Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Jan. 31, 2025, 4:03 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
207371	9.3	危険	アドビシステムズ	-	Adobe Shockwave Player の IML32.dll における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2011-2111	2011-06-30 10:51	2011-06-14	Show	GitHub Exploit DB Packet Storm

207372	9.3	危険	アドビシステムズ	-	Adobe Shockwave Player の Dirapi.dll における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2011-2109	2011-06-30 10:50	2011-06-14	Show	GitHub Exploit DB Packet Storm

207373	9.3	危険	アドビシステムズ	-	Adobe Shockwave Player における任意のコードを実行される脆弱性	CWE-DesignError	CVE-2011-2108	2011-06-30 10:49	2011-06-14	Show	GitHub Exploit DB Packet Storm

207374	9.3	危険	アドビシステムズ	-	Adobe Shockwave Player の Dirapi.dll における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2011-0335	2011-06-30 10:48	2011-06-14	Show	GitHub Exploit DB Packet Storm

207375	9.3	危険	アドビシステムズ	-	Adobe Shockwave Player の Dirapi.dll における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2011-0320	2011-06-30 10:47	2011-06-14	Show	GitHub Exploit DB Packet Storm

207376	9.3	危険	アドビシステムズターボリナックス	-	Adobe Reader および Acrobat にメモリ破損の脆弱性	CWE-119 バッファエラー	CVE-2011-2105	2011-06-30 10:44	2011-06-14	Show	GitHub Exploit DB Packet Storm

207377	5	警告	Samba Project アップルサイバートラスト株式会社ヒューレット・パッカードターボリナックスレッドハット	-	Samba におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2011-0719	2011-06-30 10:02	2011-02-28	Show	GitHub Exploit DB Packet Storm

207378	4.3	警告	アップルサイバートラスト株式会社 Apache Software Foundation レッドハット	-	Apache HTTP Server 用 mod_dav_svn モジュールにおけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2011-0715	2011-06-30 10:00	2011-03-8	Show	GitHub Exploit DB Packet Storm

207379	4	警告	アップルサイバートラスト株式会社 MySQL AB ターボリナックスレッドハット	-	MySQL におけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2010-3838	2011-06-30 09:51	2010-09-10	Show	GitHub Exploit DB Packet Storm

207380	4	警告	アップルサイバートラスト株式会社 MySQL AB ターボリナックスレッドハット	-	MySQL におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2010-3837	2011-06-30 09:50	2010-09-10	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:Feb. 1, 2025, 4:12 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
258961	-	galaxyscripts	mini_file_host	Directory traversal vulnerability in pages/upload.php in Galaxyscripts Mini File Host 1.2.1 and earlier allows remote attackers to include and execute arbitrary local files via directory traversal se…	CWE-22 Path Traversal	CVE-2008-0357	2017-09-29 10:30	2008-01-19	Show	GitHub Exploit DB Packet Storm

258962	-	pixelpost	pixelpost	SQL injection vulnerability in index.php in Pixelpost 1.7 allows remote attackers to execute arbitrary SQL commands via the parent_id parameter.	CWE-89 SQL Injection	CVE-2008-0358	2017-09-29 10:30	2008-01-19	Show	GitHub Exploit DB Packet Storm

258963	-	alilg	alitalk	Multiple SQL injection vulnerabilities in aliTalk 1.9.1.1, when magic_quotes_gpc is disabled, allow remote authenticated users to execute arbitrary SQL commands via (1) the mohit parameter to (a) inc…	CWE-89 SQL Injection	CVE-2008-0371	2017-09-29 10:30	2008-01-23	Show	GitHub Exploit DB Packet Storm

258964	-	softpedia	small_axe_weblog	PHP remote file inclusion vulnerability in inc/linkbar.php in Small Axe Weblog 0.3.1 allows remote attackers to execute arbitrary PHP code via a URL in the cfile parameter.	CWE-94 Code Injection	CVE-2008-0376	2017-09-29 10:30	2008-01-23	Show	GitHub Exploit DB Packet Storm

258965	-	digital_data_communications	rtspvapgdecoder.dll	Buffer overflow in the Digital Data Communications RtspVaPgCtrl ActiveX control (RtspVapgDecoder.dll 1.1.0.29) allows remote attackers to execute arbitrary code via a long MP4Prefix property.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2008-0380	2017-09-29 10:30	2008-01-23	Show	GitHub Exploit DB Packet Storm

258966	-	wordpress	wp_forum	SQL injection vulnerability in the WP-Forum 1.7.4 plugin for WordPress allows remote attackers to execute arbitrary SQL commands via the user parameter in a showprofile action to the default URI.	CWE-89 SQL Injection	CVE-2008-0388	2017-09-29 10:30	2008-01-23	Show	GitHub Exploit DB Packet Storm

258967	-	auracms	auracms mod_block_statistik	stat.php in AuraCMS 1.62, and Mod Block Statistik for AuraCMS, allows remote attackers to inject arbitrary PHP code into online.db.txt via the X-Forwarded-For HTTP header in a stat action to index.ph…	CWE-94 Code Injection	CVE-2008-0390	2017-09-29 10:30	2008-01-23	Show	GitHub Exploit DB Packet Storm

258968	-	alilg	alitalk	inc/elementz.php in aliTalk 1.9.1.1 does not properly verify authentication, which allows remote attackers to add an arbitrary user account via a modified lilil parameter, in conjunction with the ubi…	CWE-287 Improper Authentication	CVE-2008-0391	2017-09-29 10:30	2008-01-23	Show	GitHub Exploit DB Packet Storm

258969	-	microsoft	visual_basic	Multiple buffer overflows in Microsoft Visual Basic Enterprise Edition 6.0 SP6 allow user-assisted remote attackers to execute arbitrary code via a .dsr file with a long (1) ConnectionName or (2) Com…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2008-0392	2017-09-29 10:30	2008-01-23	Show	GitHub Exploit DB Packet Storm

258970	-	gradman	gradman	Directory traversal vulnerability in info.php in GradMan 0.1.3 and earlier allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the tabla parameter, a different …	CWE-22 Path Traversal	CVE-2008-0393	2017-09-29 10:30	2008-01-23	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed