Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Jan. 18, 2025, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
207491	9.3	危険	アップルアドビシステムズターボリナックスレッドハット	-	Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-2176	2010-11-30 13:49	2010-06-10	Show	GitHub Exploit DB Packet Storm

207492	9.3	危険	アップルアドビシステムズターボリナックスレッドハット	-	Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-2175	2010-11-30 13:47	2010-06-10	Show	GitHub Exploit DB Packet Storm

207493	7.8	危険	アップル	-	Apple Mac OS X の Networking におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2010-1843	2010-11-29 15:53	2010-11-16	Show	GitHub Exploit DB Packet Storm

207494	9.3	危険	アップル	-	Apple Mac OS X の AppKit におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-1842	2010-11-29 15:47	2010-11-15	Show	GitHub Exploit DB Packet Storm

207495	9.3	危険	アップル	-	Apple Mac OS X の Disk Image における任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2010-1841	2010-11-29 15:45	2010-11-15	Show	GitHub Exploit DB Packet Storm

207496	7.5	危険	アップル	-	Apple Mac OS X の password-validation 機能におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-1840	2010-11-29 15:43	2010-11-15	Show	GitHub Exploit DB Packet Storm

207497	4.4	警告	アップル	-	Apple Mac OS X の Directory Services における認証を回避される脆弱性	CWE-287 不適切な認証	CVE-2010-1838	2010-11-29 15:41	2010-11-15	Show	GitHub Exploit DB Packet Storm

207498	9.3	危険	アップルアドビシステムズターボリナックスレッドハット	-	Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-2174	2010-11-29 15:33	2010-06-10	Show	GitHub Exploit DB Packet Storm

207499	9.3	危険	アップルアドビシステムズターボリナックスレッドハット	-	Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-2173	2010-11-29 15:26	2010-06-10	Show	GitHub Exploit DB Packet Storm

207500	4.3	警告	アップルアドビシステムズターボリナックスレッドハット	-	Adobe Flash Player におけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2010-2172	2010-11-29 15:25	2010-06-10	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:Jan. 19, 2025, 4:13 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
258801	-	portalxp	portalxp	Multiple SQL injection vulnerabilities in PortalXP Teacher Edition 1.2 allow remote attackers to execute arbitrary SQL commands via the id parameter to (1) calendar.php, (2) news.php, and (3) links.p…	CWE-89 SQL Injection	CVE-2009-3148	2017-09-19 10:29	2009-09-11	Show	GitHub Exploit DB Packet Storm

258802	-	curveriderhq	elgg	Directory traversal vulnerability in _css/js.php in Elgg 1.5, when magic_quotes_gpc is disabled, allows remote attackers to read arbitrary files via a .. (dot dot) in the js parameter. NOTE: some of…	CWE-22 Path Traversal	CVE-2009-3149	2017-09-19 10:29	2009-09-11	Show	GitHub Exploit DB Packet Storm

258803	-	multi-website	multi_website	SQL injection vulnerability in index.php in Multi Website 1.5 allows remote attackers to execute arbitrary SQL commands via the Browse parameter in a vote action.	CWE-89 SQL Injection	CVE-2009-3150	2017-09-19 10:29	2009-09-11	Show	GitHub Exploit DB Packet Storm

258804	-	ultrize	timesheet	Directory traversal vulnerability in actions/downloadFile.php in Ultrize TimeSheet 1.2.2 allows remote attackers to read arbitrary files via a .. (dot dot) in the fileName parameter.	CWE-22 Path Traversal	CVE-2009-3151	2017-09-19 10:29	2009-09-11	Show	GitHub Exploit DB Packet Storm

258805	-	almondsoft	com_aclassf	SQL injection vulnerability in the Almond Classifieds (com_aclassf) component 7.5 for Joomla! allows remote attackers to execute arbitrary SQL commands via the replid parameter in a manw_repl add_for…	CWE-89 SQL Injection	CVE-2009-3154	2017-09-19 10:29	2009-09-11	Show	GitHub Exploit DB Packet Storm

258806	-	almondsoft	com_aclassf	Cross-site scripting (XSS) vulnerability in gmap.php in the Almond Classifieds (com_aclassf) component 7.5 for Joomla! allows remote attackers to inject arbitrary web script or HTML via the addr para…	CWE-79 Cross-site Scripting	CVE-2009-3155	2017-09-19 10:29	2009-09-11	Show	GitHub Exploit DB Packet Storm

258807	-	carsten_wulff	simplephpweb	admin/files.php in simplePHPWeb 0.2 does not require authentication, which allows remote attackers to perform unspecified administrative actions via unknown vectors. NOTE: some of these details are …	CWE-287 Improper Authentication	CVE-2009-3158	2017-09-19 10:29	2009-09-11	Show	GitHub Exploit DB Packet Storm

258808	-	anantasoft	gazelle_cms	Directory traversal vulnerability in index.php in Anantasoft Gazelle CMS 1.0, when magic_quotes_gpc is disabled, allows remote attackers to read arbitrary files via a .. (dot dot) in the template par…	CWE-22 Path Traversal	CVE-2009-3167	2017-09-19 10:29	2009-09-12	Show	GitHub Exploit DB Packet Storm

258809	-	aimp	aimp2_audio_converter	Stack-based buffer overflow in AIMP2 Audio Converter 2.53 (build 330) and earlier allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a long File1 argu…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2009-3170	2017-09-19 10:29	2009-09-12	Show	GitHub Exploit DB Packet Storm

258810	-	anantasoft	gazelle_cms	Multiple cross-site scripting (XSS) vulnerabilities in Anantasoft Gazelle CMS 1.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) user parameter to user.php or (…	CWE-79 Cross-site Scripting	CVE-2009-3171	2017-09-19 10:29	2009-09-12	Show	GitHub Exploit DB Packet Storm