Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Jan. 31, 2025, 4:03 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
207371	9.3	危険	アドビシステムズ	-	Adobe Shockwave Player の IML32.dll における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2011-2111	2011-06-30 10:51	2011-06-14	Show	GitHub Exploit DB Packet Storm

207372	9.3	危険	アドビシステムズ	-	Adobe Shockwave Player の Dirapi.dll における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2011-2109	2011-06-30 10:50	2011-06-14	Show	GitHub Exploit DB Packet Storm

207373	9.3	危険	アドビシステムズ	-	Adobe Shockwave Player における任意のコードを実行される脆弱性	CWE-DesignError	CVE-2011-2108	2011-06-30 10:49	2011-06-14	Show	GitHub Exploit DB Packet Storm

207374	9.3	危険	アドビシステムズ	-	Adobe Shockwave Player の Dirapi.dll における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2011-0335	2011-06-30 10:48	2011-06-14	Show	GitHub Exploit DB Packet Storm

207375	9.3	危険	アドビシステムズ	-	Adobe Shockwave Player の Dirapi.dll における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2011-0320	2011-06-30 10:47	2011-06-14	Show	GitHub Exploit DB Packet Storm

207376	9.3	危険	アドビシステムズターボリナックス	-	Adobe Reader および Acrobat にメモリ破損の脆弱性	CWE-119 バッファエラー	CVE-2011-2105	2011-06-30 10:44	2011-06-14	Show	GitHub Exploit DB Packet Storm

207377	5	警告	Samba Project アップルサイバートラスト株式会社ヒューレット・パッカードターボリナックスレッドハット	-	Samba におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2011-0719	2011-06-30 10:02	2011-02-28	Show	GitHub Exploit DB Packet Storm

207378	4.3	警告	アップルサイバートラスト株式会社 Apache Software Foundation レッドハット	-	Apache HTTP Server 用 mod_dav_svn モジュールにおけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2011-0715	2011-06-30 10:00	2011-03-8	Show	GitHub Exploit DB Packet Storm

207379	4	警告	アップルサイバートラスト株式会社 MySQL AB ターボリナックスレッドハット	-	MySQL におけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2010-3838	2011-06-30 09:51	2010-09-10	Show	GitHub Exploit DB Packet Storm

207380	4	警告	アップルサイバートラスト株式会社 MySQL AB ターボリナックスレッドハット	-	MySQL におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2010-3837	2011-06-30 09:50	2010-09-10	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:Feb. 3, 2025, 4:07 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
263711	-	slashcode.com	slash	SQL injection vulnerability in Slashdot Like Automated Storytelling Homepage (Slash) (aka Slashcode) R_2_5_0_94 and earlier allows remote attackers to execute SQL commands and read table information …	CWE-89 SQL Injection	CVE-2008-2231	2017-08-8 10:30	2008-06-6	Show	GitHub Exploit DB Packet Storm

263712	-	afuse	afuse	The expand_template function in afuse.c in afuse 0.2 allows local users to gain privileges via shell metacharacters in a pathname.	CWE-264 Permissions, Privileges, and Access Controls	CVE-2008-2232	2017-08-8 10:30	2008-07-17	Show	GitHub Exploit DB Packet Storm

263713	-	opensc-project	opensc	OpenSC before 0.11.5 uses weak permissions (ADMIN file control information of 00) for the 5015 directory on smart cards and USB crypto tokens running Siemens CardOS M4, which allows physically proxim…	CWE-310 Cryptographic Issues	CVE-2008-2235	2017-08-8 10:30	2008-08-1	Show	GitHub Exploit DB Packet Storm

263714	-	blosxom	blosxom	Cross-site scripting (XSS) vulnerability in blosxom.cgi in Blosxom before 2.1.2 allows remote attackers to inject arbitrary web script or HTML via the flav parameter (flavour variable). NOTE: some o…	CWE-79 Cross-site Scripting	CVE-2008-2236	2017-08-8 10:30	2008-10-4	Show	GitHub Exploit DB Packet Storm

263715	-	ibm	lotus_domino	Stack-based buffer overflow in the Web Server service in IBM Lotus Domino before 7.0.3 FP1, and 8.x before 8.0.1, allows remote attackers to cause a denial of service (daemon crash) or possibly execu…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2008-2240	2017-08-8 10:30	2008-05-22	Show	GitHub Exploit DB Packet Storm

263716	-	oued	cyrixmed	Cross-site scripting (XSS) vulnerability in index.php in CyrixMED 1.4 allows remote attackers to inject arbitrary web script or HTML via the msg_erreur parameter. NOTE: the provenance of this inform…	CWE-79 Cross-site Scripting	CVE-2008-2264	2017-08-8 10:30	2008-05-16	Show	GitHub Exploit DB Packet Storm

263717	-	nzbget uudeview	nzbget uudeview	uulib/uunconc.c in UUDeview 0.5.20, as used in nzbget before 0.3.0 and possibly other products, allows local users to overwrite arbitrary files via a symlink attack on a temporary filename generated …	CWE-59 Link Following	CVE-2008-2266	2017-08-8 10:30	2008-05-16	Show	GitHub Exploit DB Packet Storm

263718	-	typo3	sr_feuser_register_extension	Cross-site scripting (XSS) vulnerability in the sr_feuser_register 1.4.0, 1.6.0, 2.2.1 to 2.2.7, 2.3.0 to 2.3.6, 2.4.0, and 2.5.0 to 2.5.9 extension for TYPO3 allows remote attackers to inject arbitr…	CWE-79 Cross-site Scripting	CVE-2008-2274	2017-08-8 10:30	2008-05-16	Show	GitHub Exploit DB Packet Storm

263719	-	typo3	sr_feuser_register_extension	Unspecified vulnerability in sr_feuser_register 1.4.0, 1.6.0, 2.2.1 to 2.2.7, 2.3.0 to 2.3.6, 2.4.0, and 2.5.0 to 2.5.9 extension for TYPO3 allows remote attackers to execute arbitrary code and delet…	NVD-CWE-noinfo CWE-94 Code Injection	CVE-2008-2275	2017-08-8 10:30	2008-05-16	Show	GitHub Exploit DB Packet Storm

263720	-	scriptphp	picengine	Cross-site scripting (XSS) vulnerability in admin/index.php in Script PHP PicEngine 1.0 allows remote attackers to inject arbitrary web script or HTML via the l parameter. NOTE: the provenance of th…	CWE-79 Cross-site Scripting	CVE-2008-2280	2017-08-8 10:30	2008-05-16	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed