Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
206211	4.3	警告	razorCMS	-	razorCMS の admin/core/admin_func.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-5051	2011-11-25 11:44	2011-11-23	Show	GitHub Exploit DB Packet Storm

206212	4.3	警告	Zoho Corporation	-	ManageEngine ADManager Plus におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-5050	2011-11-25 11:43	2011-11-23	Show	GitHub Exploit DB Packet Storm

206213	7.5	危険	Zabbix	-	Zabbix の events.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-5049	2011-11-25 11:42	2011-11-23	Show	GitHub Exploit DB Packet Storm

206214	4.3	警告	JoomlaTune Joomla!	-	JoomlaTune JComments におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-5048	2011-11-25 11:42	2011-11-23	Show	GitHub Exploit DB Packet Storm

206215	7.5	危険	V-EVA	-	V-EVA Press Release Script における任意の SQL コマンドを実行される脆弱性	CWE-89 SQLインジェクション	CVE-2010-5047	2011-11-25 11:41	2011-11-23	Show	GitHub Exploit DB Packet Storm

206216	4.3	警告	ecoCMS	-	ecoCMS の admin.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-5046	2011-11-25 11:40	2011-11-23	Show	GitHub Exploit DB Packet Storm

206217	7.5	危険	Alephsystem	-	CMS Ariadna の detResolucion.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-5058	2011-11-25 10:14	2011-11-23	Show	GitHub Exploit DB Packet Storm

206218	7.5	危険	Alephsystem	-	CMS Ariadna の detResolucion.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-5057	2011-11-25 10:13	2011-11-23	Show	GitHub Exploit DB Packet Storm

206219	7.5	危険	IXXO Internet Solutions	-	XOBBIX コンポーネントにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-5053	2011-11-25 10:08	2011-11-23	Show	GitHub Exploit DB Packet Storm

206220	4.3	警告	Joomla!	-	Joomla! におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-4332	2011-11-25 09:39	2011-03-24	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:Feb. 5, 2025, 4:56 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
256611	-	immunix mandrakesoft redhat	immunix mandrake_linux linux	arpwatch 2.1a4 allows local users to overwrite arbitrary files via a symlink attack in some configurations.	NVD-CWE-Other	CVE-2001-0140	2017-10-10 10:29	2001-03-12	Show	GitHub Exploit DB Packet Storm

256612	-	gert_doering	mgetty	mgetty 1.1.22 allows local users to overwrite arbitrary files via a symlink attack in some configurations.	NVD-CWE-Other	CVE-2001-0141	2017-10-10 10:29	2001-03-12	Show	GitHub Exploit DB Packet Storm

256613	-	immunix national_science_foundation mandrakesoft redhat trustix	immunix squid_web_proxy mandrake_linux linux secure_linux	squid 2.3 and earlier allows local users to overwrite arbitrary files via a symlink attack in some configurations.	NVD-CWE-Other	CVE-2001-0142	2017-10-10 10:29	2001-03-12	Show	GitHub Exploit DB Packet Storm

256614	-	immunix redhat	immunix linux	vpop3d program in linuxconf 1.23r and earlier allows local users to overwrite arbitrary files via a symlink attack.	NVD-CWE-Other	CVE-2001-0143	2017-10-10 10:29	2001-03-12	Show	GitHub Exploit DB Packet Storm

256615	-	van_dyke_technologies	vshell	VShell SSH gateway 1.0.1 and earlier has a default port forwarding rule of 0.0.0.0/0.0.0.0, which could allow local users to conduct arbitrary port forwarding to other systems.	NVD-CWE-Other	CVE-2001-0156	2017-10-10 10:29	2001-06-2	Show	GitHub Exploit DB Packet Storm

256616	-	palm	palm_os	Debugging utility in the backdoor mode of Palm OS 3.5.2 and earlier allows attackers with physical access to a Palm device to bypass access restrictions and obtain passwords, even if the system locko…	NVD-CWE-Other	CVE-2001-0157	2017-10-10 10:29	2001-06-2	Show	GitHub Exploit DB Packet Storm

256617	-	netscape	directory_server	Buffer overflow in Netscape Directory Server 4.12 and earlier allows remote attackers to cause a denial of service or execute arbitrary commands via a malformed recipient field.	NVD-CWE-Other	CVE-2001-0164	2017-10-10 10:29	2001-06-2	Show	GitHub Exploit DB Packet Storm

256618	-	macromedia	shockwave_flash_plugin	Macromedia Shockwave Flash plugin version 8 and earlier allows remote attackers to cause a denial of service via malformed tag length specifiers in a SWF file.	NVD-CWE-Other	CVE-2001-0166	2017-10-10 10:29	2001-03-26	Show	GitHub Exploit DB Packet Storm

256619	-	mandrakesoft redhat trustix turbolinux	mandrake_linux mandrake_linux_corporate_server linux secure_linux turbolinux	When using the LD_PRELOAD environmental variable in SUID or SGID applications, glibc does not verify that preloaded libraries in /etc/ld.so.cache are also SUID/SGID, which could allow a local user to…	NVD-CWE-Other	CVE-2001-0169	2017-10-10 10:29	2001-03-26	Show	GitHub Exploit DB Packet Storm

256620	-	immunix conectiva debian redhat	immunix linux debian_linux	glibc 2.1.9x and earlier does not properly clear the RESOLV_HOST_CONF, HOSTALIASES, or RES_OPTIONS environmental variables when executing setuid/setgid programs, which could allow local users to read…	NVD-CWE-Other	CVE-2001-0170	2017-10-10 10:29	2001-03-26	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed