Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Jan. 31, 2025, 2:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
207191	5.8	警告	IBM	-	IBM WebSphere Application Server におけるオープンリダイレクトの脆弱性	CWE-20 不適切な入力確認	CVE-2011-1355	2011-07-27 10:23	2011-07-12	Show	GitHub Exploit DB Packet Storm

207192	6.8	警告	アップルサイバートラスト株式会社 FreeType Project レッドハット	-	FreeType の truetype/ttgxvar.c 内にある ft_var_readpackedpoints 関数におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-3855	2011-07-27 09:58	2010-11-16	Show	GitHub Exploit DB Packet Storm

207193	6.4	警告	ISC, Inc. IBM サイバートラスト株式会社オラクル VMware レッドハット	-	ISC BIND named validator に脆弱性	CWE-Other その他	CVE-2010-3614	2011-07-27 09:47	2010-12-2	Show	GitHub Exploit DB Packet Storm

207194	4	警告	ISC, Inc. IBM サイバートラスト株式会社ヒューレット・パッカードオラクル VMware レッドハット	-	ISC BIND におけるサービス運用妨害 (DoS) の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-3613	2011-07-27 09:46	2010-12-2	Show	GitHub Exploit DB Packet Storm

207195	5	警告	ISC, Inc. ターボリナックスレッドハットオラクル	-	ISC BIND にサービス運用妨害 (DoS) の脆弱性	CWE-189 数値処理の問題	CVE-2011-1910	2011-07-27 09:43	2011-05-30	Show	GitHub Exploit DB Packet Storm

207196	5	警告	Opera Software ASA	-	Opera におけるサービス運用妨害 (アプリケーションクラッシュ) の脆弱性	CWE-noinfo 情報不足	CVE-2011-2621	2011-07-26 12:03	2011-06-28	Show	GitHub Exploit DB Packet Storm

207197	5	警告	Opera Software ASA	-	Opera におけるサービス運用妨害 (アプリケーションクラッシュ) の脆弱性	CWE-noinfo 情報不足	CVE-2011-2620	2011-07-26 12:02	2011-06-28	Show	GitHub Exploit DB Packet Storm

207198	5	警告	Opera Software ASA	-	Opera におけるサービス運用妨害 (アプリケーションクラッシュ) の脆弱性	CWE-399 リソース管理の問題	CVE-2011-2619	2011-07-26 12:02	2011-06-28	Show	GitHub Exploit DB Packet Storm

207199	5	警告	Opera Software ASA	-	Opera におけるサービス運用妨害 (アプリケーションクラッシュ) の脆弱性	CWE-399 リソース管理の問題	CVE-2011-2618	2011-07-26 12:01	2011-06-28	Show	GitHub Exploit DB Packet Storm

207200	5	警告	Opera Software ASA	-	Opera におけるサービス運用妨害 (アプリケーションクラッシュ) の脆弱性	CWE-noinfo 情報不足	CVE-2011-2617	2011-07-26 12:00	2011-06-28	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:Jan. 31, 2025, 4:11 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
256371	-	yapbb	yapbb	SQL injection vulnerability in forumhop.php in YapBB 1.2 and earlier allows remote attackers to execute arbitrary SQL commands via the forumID parameter in a next action.	CWE-89 SQL Injection	CVE-2009-0768	2017-09-29 10:34	2009-03-6	Show	GitHub Exploit DB Packet Storm

256372	-	mozilla	firefox seamonkey thunderbird	The JavaScript engine in Mozilla Firefox before 3.0.7, Thunderbird before 2.0.0.21, and SeaMonkey 1.1.15 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary co…	CWE-399 Resource Management Errors	CVE-2009-0773	2017-09-29 10:34	2009-03-5	Show	GitHub Exploit DB Packet Storm

256373	-	mozilla	firefox seamonkey thunderbird	Double free vulnerability in Mozilla Firefox before 3.0.7, Thunderbird before 2.0.0.21, and SeaMonkey before 1.1.15 allows remote attackers to execute arbitrary code via "cloned XUL DOM elements whic…	CWE-399 Resource Management Errors	CVE-2009-0775	2017-09-29 10:34	2009-03-5	Show	GitHub Exploit DB Packet Storm

256374	-	mozilla	firefox seamonkey thunderbird	Mozilla Firefox before 3.0.7, Thunderbird before 2.0.0.21, and SeaMonkey before 1.1.15 decode invisible characters when they are displayed in the location bar, which causes an incorrect address to be…	CWE-20 Improper Input Validation	CVE-2009-0777	2017-09-29 10:34	2009-03-5	Show	GitHub Exploit DB Packet Storm

256375	-	tim_hockin	acpid	ACPI Event Daemon (acpid) before 1.0.10 allows remote attackers to cause a denial of service (CPU consumption and connectivity loss) by opening a large number of UNIX sockets without closing them, wh…	CWE-399 Resource Management Errors	CVE-2009-0798	2017-09-29 10:34	2009-04-25	Show	GitHub Exploit DB Packet Storm

256376	-	zfeeder	zfeeder	zFeeder 1.6 allows remote attackers to gain administrative access via a direct request to admin.php.	CWE-264 Permissions, Privileges, and Access Controls	CVE-2009-0807	2017-09-29 10:34	2009-03-5	Show	GitHub Exploit DB Packet Storm

256377	-	xatrix	xguestbook	SQL injection vulnerability in login.php in xGuestbook 2.0 allows remote attackers to execute arbitrary SQL commands via the user parameter.	CWE-89 SQL Injection	CVE-2009-0810	2017-09-29 10:34	2009-03-5	Show	GitHub Exploit DB Packet Storm

256378	-	imera	teamlinks	Insecure method vulnerability in the ImeraIEPlugin ActiveX control (ImeraIEPlugin.dll 1.0.2.54) in Imera TeamLinks Client allows remote attackers to force the download and execution of arbitrary URLs…	CWE-20 Improper Input Validation	CVE-2009-0813	2017-09-29 10:34	2009-03-5	Show	GitHub Exploit DB Packet Storm

256379	-	freedville	bloghelper	BlogHelper stores common_db.inc under the web root with insufficient access control, which allows remote attackers to download the database file containing user credentials via a direct request.	CWE-264 Permissions, Privileges, and Access Controls	CVE-2009-0826	2017-09-29 10:34	2009-03-6	Show	GitHub Exploit DB Packet Storm

256380	-	freedville	pollhelper	PollHelper stores poll.inc under the web root with insufficient access control, which allows remote attackers to download the database file containing user credentials via a direct request.	CWE-264 Permissions, Privileges, and Access Controls	CVE-2009-0827	2017-09-29 10:34	2009-03-6	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed