PHP code via a URL in the abspath parameter. CWE-94
Code Injection
CVE-2009-0463 2017-09-29 10:33 2009-02-10 Show GitHub Exploit DB Packet Storm
258976 - groonesworld gbook PHP remote file inclusion vulnerability in includes/header.php in Groone GBook 2.0 allows remote attackers to execute arbitrary PHP code via a URL in the abspath parameter. CWE-94
Code Injection
CVE-2009-0464 2017-09-29 10:33 2009-02-10 Show GitHub Exploit DB Packet Storm
258977 - synactis all_in_the_box.ocx The SaveDoc method in the All_In_The_Box.AllBox ActiveX control in ALL_IN_THE_BOX.OCX in Synactis ALL In-The-Box ActiveX 3 allows remote attackers to create and overwrite arbitrary files via an argum… CWE-20
 Improper Input Validation 
CVE-2009-0465 2017-09-29 10:33 2009-02-10 Show GitHub Exploit DB Packet Storm
258978 - armorlogic profense_web_application_firewall Cross-site scripting (XSS) vulnerability in proxy.html in Profense Web Application Firewall 2.6.2 and 2.6.3 allows remote attackers to inject arbitrary web script or HTML via the proxy parameter in a… CWE-79
Cross-site Scripting
CVE-2009-0467 2017-09-29 10:33 2009-02-10 Show GitHub Exploit DB Packet Storm
258979 - armorlogic profense_web_application_firewall Multiple cross-site request forgery (CSRF) vulnerabilities in ajax.html in Profense Web Application Firewall 2.6.2 and 2.6.3 allow remote attackers to hijack the authentication of administrators for … CWE-352
 Origin Validation Error
CVE-2009-0468 2017-09-29 10:33 2009-02-10 Show GitHub Exploit DB Packet Storm
258980 - sun opensolaris
solaris
The IP implementation in Sun Solaris 8 through 10, and OpenSolaris before snv_82, uses an improper arena when allocating minor numbers for sockets, which allows local users to cause a denial of servi… CWE-189
Numeric Errors
CVE-2009-0480 2017-09-29 10:33 2009-02-10 Show GitHub Exploit DB Packet Storm