Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 24, 2025, 12:05 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
207101 7.2 危険 マイクロソフト - Microsoft Windows の win32k.sys における権限昇格の脆弱性 CWE-399
リソース管理の問題 		CVE-2011-1242 2011-05-9 11:55 2011-04-12 Show GitHub Exploit DB Packet Storm
207102 7.2 危険 マイクロソフト - Microsoft Windows の win32k.sys における権限昇格の脆弱性 CWE-399
リソース管理の問題 		CVE-2011-1241 2011-05-9 11:53 2011-04-12 Show GitHub Exploit DB Packet Storm
207103 7.2 危険 マイクロソフト - Microsoft Windows の win32k.sys における権限昇格の脆弱性 CWE-399
リソース管理の問題 		CVE-2011-1240 2011-05-9 11:52 2011-04-12 Show GitHub Exploit DB Packet Storm
207104 7.2 危険 マイクロソフト - Microsoft Windows の win32k.sys における権限昇格の脆弱性 CWE-399
リソース管理の問題 		CVE-2011-1239 2011-05-9 11:51 2011-04-12 Show GitHub Exploit DB Packet Storm
207105 7.2 危険 マイクロソフト - Microsoft Windows の win32k.sys における権限昇格の脆弱性 CWE-399
リソース管理の問題 		CVE-2011-1238 2011-05-9 11:50 2011-04-12 Show GitHub Exploit DB Packet Storm
207106 7.2 危険 マイクロソフト - Microsoft Windows の win32k.sys における権限昇格の脆弱性 CWE-399
リソース管理の問題 		CVE-2011-1237 2011-05-9 11:49 2011-04-12 Show GitHub Exploit DB Packet Storm
207107 7.2 危険 マイクロソフト - Microsoft Windows の win32k.sys における権限昇格の脆弱性 CWE-399
リソース管理の問題 		CVE-2011-1236 2011-05-9 11:48 2011-04-12 Show GitHub Exploit DB Packet Storm
207108 7.2 危険 マイクロソフト - Microsoft Windows の win32k.sys における権限昇格の脆弱性 CWE-399
リソース管理の問題 		CVE-2011-1235 2011-05-9 11:46 2011-04-12 Show GitHub Exploit DB Packet Storm
207109 6.8 警告 freedesktop.org
サイバートラスト株式会社
foolabs
OpenOffice.org Project
レッドハット		 - xpdf および poppler などの製品で利用される PDF パーサの FoFiType1::parse 関数における任意のコードを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2010-3704 2011-05-9 11:29 2010-10-7 Show GitHub Exploit DB Packet Storm
207110 6.8 警告 freedesktop.org
サイバートラスト株式会社
foolabs
OpenOffice.org Project
レッドハット		 - xpdf および poppler などの製品で利用される PDF パーサの Gfx::getPos 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2010-3702 2011-05-9 11:26 2010-10-7 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 24, 2025, 4:45 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
264201 - digium asterisk Asterisk 1.4 before 1.4.1 and 1.2 before 1.2.16 allows remote attackers to cause a denial of service (crash) by sending a Session Initiation Protocol (SIP) packet without a URI and SIP-version header… NVD-CWE-Other
CVE-2007-1306 2017-07-29 10:30 2007-03-7 Show GitHub Exploit DB Packet Storm
264202 - digium asterisk Per: http://cwe.mitre.org/data/definitions/476.html 'CWE-476: NULL Pointer Dereference' NVD-CWE-Other
CVE-2007-1306 2017-07-29 10:30 2007-03-7 Show GitHub Exploit DB Packet Storm
264203 - silc silc-server The SILC_SERVER_CMD_FUNC function in apps/silcd/command.c in silc-server 1.0.2 allows remote attackers to cause a denial of service (NULL dereference and daemon crash) via a request without a cipher … CWE-476
 NULL Pointer Dereference 		CVE-2007-1327 2017-07-29 10:30 2007-03-8 Show GitHub Exploit DB Packet Storm
264204 - apple airport_extreme The default configuration of the AirPort utility in Apple AirPort Extreme creates an IPv6 tunnel but does not enable the "Block incoming IPv6 connections" setting, which might allow remote attackers … NVD-CWE-Other
CVE-2007-1338 2017-07-29 10:30 2007-03-9 Show GitHub Exploit DB Packet Storm
264205 - webcalendar webcalendar includes/functions.php in Craig Knudsen WebCalendar before 1.0.5 does not protect the noSet variable from external modification, which allows remote attackers to set arbitrary global variables via a … NVD-CWE-Other
CVE-2007-1343 2017-07-29 10:30 2007-03-9 Show GitHub Exploit DB Packet Storm
264206 - mod_security mod_security Interpretation conflict in ModSecurity (mod_security) 2.1.0 and earlier allows remote attackers to bypass request rules via application/x-www-form-urlencoded POST data that contains an ASCIIZ (0x00) … NVD-CWE-noinfo
CVE-2007-1359 2017-07-29 10:30 2007-03-9 Show GitHub Exploit DB Packet Storm
264207 - drupal nodefamily Unspecified vulnerability in the Nodefamily module for Drupal 5.x before 5.x-1.0 allows remote authenticated users to access and modify other users' profiles via unspecified URL parameters. NVD-CWE-Other
CVE-2007-1360 2017-07-29 10:30 2007-03-9 Show GitHub Exploit DB Packet Storm
264208 - dropafew dropafew Multiple SQL injection vulnerabilities in DropAFew before 0.2.1 allow remote attackers to execute arbitrary SQL commands via the (1) id parameter in the delete action in (a) search.php or (b) search-… NVD-CWE-Other
CVE-2007-1363 2017-07-29 10:30 2007-04-12 Show GitHub Exploit DB Packet Storm
264209 - dropafew dropafew DropAFew before 0.2.1 does not require authorization for certain privileged actions, which allows remote attackers to (1) view the logged calorie information of arbitrary users via the id parameter i… NVD-CWE-Other
CVE-2007-1364 2017-07-29 10:30 2007-04-12 Show GitHub Exploit DB Packet Storm
264210 - drupal drupal_project_issue_tracking The Project issue tracking module before 4.7.x-1.3, 4.7.x-2.* before 4.7.x-2.3, and 5 before 5.x-0.2-beta for Drupal allows remote authenticated users, with "access project issues" permission, to rea… NVD-CWE-Other
CVE-2007-1368 2017-07-29 10:30 2007-03-10 Show GitHub Exploit DB Packet Storm