Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 27, 2025, 2:02 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
209751 7.5 危険 サン・マイクロシステムズ
サイバートラスト株式会社
VMware
レッドハット
- Sun Java SE および OpenJDK の X11 および Win32GraphicsDevice サブシステムにおける getConfigurations 関数による配列の複製に関する脆弱性 CWE-noinfo
情報不足
CVE-2009-3879 2010-02-23 11:51 2009-11-9 Show GitHub Exploit DB Packet Storm
209752 5 警告 サン・マイクロシステムズ
VMware
レッドハット
- Sun Java SE の TrueType フォント解析機能におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足
CVE-2009-3729 2010-02-23 11:51 2009-11-9 Show GitHub Exploit DB Packet Storm
209753 5 警告 アップル
サイバートラスト株式会社
VMware
サン・マイクロシステムズ
レッドハット
- Sun Java SE および OpenJDK の Java Runtime Environment (JRE) における ディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2009-3728 2010-02-23 11:51 2009-11-9 Show GitHub Exploit DB Packet Storm
209754 9.3 危険 マイクロソフト - Microsoft Internet Explorer における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2010-0248 2010-02-22 12:15 2010-01-21 Show GitHub Exploit DB Packet Storm
209755 9.3 危険 マイクロソフト - Microsoft Internet Explorer における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2010-0244 2010-02-22 12:15 2010-01-21 Show GitHub Exploit DB Packet Storm
209756 9.3 危険 マイクロソフト - Microsoft Internet Explorer の URL 検証における任意のローカルプログラムを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2010-0027 2010-02-22 12:15 2010-01-21 Show GitHub Exploit DB Packet Storm
209757 9.3 危険 マイクロソフト - Microsoft Internet Explorer における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2010-0247 2010-02-22 12:14 2010-01-21 Show GitHub Exploit DB Packet Storm
209758 9.3 危険 マイクロソフト - Microsoft Internet Explorer における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2010-0246 2010-02-22 12:14 2010-01-21 Show GitHub Exploit DB Packet Storm
209759 9.3 危険 マイクロソフト - Microsoft Internet Explorer における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2010-0245 2010-02-22 12:13 2010-01-21 Show GitHub Exploit DB Packet Storm
209760 4.3 警告 マイクロソフト - Microsoft Internet Explorer の XSS フィルタにおけるクロスサイトスクリプティングの脆弱性 CWE-DesignError
CVE-2009-4074 2010-02-22 12:13 2009-11-25 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 27, 2025, 4:07 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
272461 - acid
secureideas
analysis_console_for_intrusion_databases
basic_analysis_and_security_engine
Multiple SQL injection vulnerabilities in (1) acid_qry_main.php in Analysis Console for Intrusion Databases (ACID) 0.9.6b20 and (2) base_qry_main.php in Basic Analysis and Security Engine (BASE) 1.2,… CWE-89
SQL Injection
CVE-2005-3325 2012-07-3 13:00 2005-10-27 Show GitHub Exploit DB Packet Storm
272462 - david_paleino wicd The DBus configuration file for Wicd before 1.5.9 allows arbitrary users to own org.wicd.daemon, which allows local users to receive messages that were intended for the Wicd daemon, possibly includin… CWE-16
Configuration
CVE-2009-0489 2012-07-2 13:00 2009-02-10 Show GitHub Exploit DB Packet Storm
272463 - php php PHP 4.0.4pl1 and 4.0.5 in safe mode allows remote attackers to read and write files owned by the web server UID by uploading a PHP script that uses the error_log function to access the files. CWE-264
Permissions, Privileges, and Access Controls
CVE-2001-1247 2012-06-25 13:00 2001-12-6 Show GitHub Exploit DB Packet Storm
272464 - perforce perforce_server Directory traversal vulnerability in Perforce Server 2008.1 allows remote authenticated users to create arbitrary files via a .. (dot dot) in the argument to the "p4 add" command. CWE-22
Path Traversal
CVE-2010-0933 2012-06-15 13:00 2010-03-6 Show GitHub Exploit DB Packet Storm
272465 - opera opera_browser Unspecified vulnerability in Opera before 9.24 allows remote attackers to overwrite functions on pages from other domains and bypass the same-origin policy via unknown vectors. CWE-20
 Improper Input Validation 
CVE-2007-5540 2012-06-8 06:14 2007-10-18 Show GitHub Exploit DB Packet Storm
272466 - opera opera_browser Opera before 9.26 allows remote attackers to "bypass sanitization filters" and conduct cross-site scripting (XSS) attacks via crafted attribute values in an XML document, which are not properly handl… CWE-79
Cross-site Scripting
CVE-2008-1082 2012-06-8 03:06 2008-02-29 Show GitHub Exploit DB Packet Storm
272467 - opera opera_browser Opera before 9.26 allows user-assisted remote attackers to execute arbitrary script via images that contain custom comments, which are treated as script when the user displays the image properties. CWE-94
Code Injection
CVE-2008-1081 2012-06-8 03:02 2008-02-29 Show GitHub Exploit DB Packet Storm
272468 - opera opera_browser Opera before 9.26 allows user-assisted remote attackers to read arbitrary files by tricking a user into typing the characters of the target filename into a file input. CWE-20
 Improper Input Validation 
CVE-2008-1080 2012-06-8 02:58 2008-02-29 Show GitHub Exploit DB Packet Storm
272469 - opera opera_browser Opera before 9.63 does not block unspecified "scripted URLs" during the feed preview, which allows remote attackers to read existing subscriptions and force subscriptions to arbitrary feed URLs. NVD-CWE-Other
CVE-2008-5681 2012-06-8 02:24 2008-12-20 Show GitHub Exploit DB Packet Storm
272470 - opera opera_browser Cross-site scripting (XSS) vulnerability in Opera before 9.63 allows remote attackers to inject arbitrary web script or HTML via built-in XSLT templates. CWE-79
Cross-site Scripting
CVE-2008-5682 2012-06-8 02:22 2008-12-20 Show GitHub Exploit DB Packet Storm