Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 31, 2025, 4:03 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
208611 9.3 危険 サイバートラスト株式会社
Mozilla Foundation
レッドハット
オラクル
- 複数の Mozilla 製品の XSLT node sorting の実装における整数オーバーフローの脆弱性 CWE-189
数値処理の問題
CVE-2010-1199 2011-01-5 14:41 2010-06-22 Show GitHub Exploit DB Packet Storm
208612 9.3 危険 サイバートラスト株式会社
Mozilla Foundation
レッドハット
オラクル
- 複数の Mozilla 製品における任意のコードを実行される脆弱性 CWE-399
リソース管理の問題
CVE-2010-1198 2011-01-5 14:40 2010-06-22 Show GitHub Exploit DB Packet Storm
208613 9.3 危険 サイバートラスト株式会社
Mozilla Foundation
レッドハット
オラクル
- 複数の Mozilla 製品の nsGenericDOMDataNode::SetTextInternal 関数における整数オーバーフローの脆弱性 CWE-189
数値処理の問題
CVE-2010-1196 2011-01-5 14:39 2010-06-22 Show GitHub Exploit DB Packet Storm
208614 9.3 危険 Mozilla Foundation
オラクル
- 複数の Mozilla 製品の nsCycleCollector::MarkRoots 関数における任意のコードを実行される脆弱性 CWE-399
リソース管理の問題
CVE-2010-0183 2011-01-5 14:19 2010-06-22 Show GitHub Exploit DB Packet Storm
208615 7.5 危険 レッドハット - Red Hat Enterprise MRG の Management Console における任意のジョブを実行される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2010-4179 2011-01-4 16:28 2010-11-30 Show GitHub Exploit DB Packet Storm
208616 7.8 危険 シスコシステムズ - 複数の CIsco 製品上で稼働する remote-access IPSec VPN の実装における有効なグループ名を列挙される脆弱性 CWE-399
リソース管理の問題
CVE-2010-4354 2011-01-4 16:18 2010-09-22 Show GitHub Exploit DB Packet Storm
208617 4 警告 Pidgin
オラクル
- Pidgin の libpurple 内にある oscar プロトコルプラグインの clientautoresp 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2010-2528 2011-01-4 16:14 2010-07-30 Show GitHub Exploit DB Packet Storm
208618 7.2 危険 VMware - 複数の VMware 製品の VMware-Tools アップデート機能における権限昇格の脆弱性 CWE-20
不適切な入力確認
CVE-2010-4297 2010-12-27 15:40 2010-12-2 Show GitHub Exploit DB Packet Storm
208619 7.2 危険 VMware - 複数の VMware 製品の vmware-mount における権限昇格の脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2010-4296 2010-12-27 15:38 2010-12-2 Show GitHub Exploit DB Packet Storm
208620 6.9 警告 VMware - 複数の VMware 製品の vmware-mount における権限昇格の脆弱性 CWE-362
競合状態
CVE-2010-4295 2010-12-27 15:36 2010-12-2 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 2, 2025, 4:09 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
264271 - sun storagetek_3510
storedge
Unspecified vulnerability in the FTP service in Sun StorEdge/StorageTek 3510 FC Array with firmware before 4.21 allows remote attackers, with access to the Ethernet management interface, to cause a d… NVD-CWE-noinfo
CVE-2007-5482 2017-07-29 10:33 2007-10-17 Show GitHub Exploit DB Packet Storm
264272 - ibm websphere_application_server Unspecified vulnerability in the Administrative Scripting Tools (such as wsadmin or ANT) in IBM WebSphere Application Server 5.x and 6.0.x has unknown impact and attack vectors. NVD-CWE-noinfo
CVE-2007-5483 2017-07-29 10:33 2007-10-17 Show GitHub Exploit DB Packet Storm
264273 - dotproject dotproject dotProject before 2.1 does not properly check privileges when invoking the Companies module, which allows remote attackers to access this module via a crafted URL. NOTE: some of these details are ob… CWE-264
Permissions, Privileges, and Access Controls
CVE-2007-5486 2017-07-29 10:33 2007-10-17 Show GitHub Exploit DB Packet Storm
264274 - asterisk asterisk-addons Multiple SQL injection vulnerabilities in cdr_addon_mysql in Asterisk-Addons before 1.2.8, and 1.4.x before 1.4.4, allow remote attackers to execute arbitrary SQL commands via the (1) source and (2) … CWE-89
SQL Injection
CVE-2007-5488 2017-07-29 10:33 2007-10-18 Show GitHub Exploit DB Packet Storm
264275 - openssl fips_object_module The PRNG implementation for the OpenSSL FIPS Object Module 1.1.1 does not perform auto-seeding during the FIPS self-test, which generates random data that is more predictable than expected and makes … CWE-310
Cryptographic Issues
CVE-2007-5502 2017-07-29 10:33 2007-12-1 Show GitHub Exploit DB Packet Storm
264276 - runcms runcms Unspecified vulnerability in newbb_plus in RunCms 1.5.2 has unknown impact and attack vectors. NVD-CWE-noinfo
CVE-2007-5535 2017-07-29 10:33 2007-10-18 Show GitHub Exploit DB Packet Storm
264277 - cisco unified_callmanager
unified_communications_manager
Cisco Unified Communications Manager (CUCM, formerly CallManager) 5.1 before 5.1(2), and Unified CallManager 5.0, allow remote attackers to cause a denial of service (kernel panic) via a flood of SIP… CWE-399
 Resource Management Errors
CVE-2007-5537 2017-07-29 10:33 2007-10-18 Show GitHub Exploit DB Packet Storm
264278 - cisco unified_callmanager
unified_communications_manager
Buffer overflow in the Centralized TFTP File Locator Service in Cisco Unified Communications Manager (CUCM, formerly CallManager) 5.1 before 5.1(3), and Unified CallManager 5.0, allows remote attacke… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2007-5538 2017-07-29 10:33 2007-10-18 Show GitHub Exploit DB Packet Storm
264279 - cisco unified_contact_center_enterprise
unified_contact_center_hosted
unified_icm_hosted
unified_intelligent_contact_management_enterprise
Unspecified vulnerability in Cisco Unified Intelligent Contact Management Enterprise (ICME), Unified ICM Hosted (ICMH), Unified Contact Center Enterprise (UCCE), Unified Contact Center Hosted (UCCH),… NVD-CWE-noinfo
CVE-2007-5539 2017-07-29 10:33 2007-10-18 Show GitHub Exploit DB Packet Storm
264280 - opera opera_browser Unspecified vulnerability in Opera before 9.24, when using an "external" newsgroup or e-mail client, allows remote attackers to execute arbitrary commands via unknown vectors. CWE-20
 Improper Input Validation 
CVE-2007-5541 2017-07-29 10:33 2007-10-18 Show GitHub Exploit DB Packet Storm