Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
209351 2.1 注意 VMware - VMware ESX の VMware Consolidated Backup コマンドラインユーティリティにおける重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2008-2101 2010-09-13 16:01 2008-08-29 Show GitHub Exploit DB Packet Storm
209352 9 危険 VMware - VMware ESXi および ESX の openwsman management service におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2008-2097 2010-09-13 16:01 2008-06-4 Show GitHub Exploit DB Packet Storm
209353 6.9 警告 VMware - Windows 上で稼働する複数の VMware 製品の VMCI における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2008-2099 2010-09-13 16:00 2008-05-30 Show GitHub Exploit DB Packet Storm
209354 6.9 警告 VMware - 複数の VMware 製品の HGFS におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2008-2098 2010-09-13 16:00 2008-05-30 Show GitHub Exploit DB Packet Storm
209355 5 警告 VMware - 複数の VMware 製品の VMware Authentication Daemon におけるサービス運用妨害 (DoS) の脆弱性 CWE-134
書式文字列の問題 		CVE-2009-4811 2010-09-13 16:00 2010-04-27 Show GitHub Exploit DB Packet Storm
209356 7.2 危険 VMware - Windows 上で稼働する複数の VMware 製品の OpenProcess 関数における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-3698 2010-09-13 15:59 2008-08-29 Show GitHub Exploit DB Packet Storm
209357 10 危険 VMware - 複数の VMware 製品の ActiveX コントロールにおける脆弱性 CWE-noinfo
情報不足 		CVE-2008-3696 2010-09-13 15:59 2008-08-28 Show GitHub Exploit DB Packet Storm
209358 10 危険 VMware - 複数の VMware 製品の ActiveX コントロールにおける脆弱性 CWE-noinfo
情報不足 		CVE-2008-3695 2010-09-13 15:59 2008-08-28 Show GitHub Exploit DB Packet Storm
209359 10 危険 VMware - 複数の VMware 製品の ActiveX コントロールにおける脆弱性 CWE-noinfo
情報不足 		CVE-2008-3694 2010-09-13 15:58 2008-08-28 Show GitHub Exploit DB Packet Storm
209360 10 危険 VMware - 複数の VMware 製品の ActiveX コントロールにおける脆弱性 CWE-noinfo
情報不足 		CVE-2008-3693 2010-09-13 15:58 2008-08-28 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 11, 2025, 4:06 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
263391 - activewebsoftwares active_price_comparison SQL injection vulnerability in links.asp in Active Price Comparison 4.0 allows remote attackers to execute arbitrary SQL commands via the linkid parameter. NOTE: the provenance of this information i… CWE-89
SQL Injection 		CVE-2008-5975 2017-08-8 10:33 2009-01-27 Show GitHub Exploit DB Packet Storm
263392 - preprojects php_jobwebsite_pro Multiple cross-site scripting (XSS) vulnerabilities in siteadmin/forgot.php in PHP JOBWEBSITE PRO allow remote attackers to inject arbitrary web script or HTML via (1) the adname parameter in a Submi… CWE-79
Cross-site Scripting 		CVE-2008-5976 2017-08-8 10:33 2009-01-27 Show GitHub Exploit DB Packet Storm
263393 - preprojects php_jobwebsite_pro SQL injection vulnerability in siteadmin/forgot.php in PHP JOBWEBSITE PRO allows remote attackers to execute arbitrary SQL commands via the adname parameter in a Submit action. CWE-89
SQL Injection 		CVE-2008-5977 2017-08-8 10:33 2009-01-27 Show GitHub Exploit DB Packet Storm
263394 - dia dia Untrusted search path vulnerability in the Python plugin in Dia 0.96.1, and possibly other versions, allows local users to execute arbitrary code via a Trojan horse Python file in the current working… NVD-CWE-Other
CVE-2008-5984 2017-08-8 10:33 2009-01-28 Show GitHub Exploit DB Packet Storm
263395 - csound csound Untrusted search path vulnerability in the (1) "VST plugin with Python scripting" and (2) "VST plugin for writing score generators in Python" in Csound 5.08.2, and possibly other versions, allows loc… NVD-CWE-Other
CVE-2008-5986 2017-08-8 10:33 2009-01-28 Show GitHub Exploit DB Packet Storm
263396 - checkpoint connectra_ngx Cross-site scripting (XSS) vulnerability in index.php in Check Point Connectra NGX R62 HFA_01 allows remote attackers to inject arbitrary web script or HTML via the dir parameter. NOTE: the provenan… CWE-79
Cross-site Scripting 		CVE-2008-5994 2017-08-8 10:33 2009-01-29 Show GitHub Exploit DB Packet Storm
263397 - typo3 freecap_captcha_extension Cross-site scripting (XSS) vulnerability in the freeCap CAPTCHA (sr_freecap) extension before 1.0.4 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. CWE-79
Cross-site Scripting 		CVE-2008-5995 2017-08-8 10:33 2009-01-29 Show GitHub Exploit DB Packet Storm
263398 - typo3 freecap_captcha_extension Solution: An updated version 1.0.4 is available from the TYPO3 extension manager and at typo3.org/extensions/repository/view/sr_freecap/1.0.4/. Users of the extension are advised to update the extens… CWE-79
Cross-site Scripting 		CVE-2008-5995 2017-08-8 10:33 2009-01-29 Show GitHub Exploit DB Packet Storm
263399 - link3 simplenews Cross-site scripting (XSS) vulnerability in the Simplenews module 5.x before 5.x-1.5 and 6.x before 6.x-1.0-beta4, a module for Drupal, allows remote authenticated users, with "administer taxonomy" p… CWE-79
Cross-site Scripting 		CVE-2008-5996 2017-08-8 10:33 2009-01-29 Show GitHub Exploit DB Packet Storm
263400 - ocp2 omnicom_content_platform Absolute path traversal vulnerability in admin/fileKontrola/browser.asp in Omnicom Content Platform (OCP) 2.0 allows remote attackers to list arbitrary directories via a full pathname in the root par… CWE-22
Path Traversal 		CVE-2008-5997 2017-08-8 10:33 2009-01-29 Show GitHub Exploit DB Packet Storm