Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
206741	9.3	危険	マイクロソフト	-	Microsoft Forefront UAG 2010 における CRLF インジェクションの脆弱性	CWE-94 コード・インジェクション	CVE-2011-1895	2011-10-21 15:28	2011-10-11	Show	GitHub Exploit DB Packet Storm

206742	9.3	危険	マイクロソフト	-	Microsoft .NET Framework および Silverlight における任意のコードを実行される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-1253	2011-10-21 15:27	2011-10-11	Show	GitHub Exploit DB Packet Storm

206743	7.2	危険	マイクロソフト	-	Microsoft Windows のカーネルモードドライバ内にある win32k.sys における権限昇格の脆弱性	CWE-399 リソース管理の問題	CVE-2011-2011	2011-10-21 15:26	2011-10-11	Show	GitHub Exploit DB Packet Storm

206744	9.3	危険	マイクロソフト	-	Microsoft Windows の win32k.sys のバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2011-2003	2011-10-21 15:25	2011-10-11	Show	GitHub Exploit DB Packet Storm

206745	4.7	警告	マイクロソフト	-	Microsoft Windows の win32k.sys におけるサービス運用妨害 (システムハング) の脆弱性	CWE-20 不適切な入力確認	CVE-2011-2002	2011-10-21 15:25	2011-10-11	Show	GitHub Exploit DB Packet Storm

206746	7.2	危険	マイクロソフト	-	Microsoft Windows の win32k.sys における権限昇格またはサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2011-1985	2011-10-21 15:24	2011-10-11	Show	GitHub Exploit DB Packet Storm

206747	9.3	危険	マイクロソフト	-	Microsoft Windows Vista および Windows 7 の Windows Media Center における権限昇格の脆弱性	CWE-Other その他	CVE-2011-2009	2011-10-21 15:24	2011-10-11	Show	GitHub Exploit DB Packet Storm

206748	9.3	危険	マイクロソフト	-	Microsoft Windows の Microsoft Active Accessibility コンポーネントにおける権限昇格の脆弱性	CWE-Other その他	CVE-2011-1247	2011-10-21 15:23	2011-10-11	Show	GitHub Exploit DB Packet Storm

206749	4	警告	マイクロソフト	-	複数の Microsoft 製品における任意のファイルを読まれる脆弱性	CWE-200 情報漏えい	CVE-2011-1892	2011-10-21 15:18	2011-09-13	Show	GitHub Exploit DB Packet Storm

206750	4.3	警告	マイクロソフト	-	Microsoft Windows SharePoint Services および SharePoint Foundation におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-1891	2011-10-21 15:18	2011-09-13	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:Feb. 7, 2025, 4:09 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
256001	-	andrew_tridgell	rsync	Directory traversal vulnerability in the sanitize_path function in util.c for rsync 2.6.2 and earlier, when chroot is disabled, allows attackers to read or write certain files.	NVD-CWE-Other	CVE-2004-0792	2017-10-11 10:29	2004-10-20	Show	GitHub Exploit DB Packet Storm

256002	-	spamassassin	spamassassin	SpamAssassin 2.5x, and 2.6x before 2.64, allows remote attackers to cause a denial of service via certain malformed messages.	NVD-CWE-Other	CVE-2004-0796	2017-10-11 10:29	2004-10-20	Show	GitHub Exploit DB Packet Storm

256003	-	libtiff pdflib wxgtk2 apple kde mandrakesoft redhat suse trustix	libtiff pdf_library wxgtk2 mac_os_x mac_os_x_server kde mandrake_linux enterprise_linux enterprise_linux_desktop fedora_core linux_advanced_workstation suse_linux …	Multiple vulnerabilities in the RLE (run length encoding) decoders for libtiff 3.6.1 and earlier, related to buffer overflows and integer overflows, allow remote attackers to execute arbitrary code v…	NVD-CWE-Other	CVE-2004-0803	2017-10-11 10:29	2004-12-23	Show	GitHub Exploit DB Packet Storm

256004	-	cdrtools	cdrecord	cdrecord in the cdrtools package before 2.01, when installed setuid root, does not properly drop privileges before executing a program specified in the RSH environment variable, which allows local us…	NVD-CWE-Other	CVE-2004-0806	2017-10-11 10:29	2004-12-31	Show	GitHub Exploit DB Packet Storm

256005	-	samba sgi conectiva mandrakesoft suse	samba linux mandrake_linux suse_linux	Samba 3.0.6 and earlier allows remote attackers to cause a denial of service (infinite loop and memory exhaustion) via certain malformed requests that cause new processes to be spawned and enter an i…	NVD-CWE-Other	CVE-2004-0807	2017-10-11 10:29	2004-09-13	Show	GitHub Exploit DB Packet Storm

256006	-	ide-cd	ide-cd	Unknown vulnerability in the SG_IO functionality in ide-cd allows local users to bypass read-only access and perform unauthorized write and erase operations.	NVD-CWE-Other	CVE-2004-0813	2017-10-11 10:29	2004-12-31	Show	GitHub Exploit DB Packet Storm

256007	-	linux ubuntu	linux_kernel ubuntu_linux	Multiple race conditions in the terminal layer in Linux 2.4.x, and 2.6.x before 2.6.9, allow (1) local users to obtain portions of kernel data via a TIOCSETD ioctl call to a terminal interface that i…	NVD-CWE-Other	CVE-2004-0814	2017-10-11 10:29	2004-12-23	Show	GitHub Exploit DB Packet Storm

256008	-	enlightenment imagemagick sun conectiva mandrakesoft redhat suse turbolinux ubuntu	imlib imlib2 imagemagick java_desktop_system linux mandrake_linux mandrake_linux_corporate_server enterprise_linux enterprise_linux_desktop fedora_core linux_advanced_wo…	Multiple heap-based buffer overflows in the imlib BMP image handler allow remote attackers to execute arbitrary code via a crafted BMP file.	NVD-CWE-Other	CVE-2004-0817	2017-10-11 10:29	2004-12-31	Show	GitHub Exploit DB Packet Storm

256009	-	openldap apple	openldap mac_os_x mac_os_x_server	OpenLDAP 1.0 through 2.1.19, as used in Apple Mac OS 10.3.4 and 10.3.5 and possibly other operating systems, may allow certain authentication schemes to use hashed (crypt) passwords in the userPasswo…	NVD-CWE-Other	CVE-2004-0823	2017-10-11 10:29	2004-09-7	Show	GitHub Exploit DB Packet Storm

256010	-	enlightenment imagemagick sun conectiva mandrakesoft redhat suse turbolinux ubuntu	imlib imlib2 imagemagick java_desktop_system linux mandrake_linux mandrake_linux_corporate_server enterprise_linux enterprise_linux_desktop fedora_core linux_advanced_wo…	Multiple buffer overflows in the ImageMagick graphics library 5.x before 5.4.4, and 6.x before 6.0.6.2, allow remote attackers to cause a denial of service (application crash) and possibly execute ar…	NVD-CWE-Other	CVE-2004-0827	2017-10-11 10:29	2004-09-16	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed