Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
207361 5.5 警告 ターボリナックス
Timo Sirainen
- Dovecot の plugins/acl/acl-backend-vfile.c におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2010-3706 2011-07-4 08:33 2010-10-2 Show GitHub Exploit DB Packet Storm
207362 6.4 警告 ターボリナックス
Timo Sirainen
- Dovecot の ACL プラグインにおけるメールボックスを読まれる脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2010-3304 2011-07-4 08:32 2010-07-24 Show GitHub Exploit DB Packet Storm
207363 5.8 警告 レッドハット - TigerVNC の vncviewer コンポネント内にある CSecurityTLS::processMsg 関数における TLS VNC サーバを偽造される脆弱性 CWE-20
不適切な入力確認
CVE-2011-1775 2011-07-4 08:30 2011-05-26 Show GitHub Exploit DB Packet Storm
207364 9.3 危険 アドビシステムズ - Adobe Shockwave Player における任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2011-2128 2011-07-1 15:32 2011-06-14 Show GitHub Exploit DB Packet Storm
207365 9.3 危険 アドビシステムズ - Adobe Shockwave Player における任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2011-2127 2011-07-1 15:31 2011-06-14 Show GitHub Exploit DB Packet Storm
207366 9.3 危険 アドビシステムズ - Adobe Shockwave Player におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2011-2126 2011-07-1 15:30 2011-06-14 Show GitHub Exploit DB Packet Storm
207367 9.3 危険 アドビシステムズ - Adobe Shockwave Player の Dirapix.dll におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2011-2125 2011-07-1 10:19 2011-06-14 Show GitHub Exploit DB Packet Storm
207368 9.3 危険 アドビシステムズ - Adobe Shockwave Player における任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2011-2124 2011-07-1 10:17 2011-06-14 Show GitHub Exploit DB Packet Storm
207369 9.3 危険 アドビシステムズ - Adobe Shockwave Player の Shockwave 3D Asset x32 コンポーネントにおける整数オーバーフローの脆弱性 CWE-189
数値処理の問題
CVE-2011-2123 2011-07-1 10:15 2011-06-14 Show GitHub Exploit DB Packet Storm
207370 9.3 危険 アドビシステムズ - Adobe Shockwave Player の Dirapi.dll における任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2011-2122 2011-07-1 10:14 2011-06-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 26, 2025, 4:08 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
255291 - moinmoin moinmoin _macro_Getval in wikimacro.py in MoinMoin 1.5.8 and earlier does not properly enforce ACLs, which allows remote attackers to read protected pages. CWE-264
Permissions, Privileges, and Access Controls
CVE-2008-1099 2018-10-4 06:53 2008-03-6 Show GitHub Exploit DB Packet Storm
255292 - ltsp linux_terminal_server_project ldm in Linux Terminal Server Project (LTSP) 0.99 and 2 passes the -ac option to the X server on each LTSP client, which allows remote attackers to connect to this server via TCP port 6006 (aka displa… CWE-264
Permissions, Privileges, and Access Controls
CVE-2008-1293 2018-10-4 06:53 2008-04-29 Show GitHub Exploit DB Packet Storm
255293 - xiph.org libvorbis Integer overflow in residue partition value (aka partvals) evaluation in Xiph.org libvorbis 1.2.0 and earlier allows remote attackers to execute arbitrary code via a crafted OGG file, which triggers … CWE-189
Numeric Errors
CVE-2008-1420 2018-10-4 06:53 2008-05-16 Show GitHub Exploit DB Packet Storm
255294 - linux linux_kernel The chrp_show_cpuinfo function (chrp/setup.c) in Linux kernel 2.4.21 through 2.6.18-53, when running on PowerPC, might allow local users to cause a denial of service (crash) via unknown vectors that … NVD-CWE-noinfo
CWE-399
 Resource Management Errors
CVE-2007-6694 2018-10-4 06:52 2008-01-30 Show GitHub Exploit DB Packet Storm
255295 - gnu emacs Stack-based buffer overflow in emacs allows user-assisted attackers to cause a denial of service (application crash) and possibly have unspecified other impact via a large precision value in an integ… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2007-6109 2018-10-4 06:51 2007-12-7 Show GitHub Exploit DB Packet Storm
255296 - net_dns net_dns Net/DNS/RR/A.pm in Net::DNS 0.60 build 654, as used in packages such as SpamAssassin and OTRS, allows remote attackers to cause a denial of service (program "croak") via a crafted DNS response. CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2007-6341 2018-10-4 06:51 2007-12-21 Show GitHub Exploit DB Packet Storm
255297 - mysql mysql The convert_search_mode_to_innobase function in ha_innodb.cc in the InnoDB engine in MySQL 5.1.23-BK and earlier allows remote authenticated users to cause a denial of service (database crash) via a … CWE-20
 Improper Input Validation 
CVE-2007-5925 2018-10-4 06:50 2007-11-10 Show GitHub Exploit DB Packet Storm
255298 - hp linux_imaging_and_printing_project hpssd in Hewlett-Packard Linux Imaging and Printing Project (hplip) 1.x and 2.x before 2.7.10 allows context-dependent attackers to execute arbitrary commands via shell metacharacters in a from addre… CWE-20
 Improper Input Validation 
CVE-2007-5208 2018-10-4 06:49 2007-10-13 Show GitHub Exploit DB Packet Storm
255299 - mozilla firefox Mozilla Firefox 2.0 before 2.0.0.8 allows remote attackers to obtain sensitive system information by using the addMicrosummaryGenerator sidebar method to access file: URIs. CWE-200
Information Exposure
CVE-2007-5335 2018-10-4 06:49 2007-10-24 Show GitHub Exploit DB Packet Storm
255300 - php php The money_format function in PHP 5 before 5.2.4, and PHP 4 before 4.4.8, permits multiple (1) %i and (2) %n tokens, which has unknown impact and attack vectors, possibly related to a format string vu… NVD-CWE-Other
CVE-2007-4658 2018-10-4 06:48 2007-09-5 Show GitHub Exploit DB Packet Storm