Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Jan. 10, 2025, 6:04 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
207271	4.3	警告	オラクル	-	Oracle OpenSSO Enterprise の OpenSSO コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2009-3764	2010-08-9 16:48	2010-07-13	Show	GitHub Exploit DB Packet Storm

207272	4.3	警告	オラクル	-	Oracle OpenSSO Enterprise の Access Manager / OpenSSO コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2009-3763	2010-08-9 16:48	2010-07-13	Show	GitHub Exploit DB Packet Storm

207273	5	警告	オラクル	-	Oracle Sun Convergence における脆弱性	CWE-noinfo 情報不足	CVE-2010-0914	2010-08-9 16:48	2010-07-13	Show	GitHub Exploit DB Packet Storm

207274	5.8	警告	オラクル	-	Oracle Sun Java System Web Proxy Server の管理サーバにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-2385	2010-08-9 16:48	2010-07-13	Show	GitHub Exploit DB Packet Storm

207275	2.1	注意	オラクル	-	Oracle PeopleSoft and JDEdwards Suite の PeopleSoft Enterprise Campus Solutions コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-2403	2010-08-6 18:29	2010-07-13	Show	GitHub Exploit DB Packet Storm

207276	3	注意	オラクル	-	Oracle PeopleSoft and JDEdwards Suite の PeopleSoft Enterprise CRM コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-2378	2010-08-6 18:29	2010-07-13	Show	GitHub Exploit DB Packet Storm

207277	4	警告	オラクル	-	Oracle PeopleSoft and JDEdwards Suite の PeopleSoft Enterprise PeopleTools コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-2377	2010-08-6 18:29	2010-07-13	Show	GitHub Exploit DB Packet Storm

207278	4	警告	オラクル	-	Oracle PeopleSoft and JDEdwards Suite の PeopleSoft Enterprise HCM - Time & Labor コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-2379	2010-08-6 18:29	2010-07-13	Show	GitHub Exploit DB Packet Storm

207279	4	警告	オラクル	-	Oracle PeopleSoft and JDEdwards Suite の PeopleSoft Enterprise HCM コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-2398	2010-08-6 18:28	2010-07-13	Show	GitHub Exploit DB Packet Storm

207280	4.3	警告	オラクル	-	Oracle PeopleSoft and JDEdwards Suite の PeopleSoft Enterprise FSCM コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-2380	2010-08-6 18:28	2010-07-13	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:Jan. 11, 2025, 5:03 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
258461	-	aspindir	uranyumsoft_listing_service	UranyumSoft Listing Service stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for database/db…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2009-4585	2017-08-17 10:31	2010-01-7	Show	GitHub Exploit DB Packet Storm

258462	-	mediawiki	mediawik mediawiki	Cross-site scripting (XSS) vulnerability in the Special:Block implementation in the getContribsLink function in SpecialBlockip.php in MediaWiki 1.14.0 and 1.15.0 allows remote attackers to inject arb…	CWE-79 Cross-site Scripting	CVE-2009-4589	2017-08-17 10:31	2010-01-8	Show	GitHub Exploit DB Packet Storm

258463	-	secureideas	base	Cross-site scripting (XSS) vulnerability in base_local_rules.php in Basic Analysis and Security Engine (BASE) before 1.4.4 allows remote attackers to inject arbitrary web script or HTML via unspecifi…	CWE-79 Cross-site Scripting	CVE-2009-4590	2017-08-17 10:31	2010-01-8	Show	GitHub Exploit DB Packet Storm

258464	-	secureideas	base	SQL injection vulnerability in Basic Analysis and Security Engine (BASE) before 1.4.4 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.	CWE-89 SQL Injection	CVE-2009-4591	2017-08-17 10:31	2010-01-8	Show	GitHub Exploit DB Packet Storm

258465	-	secureideas	base	Unspecified vulnerability in base_local_rules.php in Basic Analysis and Security Engine (BASE) before 1.4.4 allows remote attackers to include arbitrary local files via unknown vectors.	NVD-CWE-noinfo	CVE-2009-4592	2017-08-17 10:31	2010-01-8	Show	GitHub Exploit DB Packet Storm

258466	-	ibm	lotus_inotes	Unspecified vulnerability in IBM Lotus iNotes (aka Domino Web Access or DWA) before 229.131 for Domino 8.0.x has unknown impact and attack vectors, aka SPR SDOY7RHBNH.	NVD-CWE-noinfo	CVE-2009-4594	2017-08-17 10:31	2010-01-10	Show	GitHub Exploit DB Packet Storm

258467	-	phpwares	php_inventory	Cross-site scripting (XSS) vulnerability in index.php in PHP Inventory 1.2 allows remote attackers to inject arbitrary web script or HTML via the sup_id parameter in a suppliers details action.	CWE-79 Cross-site Scripting	CVE-2009-4596	2017-08-17 10:31	2010-01-13	Show	GitHub Exploit DB Packet Storm

258468	-	phpwares	php_inventory	Multiple SQL injection vulnerabilities in index.php in PHP Inventory 1.2 allow (1) remote authenticated users to execute arbitrary SQL commands via the user_id parameter in a users details action, an…	CWE-89 SQL Injection	CVE-2009-4597	2017-08-17 10:31	2010-01-13	Show	GitHub Exploit DB Packet Storm

258469	-	corephp	com_jphoto	SQL injection vulnerability in the JPhoto (com_jphoto) component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a category action to index.php.	CWE-89 SQL Injection	CVE-2009-4598	2017-08-17 10:31	2010-01-13	Show	GitHub Exploit DB Packet Storm

258470	-	joomshark	com_jsjobs	Multiple SQL injection vulnerabilities in the JS Jobs (com_jsjobs) component 1.0.5.6 for Joomla! allow remote attackers to execute arbitrary SQL commands via (1) the md parameter in an employer view_…	CWE-89 SQL Injection	CVE-2009-4599	2017-08-17 10:31	2010-01-13	Show	GitHub Exploit DB Packet Storm