Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
207381	9.3	危険	アドビシステムズ	-	Adobe Shockwave Player の IML32.dll における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2011-2111	2011-06-30 10:51	2011-06-14	Show	GitHub Exploit DB Packet Storm

207382	9.3	危険	アドビシステムズ	-	Adobe Shockwave Player の Dirapi.dll における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2011-2109	2011-06-30 10:50	2011-06-14	Show	GitHub Exploit DB Packet Storm

207383	9.3	危険	アドビシステムズ	-	Adobe Shockwave Player における任意のコードを実行される脆弱性	CWE-DesignError	CVE-2011-2108	2011-06-30 10:49	2011-06-14	Show	GitHub Exploit DB Packet Storm

207384	9.3	危険	アドビシステムズ	-	Adobe Shockwave Player の Dirapi.dll における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2011-0335	2011-06-30 10:48	2011-06-14	Show	GitHub Exploit DB Packet Storm

207385	9.3	危険	アドビシステムズ	-	Adobe Shockwave Player の Dirapi.dll における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2011-0320	2011-06-30 10:47	2011-06-14	Show	GitHub Exploit DB Packet Storm

207386	9.3	危険	アドビシステムズターボリナックス	-	Adobe Reader および Acrobat にメモリ破損の脆弱性	CWE-119 バッファエラー	CVE-2011-2105	2011-06-30 10:44	2011-06-14	Show	GitHub Exploit DB Packet Storm

207387	5	警告	Samba Project アップルサイバートラスト株式会社ヒューレット・パッカードターボリナックスレッドハット	-	Samba におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2011-0719	2011-06-30 10:02	2011-02-28	Show	GitHub Exploit DB Packet Storm

207388	4.3	警告	アップルサイバートラスト株式会社 Apache Software Foundation レッドハット	-	Apache HTTP Server 用 mod_dav_svn モジュールにおけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2011-0715	2011-06-30 10:00	2011-03-8	Show	GitHub Exploit DB Packet Storm

207389	4	警告	アップルサイバートラスト株式会社 MySQL AB ターボリナックスレッドハット	-	MySQL におけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2010-3838	2011-06-30 09:51	2010-09-10	Show	GitHub Exploit DB Packet Storm

207390	4	警告	アップルサイバートラスト株式会社 MySQL AB ターボリナックスレッドハット	-	MySQL におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2010-3837	2011-06-30 09:50	2010-09-10	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:Feb. 6, 2025, 4:09 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
263471	-	planetluc	signme	Cross-site scripting (XSS) vulnerability in signme.inc.php in Planetluc SignMe 1.5 before 1.55 allows remote attackers to inject arbitrary web script or HTML via the hash parameter. NOTE: some of th…	CWE-79 Cross-site Scripting	CVE-2008-4891	2017-08-8 10:32	2008-11-4	Show	GitHub Exploit DB Packet Storm

263472	-	planetluc	mygallery	Cross-site scripting (XSS) vulnerability in gallery.inc.php in Planetluc MyGallery 1.7.2 and earlier, and possibly other versions before 1.8.1, allows remote attackers to inject arbitrary web script …	CWE-79 Cross-site Scripting	CVE-2008-4892	2017-08-8 10:32	2008-11-4	Show	GitHub Exploit DB Packet Storm

263473	-	planetluc	mygallery	Patch Information - http://planetluc.com/en/scripts_mygallery.php	CWE-79 Cross-site Scripting	CVE-2008-4892	2017-08-8 10:32	2008-11-4	Show	GitHub Exploit DB Packet Storm

263474	-	tribiq	tribiq_cms	Cross-site scripting (XSS) vulnerability in templates/mytribiqsite/tribal-GPL-1066/includes/header.inc.php in Tribiq CMS 5.0.10a, when register_globals is enabled, allows remote attackers to inject a…	CWE-79 Cross-site Scripting	CVE-2008-4893	2017-08-8 10:32	2008-11-4	Show	GitHub Exploit DB Packet Storm

263475	-	logz	logz	Cross-site scripting (XSS) vulnerability in fichiers/add_url.php in Logz CMS 1.3.1 allows remote attackers to inject arbitrary web script or HTML via the art parameter. NOTE: the provenance of this …	CWE-79 Cross-site Scripting	CVE-2008-4896	2017-08-8 10:32	2008-11-4	Show	GitHub Exploit DB Packet Storm

263476	-	planetluc	rateme	Cross-site scripting (XSS) vulnerability in planetluc RateMe 1.3.3 allows remote attackers to inject arbitrary web script or HTML via the rate parameter in a submit rate action.	CWE-79 Cross-site Scripting	CVE-2008-4898	2017-08-8 10:32	2008-11-4	Show	GitHub Exploit DB Packet Storm

263477	-	planetluc	rateme	Cross-site request forgery (CSRF) vulnerability in Planetluc RateMe 1.3.3 allows remote attackers to perform unauthorized actions as other users via unspecified vectors.	CWE-352 Origin Validation Error	CVE-2008-4899	2017-08-8 10:32	2008-11-4	Show	GitHub Exploit DB Packet Storm

263478	-	typosphere	typo	Cross-site scripting (XSS) vulnerability in the leave comment (feedback) feature in Typo 5.1.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) comment[author] (…	CWE-79 Cross-site Scripting	CVE-2008-4903	2017-08-8 10:32	2008-11-4	Show	GitHub Exploit DB Packet Storm

263479	-	typosphere	typo	SQL injection vulnerability in the "Manage pages" feature (admin/pages) in Typo 5.1.3 and earlier allows remote authenticated users with "blog publisher" rights to execute arbitrary SQL commands via …	CWE-89 SQL Injection	CVE-2008-4904	2017-08-8 10:32	2008-11-4	Show	GitHub Exploit DB Packet Storm

263480	-	dovecot	dovecot	The message parsing feature in Dovecot 1.1.4 and 1.1.5, when using the FETCH ENVELOPE command in the IMAP client, allows remote attackers to cause a denial of service (persistent crash) via an email …	CWE-20 Improper Input Validation	CVE-2008-4907	2017-08-8 10:32	2008-11-4	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed