Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
207891 7.5 危険 アップル
ClamAV
- ClamAV の libclamav の pdf.c における任意のコードを実行される脆弱性性 CWE-noinfo
情報不足
CVE-2010-4479 2011-04-25 10:19 2010-12-7 Show GitHub Exploit DB Packet Storm
207892 7.5 危険 アップル
ClamAV
- ClamAV の libclamav の pe_icons.c 内にある icon_cb 関数における一つずれエラーの脆弱性 CWE-189
数値処理の問題
CVE-2010-4261 2011-04-25 10:17 2010-12-7 Show GitHub Exploit DB Packet Storm
207893 5 警告 アップル
ClamAV
- ClamAV の libclamav の pdf.c における任意のコードを実行される脆弱性 CWE-noinfo
情報不足
CVE-2010-4260 2011-04-21 18:57 2010-12-7 Show GitHub Exploit DB Packet Storm
207894 9.3 危険 アップル
ClamAV
- ClamAV の find_stream_bounds 関数におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2010-3434 2011-04-21 17:56 2010-09-30 Show GitHub Exploit DB Packet Storm
207895 7.5 危険 Git project
オラクル
- Git の is_git_directory 関数におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2010-2542 2011-04-21 17:54 2010-08-11 Show GitHub Exploit DB Packet Storm
207896 5 警告 Git project
オラクル
- Git の git-daemon におけるサービス運用妨害(無限ループおよび CPU 資源の消費)の脆弱性 CWE-399
リソース管理の問題
CVE-2009-2108 2011-04-21 17:53 2009-06-18 Show GitHub Exploit DB Packet Storm
207897 4.6 警告 Git project
オラクル
- Git の gitweb/gitweb.perl における任意のコマンドを実行される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2008-5916 2011-04-21 17:52 2009-01-21 Show GitHub Exploit DB Packet Storm
207898 7.5 危険 Git project
オラクル
- Git の Web インターフェースにおける任意のコマンドを実行される脆弱性 CWE-264
CWE-78
CVE-2008-5516 2011-04-21 17:51 2009-01-20 Show GitHub Exploit DB Packet Storm
207899 5 警告 オラクル
CUPS
- CUPS の cupsDoAuthentication 関数におけるサービス運用妨害 (無限ループ) の脆弱性 CWE-399
リソース管理の問題
CVE-2010-2432 2011-04-21 17:49 2010-03-3 Show GitHub Exploit DB Packet Storm
207900 4.3 警告 The PHP Group - PHP の zip_stream.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-189
数値処理の問題
CVE-2011-1471 2011-04-21 17:45 2011-03-17 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 7, 2025, 4:09 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
263471 - rmsoft minishop_module Cross-site scripting (XSS) vulnerability in search.php in the RMSOFT MiniShop module 1.0 for Xoops allows remote attackers to inject arbitrary web script or HTML via the itemsxpag parameter. CWE-79
Cross-site Scripting
CVE-2008-4432 2017-08-8 10:32 2008-10-4 Show GitHub Exploit DB Packet Storm
263472 - rmsoft minishop_module SQL injection vulnerability in search.php in the RMSOFT MiniShop module 1.0 for Xoops might allow remote attackers to execute arbitrary SQL commands via the itemsxpag parameter. CWE-89
SQL Injection
CVE-2008-4433 2017-08-8 10:32 2008-10-4 Show GitHub Exploit DB Packet Storm
263473 - utorrent
bittorrent
utorrent
bittorrent
Stack-based buffer overflow in (1) uTorrent 1.7.7 build 8179 and earlier and (2) BitTorrent 6.0.3 build 8642 and earlier allows remote attackers to cause a denial of service (crash) and possibly exec… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2008-4434 2017-08-8 10:32 2008-10-4 Show GitHub Exploit DB Packet Storm
263474 - rmsoft downloads_plus_module Multiple cross-site scripting (XSS) vulnerabilities in the RMSOFT Downloads Plus (rmdp) module 1.5 and 1.7 for Xoops allow remote attackers to inject arbitrary web script or HTML via the (1) key para… CWE-79
Cross-site Scripting
CVE-2008-4435 2017-08-8 10:32 2008-10-4 Show GitHub Exploit DB Packet Storm
263475 - mozilla bugzilla Directory traversal vulnerability in importxml.pl in Bugzilla before 2.22.5, and 3.x before 3.0.5, when --attach_path is enabled, allows remote attackers to read arbitrary files via an XML file with … CWE-22
Path Traversal
CVE-2008-4437 2017-08-8 10:32 2008-10-4 Show GitHub Exploit DB Packet Storm
263476 - datafeed_studio datafeed_studio Cross-site scripting (XSS) vulnerability in search.php in Datafeed Studio 1.6.2 allows remote attackers to inject arbitrary web script or HTML via the q parameter. NOTE: the provenance of this infor… CWE-79
Cross-site Scripting
CVE-2008-4438 2017-08-8 10:32 2008-10-4 Show GitHub Exploit DB Packet Storm
263477 - martinwood datafeed_studio PHP remote file inclusion vulnerability in admin/bin/patch.php in MartinWood Datafeed Studio before 1.6.3 allows remote attackers to execute arbitrary PHP code via a URL in the INSTALL_FOLDER paramet… CWE-94
Code Injection
CVE-2008-4439 2017-08-8 10:32 2008-10-4 Show GitHub Exploit DB Packet Storm
263478 - positive_software h-sphere Cross-site scripting (XSS) vulnerability in actions.php in Positive Software H-Sphere WebShell 4.3.10 allows remote attackers to inject arbitrary web script or HTML via (1) the fn parameter during a … CWE-79
Cross-site Scripting
CVE-2008-4447 2017-08-8 10:32 2008-10-7 Show GitHub Exploit DB Packet Storm
263479 - positive_software h-sphere Cross-site request forgery (CSRF) vulnerability in actions.php in Positive Software H-Sphere WebShell 4.3.10 allows remote attackers to perform unauthorized actions as an administrator, including fil… CWE-352
 Origin Validation Error
CVE-2008-4448 2017-08-8 10:32 2008-10-7 Show GitHub Exploit DB Packet Storm
263480 - apache_friends xampp Cross-site scripting (XSS) vulnerability in adodb.php in XAMPP for Windows 1.6.8 allows remote attackers to inject arbitrary web script or HTML via the (1) dbserver, (2) host, (3) user, (4) password,… CWE-79
Cross-site Scripting
CVE-2008-4450 2017-08-8 10:32 2008-10-7 Show GitHub Exploit DB Packet Storm