Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Jan. 20, 2025, 6:03 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
207701	4.4	警告	アップル	-	Apple Mac OS X の Directory Services における認証を回避される脆弱性	CWE-287 不適切な認証	CVE-2010-1838	2010-11-29 15:41	2010-11-15	Show	GitHub Exploit DB Packet Storm

207702	9.3	危険	アップルアドビシステムズターボリナックスレッドハット	-	Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-2174	2010-11-29 15:33	2010-06-10	Show	GitHub Exploit DB Packet Storm

207703	9.3	危険	アップルアドビシステムズターボリナックスレッドハット	-	Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-2173	2010-11-29 15:26	2010-06-10	Show	GitHub Exploit DB Packet Storm

207704	4.3	警告	アップルアドビシステムズターボリナックスレッドハット	-	Adobe Flash Player におけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2010-2172	2010-11-29 15:25	2010-06-10	Show	GitHub Exploit DB Packet Storm

207705	9.3	危険	アップルアドビシステムズターボリナックスレッドハット	-	Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-2171	2010-11-29 15:24	2010-06-10	Show	GitHub Exploit DB Packet Storm

207706	9.3	危険	アップルアドビシステムズターボリナックスレッドハット	-	Adobe Flash Player および Adobe AIR における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2010-2170	2010-11-29 15:21	2010-06-10	Show	GitHub Exploit DB Packet Storm

207707	9.3	危険	アップルアドビシステムズターボリナックスレッドハット	-	Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-2169	2010-11-29 15:18	2010-06-10	Show	GitHub Exploit DB Packet Storm

207708	9.3	危険	アップルアドビシステムズターボリナックスレッドハット	-	Adobe Flash Player および Adobe AIR におけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-2167	2010-11-29 15:17	2010-06-10	Show	GitHub Exploit DB Packet Storm

207709	9.3	危険	アップルアドビシステムズターボリナックスレッドハット	-	Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-2166	2010-11-29 15:16	2010-06-10	Show	GitHub Exploit DB Packet Storm

207710	9.3	危険	アップルアドビシステムズターボリナックスレッドハット	-	Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-2165	2010-11-29 15:15	2010-06-10	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:Jan. 21, 2025, 4:11 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
275131	-	debian	python-dns	PyDNS (aka python-dns) before 2.3.1-4 in Debian GNU/Linux does not use random source ports or transaction IDs for DNS requests, which makes it easier for remote attackers to spoof DNS responses, a di…	CWE-16 Configuration	CVE-2008-4099	2008-09-19 13:00	2008-09-19	Show	GitHub Exploit DB Packet Storm

275132	-	debian	python-dns	PyDNS (aka python-dns) before 2.3.1-5 in Debian GNU/Linux does not use random source ports for DNS requests and does not use random transaction IDs for DNS retries, which makes it easier for remote a…	CWE-16 Configuration	CVE-2008-4126	2008-09-19 13:00	2008-09-19	Show	GitHub Exploit DB Packet Storm

275133	-	lxde	lightweight_x11_desktop_environment	src/main-win.c in GPicView 0.1.9 in Lightweight X11 Desktop Environment (LXDE) allows local users to overwrite arbitrary files via a symlink attack on the /tmp/rot.jpg temporary file.	CWE-59 Link Following	CVE-2008-3791	2008-09-17 14:35	2008-09-3	Show	GitHub Exploit DB Packet Storm

275134	-	apple	iphone	Apple iPhone 2.0.2, in some configurations, allows physically proximate attackers to bypass intended access restrictions, and obtain sensitive information or make arbitrary use of the device, via an …	CWE-264 Permissions, Privileges, and Access Controls	CVE-2008-3876	2008-09-17 14:35	2008-09-2	Show	GitHub Exploit DB Packet Storm

275135	-	six_apart	movable_type	Cross-site scripting (XSS) vulnerability in Movable Type (MT) 4.x through 4.20, and 3.36 and earlier; Movable Type Enterprise 4.x through 4.20, and 1.54 and earlier; and Movable Type Community Soluti…	CWE-79 Cross-site Scripting	CVE-2008-4079	2008-09-16 00:14	2008-09-16	Show	GitHub Exploit DB Packet Storm

275136	-	texmedia	million_pixel_script	SQL injection vulnerability in tops_top.php in Million Pixel Ad Script (Million Pixel Script) allows remote attackers to execute arbitrary SQL commands via the id_cat parameter.	CWE-89 SQL Injection	CVE-2008-4055	2008-09-12 13:00	2008-09-12	Show	GitHub Exploit DB Packet Storm

275137	-	apple	itunes	Apple iTunes before 8.0 on Mac OS X 10.4.11, when iTunes Music Sharing is enabled but blocked by the host-based firewall, presents misleading information about firewall security, which might allow re…	CWE-200 Information Exposure	CVE-2008-3634	2008-09-11 13:00	2008-09-11	Show	GitHub Exploit DB Packet Storm

275138	-	opensuse	opensuse	Multiple off-by-one errors in opensuse-updater in openSUSE 10.2 have unspecified impact and attack vectors. NOTE: the vendor states that these "can be considered no security problem."	NVD-CWE-noinfo CWE-189 Numeric Errors	CVE-2008-2388	2008-09-11 10:10	2008-06-7	Show	GitHub Exploit DB Packet Storm

275139	-	opensuse	opensuse	opensuse-updater in openSUSE 10.2 allows local users to access arbitrary files via a symlink attack.	CWE-59 Link Following	CVE-2008-2389	2008-09-11 10:10	2008-06-7	Show	GitHub Exploit DB Packet Storm

275140	-	xine	xine-lib	Multiple heap-based buffer overflows in the rmff_dump_cont function in input/libreal/rmff.c in xine-lib 1.1.9 allow remote attackers to execute arbitrary code via the SDP (1) Title, (2) Author, or (3…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2008-0238	2008-09-11 10:04	2008-01-12	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed