Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
210001	6.9	警告	アップル Vim	-	Vim の Python インターフェースの src/if_python.c における信頼性のない検索パスの脆弱性	CWE-Other その他	CVE-2009-0316	2010-04-26 16:45	2009-01-28	Show	GitHub Exploit DB Packet Storm

210002	9.3	危険	アップルサイバートラスト株式会社 Vim レッドハット	-	Vim におけるエスケープ文字を適切に処理しないことに関する任意のコマンドを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2008-4101	2010-04-26 16:45	2008-10-9	Show	GitHub Exploit DB Packet Storm

210003	9.3	危険	アップルサイバートラスト株式会社 Vim レッドハット	-	Vim における適切に入力をサニタイズしないことに関する任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2008-2712	2010-04-26 16:45	2008-10-9	Show	GitHub Exploit DB Packet Storm

210004	4.3	警告	VMware	-	VMware Server の WebAccess におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-1193	2010-04-21 17:54	2010-03-29	Show	GitHub Exploit DB Packet Storm

210005	7.5	危険	VMware	-	複数の VMware 製品の WebAccess におけるリクエストの発信元を偽装される脆弱性	CWE-20 不適切な入力確認	CVE-2010-0686	2010-04-21 17:53	2010-03-29	Show	GitHub Exploit DB Packet Storm

210006	4.3	警告	VMware	-	複数の VMware 製品の WebAccess におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-1137	2010-04-21 17:51	2010-03-29	Show	GitHub Exploit DB Packet Storm

210007	4.6	警告	GNU Project サイバートラスト株式会社レッドハット	-	GNU Automake の dist または distcheck ルールにおけるコンテンツを変更される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2009-4029	2010-04-21 17:51	2009-12-20	Show	GitHub Exploit DB Packet Storm

210008	5	警告	Linux レッドハット	-	Linux kernel の virtio-net ドライバにおけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2010-0741	2010-04-21 17:48	2010-03-30	Show	GitHub Exploit DB Packet Storm

210009	6.9	警告	mielke レッドハット	-	brltty の libbrlttybba.so における権限昇格の脆弱性	CWE-264 CWE-Other	CVE-2008-3279	2010-04-21 17:47	2010-03-30	Show	GitHub Exploit DB Packet Storm

210010	4.3	警告	Mozilla Foundation	-	Mozilla Firefox/SeaMonkey におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2010-0181	2010-04-20 16:42	2010-03-30	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:Feb. 6, 2025, 4:09 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
255881	-	cdrtools	cdrecord	cdrecord in the cdrtools package before 2.01, when installed setuid root, does not properly drop privileges before executing a program specified in the RSH environment variable, which allows local us…	NVD-CWE-Other	CVE-2004-0806	2017-10-11 10:29	2004-12-31	Show	GitHub Exploit DB Packet Storm

255882	-	samba sgi conectiva mandrakesoft suse	samba linux mandrake_linux suse_linux	Samba 3.0.6 and earlier allows remote attackers to cause a denial of service (infinite loop and memory exhaustion) via certain malformed requests that cause new processes to be spawned and enter an i…	NVD-CWE-Other	CVE-2004-0807	2017-10-11 10:29	2004-09-13	Show	GitHub Exploit DB Packet Storm

255883	-	ide-cd	ide-cd	Unknown vulnerability in the SG_IO functionality in ide-cd allows local users to bypass read-only access and perform unauthorized write and erase operations.	NVD-CWE-Other	CVE-2004-0813	2017-10-11 10:29	2004-12-31	Show	GitHub Exploit DB Packet Storm

255884	-	linux ubuntu	linux_kernel ubuntu_linux	Multiple race conditions in the terminal layer in Linux 2.4.x, and 2.6.x before 2.6.9, allow (1) local users to obtain portions of kernel data via a TIOCSETD ioctl call to a terminal interface that i…	NVD-CWE-Other	CVE-2004-0814	2017-10-11 10:29	2004-12-23	Show	GitHub Exploit DB Packet Storm

255885	-	enlightenment imagemagick sun conectiva mandrakesoft redhat suse turbolinux ubuntu	imlib imlib2 imagemagick java_desktop_system linux mandrake_linux mandrake_linux_corporate_server enterprise_linux enterprise_linux_desktop fedora_core linux_advanced_wo…	Multiple heap-based buffer overflows in the imlib BMP image handler allow remote attackers to execute arbitrary code via a crafted BMP file.	NVD-CWE-Other	CVE-2004-0817	2017-10-11 10:29	2004-12-31	Show	GitHub Exploit DB Packet Storm

255886	-	openldap apple	openldap mac_os_x mac_os_x_server	OpenLDAP 1.0 through 2.1.19, as used in Apple Mac OS 10.3.4 and 10.3.5 and possibly other operating systems, may allow certain authentication schemes to use hashed (crypt) passwords in the userPasswo…	NVD-CWE-Other	CVE-2004-0823	2017-10-11 10:29	2004-09-7	Show	GitHub Exploit DB Packet Storm

255887	-	enlightenment imagemagick sun conectiva mandrakesoft redhat suse turbolinux ubuntu	imlib imlib2 imagemagick java_desktop_system linux mandrake_linux mandrake_linux_corporate_server enterprise_linux enterprise_linux_desktop fedora_core linux_advanced_wo…	Multiple buffer overflows in the ImageMagick graphics library 5.x before 5.4.4, and 6.x before 6.0.6.2, allow remote attackers to cause a denial of service (application crash) and possibly execute ar…	NVD-CWE-Other	CVE-2004-0827	2017-10-11 10:29	2004-09-16	Show	GitHub Exploit DB Packet Storm

255888	-	squid	squid	The (1) ntlm_fetch_string and (2) ntlm_get_string functions in Squid 2.5.6 and earlier, with NTLM authentication enabled, allow remote attackers to cause a denial of service (application crash) via a…	NVD-CWE-Other	CVE-2004-0832	2017-10-11 10:29	2004-11-3	Show	GitHub Exploit DB Packet Storm

255889	-	linux redhat suse trustix ubuntu	linux_kernel enterprise_linux enterprise_linux_desktop fedora_core linux_advanced_workstation suse_linux secure_linux ubuntu_linux	Multiple vulnerabilities in the samba filesystem (smbfs) in Linux kernel 2.4 and 2.6 allow remote samba servers to cause a denial of service (crash) or gain sensitive information from kernel memory v…	NVD-CWE-Other	CVE-2004-0883	2017-10-11 10:29	2005-01-10	Show	GitHub Exploit DB Packet Storm

255890	-	cyrus conectiva	sasl linux	The (1) libsasl and (2) libsasl2 libraries in Cyrus-SASL 2.1.18 and earlier trust the SASL_PATH environment variable to find all available SASL plug-ins, which allows local users to execute arbitrary…	NVD-CWE-Other	CVE-2004-0884	2017-10-11 10:29	2005-01-27	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed