Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 26, 2025, 2 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
207191 7.2 危険 マイクロソフト - Microsoft Windows の win32k.sys における権限昇格の脆弱性 CWE-399
リソース管理の問題 		CVE-2011-0671 2011-05-6 11:25 2011-04-12 Show GitHub Exploit DB Packet Storm
207192 7.2 危険 マイクロソフト - Microsoft Windows の win32k.sys における権限昇格の脆弱性 CWE-399
リソース管理の問題 		CVE-2011-0670 2011-05-6 11:11 2011-04-12 Show GitHub Exploit DB Packet Storm
207193 7.2 危険 マイクロソフト - Microsoft Windows の win32k.sys における権限昇格の脆弱性 CWE-399
リソース管理の問題 		CVE-2011-0667 2011-05-6 11:10 2011-04-12 Show GitHub Exploit DB Packet Storm
207194 7.2 危険 マイクロソフト - Microsoft Windows の win32k.sys における権限昇格の脆弱性 CWE-399
リソース管理の問題 		CVE-2011-0666 2011-05-6 11:09 2011-04-12 Show GitHub Exploit DB Packet Storm
207195 7.2 危険 マイクロソフト - Microsoft Windows の win32k.sys における権限昇格の脆弱性 CWE-399
リソース管理の問題 		CVE-2011-0665 2011-05-6 11:07 2011-04-12 Show GitHub Exploit DB Packet Storm
207196 7.2 危険 マイクロソフト - Microsoft Windows の win32k.sys における権限昇格の脆弱性 CWE-399
リソース管理の問題 		CVE-2011-0662 2011-05-6 11:06 2011-04-12 Show GitHub Exploit DB Packet Storm
207197 9.3 危険 マイクロソフト - Microsoft Windows のワードパッドにおける任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2011-0028 2011-05-6 11:03 2011-04-12 Show GitHub Exploit DB Packet Storm
207198 7.6 危険 マイクロソフト - Microsoft Windows の FAX 送付状エディター内にある fxscover.exe における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2010-3974 2011-05-6 11:01 2011-04-12 Show GitHub Exploit DB Packet Storm
207199 9.3 危険 マイクロソフト - 複数の Microsoft 製品における任意のコードを実行される脆弱性 CWE-399
リソース管理の問題 		CVE-2011-0977 2011-05-6 11:00 2011-02-10 Show GitHub Exploit DB Packet Storm
207200 9.3 危険 マイクロソフト - 複数の Microsoft Office 製品における権限昇格の脆弱性 CWE-Other
その他 		CVE-2011-0107 2011-05-6 10:59 2011-04-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 26, 2025, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
262041 - dotproject dotproject Multiple SQL injection vulnerabilities in index.php in dotProject 2.1.2 allow (1) remote authenticated users to execute arbitrary SQL commands via the tab parameter in a projects action, and (2) remo… CWE-89
SQL Injection 		CVE-2008-3887 2017-08-8 10:32 2008-09-3 Show GitHub Exploit DB Packet Storm
262042 - dotproject dotproject http://secunia.com/advisories/31681: "Successful exploitation of this vulnerability allows e.g. retrieval of administrator usernames and password hashes, but requires valid user credentials." … CWE-89
SQL Injection 		CVE-2008-3887 2017-08-8 10:32 2008-09-3 Show GitHub Exploit DB Packet Storm
262043 - freebsd freebsd The kernel in FreeBSD 6.3 through 7.0 on amd64 platforms can make an extra swapgs call after a General Protection Fault (GPF), which allows local users to gain privileges by triggering a GPF during t… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2008-3890 2017-08-8 10:32 2008-09-6 Show GitHub Exploit DB Packet Storm
262044 - asterisk
trixbox 		p_b_x
pbx 		Asterisk Open Source 1.2.x before 1.2.32, 1.4.x before 1.4.24.1, and 1.6.0.x before 1.6.0.8; Asterisk Business Edition A.x.x, B.x.x before B.2.5.8, C.1.x.x before C.1.10.5, and C.2.x.x before C.2.3.3… CWE-200
Information Exposure 		CVE-2008-3903 2017-08-8 10:32 2008-09-5 Show GitHub Exploit DB Packet Storm
262045 - asterisk
trixbox 		p_b_x
pbx 		Additional details can be found here: http://www.voipsa.org/pipermail/voipsec_voipsa.org/2006-May/001628.html CWE-200
Information Exposure 		CVE-2008-3903 2017-08-8 10:32 2008-09-5 Show GitHub Exploit DB Packet Storm
262046 - lxde gpicview
lightweight_x11_desktop_environment 		src/main-win.c in GPicView 0.1.9 in Lightweight X11 Desktop Environment (LXDE) allows context-dependent attackers to execute arbitrary commands via shell metacharacters in a filename. CWE-20
 Improper Input Validation  		CVE-2008-3904 2017-08-8 10:32 2008-09-5 Show GitHub Exploit DB Packet Storm
262047 - newsbeuter newsbeuter The open-in-browser command in newsbeuter before 1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in a feed URL. CWE-20
 Improper Input Validation  		CVE-2008-3907 2017-08-8 10:32 2008-09-5 Show GitHub Exploit DB Packet Storm
262048 - newsbeuter newsbeuter http://www.openwall.com/lists/oss-security/2008/09/01/4 "The previous version allowed to execute arbitrary code by a crafted feed URL that is passed as a command line parameter if the URL is o… CWE-20
 Improper Input Validation  		CVE-2008-3907 2017-08-8 10:32 2008-09-5 Show GitHub Exploit DB Packet Storm
262049 - hsc dns2tcp dns2tcp before 0.4.1 does not properly handle negative values in a certain length field in the input argument to the (1) dns_simple_decode or (2) dns_decode function, which allows remote attackers to… CWE-189
Numeric Errors 		CVE-2008-3910 2017-08-8 10:32 2008-09-5 Show GitHub Exploit DB Packet Storm
262050 - ovidentia ovidentia SQL injection vulnerability in index.php in Ovidentia 6.6.5 allows remote attackers to execute arbitrary SQL commands via the field parameter in a search action. NOTE: the provenance of this informa… CWE-89
SQL Injection 		CVE-2008-3918 2017-08-8 10:32 2008-09-5 Show GitHub Exploit DB Packet Storm