Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
208721	9.3	危険	アップル	-	Apple Safari の WebKit における任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2010-3816	2010-12-16 14:18	2010-11-22	Show	GitHub Exploit DB Packet Storm

208722	9.3	危険	アップル	-	Apple Safari の WebKit における任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2010-3811	2010-12-16 14:16	2010-11-22	Show	GitHub Exploit DB Packet Storm

208723	5	警告	The PHP Group サイバートラスト株式会社レッドハット	-	PHP のセッションシリアライザにおける任意のセッション変数に変更される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-3065	2010-12-15 15:28	2010-05-31	Show	GitHub Exploit DB Packet Storm

208724	5	警告	日立	-	JP1/NETM 製品におけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	-	2010-12-15 15:27	2010-07-30	Show	GitHub Exploit DB Packet Storm

208725	5	警告	The PHP Group サイバートラスト株式会社ターボリナックスレッドハット	-	PHP におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2010-1917	2010-12-15 15:27	2010-05-11	Show	GitHub Exploit DB Packet Storm

208726	5	警告	The PHP Group アップルターボリナックスサイバートラスト株式会社レッドハット	-	PHP の xmlrpc 拡張におけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2010-0397	2010-12-15 15:27	2010-03-16	Show	GitHub Exploit DB Packet Storm

208727	6.4	警告	The PHP Group サイバートラスト株式会社レッドハット	-	PHP の Linear Congruential Generator における値を推測される脆弱性	CWE-310 暗号の問題	CVE-2010-1128	2010-12-15 15:26	2010-03-26	Show	GitHub Exploit DB Packet Storm

208728	6.9	警告	GNU Project 日本電気ターボリナックスサイバートラスト株式会社レッドハット	-	GNU Libtool の libltdl における権限昇格の脆弱性	CWE-DesignError	CVE-2009-3736	2010-12-15 15:26	2009-11-16	Show	GitHub Exploit DB Packet Storm

208729	6.4	警告	アップル日本電気 Fetchmail Project	-	fetchmail における任意の SSL サーバになりすまされる脆弱性	CWE-310 暗号の問題	CVE-2009-2666	2010-12-15 15:25	2009-08-6	Show	GitHub Exploit DB Packet Storm

208730	4.3	警告	アップル	-	Apple Safari の WebKit におけるロケーションバーの URL を偽装される脆弱性	CWE-Other その他	CVE-2010-3810	2010-12-15 14:42	2010-11-22	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:Feb. 19, 2025, 4:10 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
263151	-	uiga	church_portal	SQL injection vulnerability in index.php in Uiga Church Portal allows remote attackers to execute arbitrary SQL commands via the month parameter in a calendar action. NOTE: the provenance of this in…	CWE-89 SQL Injection	CVE-2009-3081	2017-08-17 10:31	2009-09-5	Show	GitHub Exploit DB Packet Storm

263152	-	zmanda	zrm_for_my_sql	The doHotCopy subroutine in socket-server.pl in Zmanda Recovery Manager (ZRM) for MySQL 2.x before 2.1.1 allows remote attackers to execute arbitrary commands via vectors involving a crafted $MYSQL_B…	CWE-20 Improper Input Validation	CVE-2009-3102	2017-08-17 10:31	2009-09-9	Show	GitHub Exploit DB Packet Storm

263153	-	symantec	antivirus client_security norton_antivirus norton_internet_security	Unspecified vulnerability in Symantec Norton AntiVirus 2005 through 2008; Norton Internet Security 2005 through 2008; AntiVirus Corporate Edition 9.0 before MR7, 10.0, 10.1 before MR8, and 10.2 befor…	CWE-399 Resource Management Errors	CVE-2009-3104	2017-08-17 10:31	2009-09-9	Show	GitHub Exploit DB Packet Storm

263154	-	ibm	domino_web_access	Cross-site scripting (XSS) vulnerability in IBM Lotus iNotes (aka Domino Web Access or DWA) before 211.241 for Domino 8.0.1 allows remote attackers to inject arbitrary web script or HTML via unspecif…	CWE-79 Cross-site Scripting	CVE-2009-3105	2017-08-17 10:31	2009-09-9	Show	GitHub Exploit DB Packet Storm

263155	-	ibm	websphere_application_server	The Servlet Engine/Web Container component in IBM WebSphere Application Server (WAS) 6.0.2 before 6.0.2.37 does not properly implement security constraints on the (1) doGet and (2) doTrace methods, w…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2009-3106	2017-08-17 10:31	2009-09-9	Show	GitHub Exploit DB Packet Storm

263156	-	chris_shattuck	ajaxtable	Cross-site scripting (XSS) vulnerability in the Ajax Table module 5.x for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.	CWE-79 Cross-site Scripting	CVE-2009-3121	2017-08-17 10:31	2009-09-10	Show	GitHub Exploit DB Packet Storm

263157	-	chris_shattuck	ajaxtable	The Ajax Table module 5.x for Drupal does not perform access control, which allows remote attackers to delete arbitrary users and nodes via unspecified vectors.	CWE-264 Permissions, Privileges, and Access Controls	CVE-2009-3122	2017-08-17 10:31	2009-09-10	Show	GitHub Exploit DB Packet Storm

263158	-	visavi	wap-motor	Directory traversal vulnerability in gallery/gallery.php in Wap-Motor before 18.1 allows remote attackers to read arbitrary files via a .. (dot dot) in the image parameter.	CWE-22 Path Traversal	CVE-2009-3123	2017-08-17 10:31	2009-09-10	Show	GitHub Exploit DB Packet Storm

263159	-	articlefriend	articlefriend_script	Cross-site scripting (XSS) vulnerability in search_advance.php in ArticleFriend Script allows remote attackers to inject arbitrary web script or HTML via the SearchWd parameter. NOTE: the provenance…	CWE-79 Cross-site Scripting	CVE-2009-3146	2017-08-17 10:31	2009-09-11	Show	GitHub Exploit DB Packet Storm

263160	-	nt	bbs_e-market	Multiple cross-site scripting (XSS) vulnerabilities in becommunity/community/index.php in NTSOFT BBS E-Market Professional allow remote attackers to inject arbitrary web script or HTML via the (1) pa…	CWE-79 Cross-site Scripting	CVE-2009-3152	2017-08-17 10:31	2009-09-11	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed