Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Jan. 18, 2025, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
206741	7.5	危険	アップル VMware サン・マイクロシステムズヒューレット・パッカードレッドハット	-	複数の Oracle 製品の Java 2D コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0848	2011-03-17 08:18	2010-03-30	Show	GitHub Exploit DB Packet Storm

206742	7.5	危険	サン・マイクロシステムズ VMware	-	複数の Oracle 製品の Java 2D コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0850	2011-03-17 08:17	2010-03-30	Show	GitHub Exploit DB Packet Storm

206743	9.3	危険	アドビシステムズ	-	Adobe Shockwave Player の TextXtra モジュールにおける任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2010-4195	2011-03-11 18:22	2011-02-8	Show	GitHub Exploit DB Packet Storm

206744	9.3	危険	アドビシステムズ	-	Adobe Shockwave Player の dirapi.dll モジュールにおける任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2010-4194	2011-03-11 18:21	2011-02-8	Show	GitHub Exploit DB Packet Storm

206745	9.3	危険	アドビシステムズ	-	Adobe Shockwave Player における任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2010-4193	2011-03-11 18:21	2011-02-8	Show	GitHub Exploit DB Packet Storm

206746	9.3	危険	アドビシステムズ	-	Adobe Shockwave Player における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-4192	2011-03-11 18:21	2011-02-8	Show	GitHub Exploit DB Packet Storm

206747	9.3	危険	アドビシステムズ	-	Adobe Shockwave Player における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-4191	2011-03-11 18:20	2011-02-8	Show	GitHub Exploit DB Packet Storm

206748	7.5	危険	アップル VMware サン・マイクロシステムズヒューレット・パッカードレッドハット	-	複数の Oracle 製品の ImageIO コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0846	2011-03-11 10:16	2010-03-30	Show	GitHub Exploit DB Packet Storm

206749	7.5	危険	アップルサイバートラスト株式会社サン・マイクロシステムズヒューレット・パッカード VMware レッドハット	-	複数の Oracle 製品の ImageIO コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0841	2011-03-11 10:11	2010-03-30	Show	GitHub Exploit DB Packet Storm

206750	7.5	危険	アップルサイバートラスト株式会社サン・マイクロシステムズヒューレット・パッカード VMware レッドハット	-	Oracle Sun Java が Java アプレットの署名を正しく検証しない脆弱性	CWE-noinfo 情報不足	CVE-2010-0087	2011-03-11 10:10	2010-04-6	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:Jan. 18, 2025, 4:13 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
266031	-	bea	weblogic_server	BEA WebLogic Server and WebLogic Express 8.1 through 8.1 SP2 allow remote attackers to cause a denial of service (network port consumption) via unknown actions in HTTPS sessions, which prevents the s…	NVD-CWE-Other	CVE-2004-2424	2017-07-12 10:29	2004-12-31	Show	GitHub Exploit DB Packet Storm

266032	-	microsoft	frontpage	The shtml.exe component of Microsoft FrontPage 2000 Server Extensions 1.1 allows remote attackers to determine the physical path of the server components by requesting an invalid URL whose name inclu…	NVD-CWE-Other	CVE-2000-0710	2017-07-12 10:29	2000-10-20	Show	GitHub Exploit DB Packet Storm

266033	-	biblioscape	biblioweb_server	Directory traversal vulnerability in BiblioWeb web server 2.0 allows remote attackers to read arbitrary files via a .. (dot dot) or ... attack in an HTTP GET request.	NVD-CWE-Other	CVE-2001-0226	2017-07-12 10:29	2001-05-3	Show	GitHub Exploit DB Packet Storm

266034	-	network_solutions	rwhoisd	Format string vulnerability in Network Solutions Rwhoisd 1.5.x allows remote attackers to execute arbitrary code via format string specifiers in the -soa command.	NVD-CWE-Other	CVE-2001-0838	2017-07-12 10:29	2001-12-6	Show	GitHub Exploit DB Packet Storm

266035	-	phprojekt	phprojekt	The upload function in PHProjekt 2.0 through 3.1 does not properly verify certain variables related to uploaded data, which allows remote attackers to cause PHProjekt to process arbitrary files.	NVD-CWE-Other	CVE-2002-1759	2017-07-12 10:29	2002-12-31	Show	GitHub Exploit DB Packet Storm

266036	-	fake_identd	fake_identd	Buffer overflow in Fake Identd 0.9 through 1.4 allows remote attackers to execute arbitrary code as root via a long request that is split into multiple packets.	NVD-CWE-Other	CVE-2002-1792	2017-07-12 10:29	2002-12-31	Show	GitHub Exploit DB Packet Storm

266037	-	linksys	befsr11 befsr41 befsru31	Linksys EtherFast Cable/DSL BEFSR11, BEFSR41 and BEFSRU31 with the firmware 1.42.7 upgrade installed opens TCP port 5678 for remote administration even when the "Block WAN" and "Remote Admin" options…	NVD-CWE-Other	CVE-2002-2159	2017-07-12 10:29	2002-12-31	Show	GitHub Exploit DB Packet Storm

266038	-	acme_labs	acme_server	Acme.Serve 1.7, as used in Cisco Secure ACS Unix and possibly other products, allows remote attackers to read arbitrary files by prepending several / (slash) characters to the URI.	CWE-20 Improper Input Validation	CVE-2001-0748	2017-07-12 00:15	2001-10-18	Show	GitHub Exploit DB Packet Storm

266039	-	realnetworks	realone_player realplayer_intranet	Buffer overflow in Real Networks RealPlayer 8.0 and earlier allows remote attackers to execute arbitrary code via a header length value that exceeds the actual length of the header.	NVD-CWE-Other	CVE-2002-0207	2017-07-12 00:15	2002-05-16	Show	GitHub Exploit DB Packet Storm

266040	-	realnetworks	realone_enterprise_desktop realone_player realplayer	RealOne player 6.0.11.868 allows remote attackers to execute arbitrary script in the "My Computer" zone via a Synchronized Multimedia Integration Language (SMIL) presentation with a "file:javascript:…	NVD-CWE-Other	CVE-2004-1798	2017-07-11 21:31	2004-12-31	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed