Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
209401	7.5	危険	The PHP Group アップル	-	PHP の safe_mode 実装におけるアクセス制限を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-1129	2010-09-8 15:49	2010-03-26	Show	GitHub Exploit DB Packet Storm

209402	4.4	警告	サイバートラスト株式会社 Todd C. Miller ターボリナックスレッドハット	-	sudo における権限昇格の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-0427	2010-09-8 15:49	2010-02-25	Show	GitHub Exploit DB Packet Storm

209403	6.6	警告	サイバートラスト株式会社レッドハット	-	QEMU-KVM の subpage MMIO initialization 機能における権限を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-2784	2010-09-7 15:51	2010-08-19	Show	GitHub Exploit DB Packet Storm

209404	6.6	警告	サイバートラスト株式会社レッドハット	-	QEMU-KVM のゲスト QXL ドライバポインタにおける権限を取得される脆弱性	CWE-20 不適切な入力確認	CVE-2010-0431	2010-09-7 15:50	2010-08-19	Show	GitHub Exploit DB Packet Storm

209405	6.6	警告	サイバートラスト株式会社レッドハット	-	複数のレッドハット製品などで利用される libspice のメモリ管理操作における権限を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-0429	2010-09-7 15:49	2010-08-19	Show	GitHub Exploit DB Packet Storm

209406	6.6	警告	サイバートラスト株式会社レッドハット	-	複数のレッドハット製品などで利用される libspice のゲスト QXL ドライバポインタにおける権限を取得される脆弱性	CWE-20 不適切な入力確認	CVE-2010-0428	2010-09-7 15:48	2010-08-19	Show	GitHub Exploit DB Packet Storm

209407	-	-	ワイズテクノロジー	-	Wyse ThinOS LPD サービスにバッファオーバーフローの脆弱性	-	-	2010-09-7 15:47	2010-08-17	Show	GitHub Exploit DB Packet Storm

209408	7.8	危険	日立	-	Hitachi Storage Command Suite 製品の組み込みデータベースにおけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	-	2010-09-7 15:45	2010-08-16	Show	GitHub Exploit DB Packet Storm

209409	7.8	危険	日立	-	JP1/Desktop Navigation 組み込みデータベースにおけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	-	2010-09-7 15:44	2010-08-16	Show	GitHub Exploit DB Packet Storm

209410	4.3	警告	Zabbix	-	Zabbix の formatQuery 関数におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-2790	2010-09-7 15:42	2010-06-9	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:Feb. 19, 2025, 4:10 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
263021	-	php	php	The Zend Engine in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allows context-dependent attackers to obtain sensitive information by interrupting the handler for the (1) ZEND_BW_XOR opcode (shift_le…	CWE-200 Information Exposure	CVE-2010-1914	2017-08-17 10:32	2010-05-12	Show	GitHub Exploit DB Packet Storm

263022	-	php	php	The preg_quote function in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allows context-dependent attackers to obtain sensitive information (memory contents) by causing a userspace interruption of an …	CWE-200 Information Exposure	CVE-2010-1915	2017-08-17 10:32	2010-05-12	Show	GitHub Exploit DB Packet Storm

263023	-	php	php	Stack consumption vulnerability in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allows context-dependent attackers to cause a denial of service (PHP crash) via a crafted first argument to the fnmatch…	CWE-399 Resource Management Errors	CVE-2010-1917	2017-08-17 10:32	2010-05-12	Show	GitHub Exploit DB Packet Storm

263024	-	phpscripte24	web_social_network_freunde_community	SQL injection vulnerability in user.php in Hi Web Wiesbaden Web 2.0 Social Network Freunde Community System allows remote attackers to execute arbitrary SQL commands via the id parameter in a showgal…	CWE-89 SQL Injection	CVE-2010-1923	2017-08-17 10:32	2010-05-13	Show	GitHub Exploit DB Packet Storm

263025	-	phpscripte24	live_shopping_multi_portal_system	SQL injection vulnerability in index.php in Hi Web Wiesbaden Live Shopping Multi Portal System allows remote attackers to execute arbitrary SQL commands via the artikel parameter.	CWE-89 SQL Injection	CVE-2010-1924	2017-08-17 10:32	2010-05-13	Show	GitHub Exploit DB Packet Storm

263026	-	openmairie	openplanning	Directory traversal vulnerability in scr/soustab.php in openMairie openPlanning 1.00, when register_globals is enabled, allows remote attackers to include and execute arbitrary local files via direct…	CWE-22 Path Traversal	CVE-2010-1928	2017-08-17 10:32	2010-05-13	Show	GitHub Exploit DB Packet Storm

263027	-	openmairie	openpresse	Directory traversal vulnerability in scr/soustab.php in openMairie Openpresse 1.01, when register_globals is enabled, allows remote attackers to include and execute arbitrary local files via director…	CWE-22 Path Traversal	CVE-2010-1935	2017-08-17 10:32	2010-05-13	Show	GitHub Exploit DB Packet Storm

263028	-	openmairie	opencominterne	Directory traversal vulnerability in scr/soustab.php in openMairie openComInterne 1.01, when register_globals is enabled, allows remote attackers to include and execute arbitrary local files via dire…	CWE-22 Path Traversal	CVE-2010-1936	2017-08-17 10:32	2010-05-13	Show	GitHub Exploit DB Packet Storm

263029	-	apple	safari	Apple Safari 4.0.5 on Windows sends the "Authorization: Basic" header appropriate for one web site to a different web site named in a Location header received from the first site, which allows remote…	CWE-255 Credentials Management	CVE-2010-1940	2017-08-17 10:32	2010-05-15	Show	GitHub Exploit DB Packet Storm

263030	-	fujitsu	interstage_application_server	Unspecified vulnerability in the Servlet service in Fujitsu Limited Interstage Application Server 3.0 through 7.0, as used in Interstage Application Framework Suite, Interstage Business Application S…	NVD-CWE-noinfo	CVE-2010-1942	2017-08-17 10:32	2010-05-19	Show	GitHub Exploit DB Packet Storm