Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":June 3, 2026, noon
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 252521 | 9.3 | 危険 | NTRglobal | - | NTR ActiveX コントロールの StopModule メソッドにおける任意のコードを実行される脆弱性 |
CWE-20
不適切な入力確認 |
CVE-2012-0267 | 2012-01-17 16:07 | 2012-01-15 | Show | GitHub Exploit DB Packet Storm |
| 252522 | 9.3 | 危険 | NTRglobal | - | NTR ActiveX コントロールにおけるスタックベースのバッファオーバーフローの脆弱性 |
CWE-119
バッファエラー |
CVE-2012-0266 | 2012-01-17 16:04 | 2012-01-15 | Show | GitHub Exploit DB Packet Storm |
| 252523 | 10 | 危険 | ヒューレット・パッカード | - | HP StorageWorks P2000 G3 MSA array systems における管理者権限でタスクを実行される脆弱性 |
CWE-22
パス・トラバーサル |
CVE-2012-0697 | 2012-01-16 15:19 | 2012-01-13 | Show | GitHub Exploit DB Packet Storm |
| 252524 | 4.3 | 警告 | IBM | - | IBM Cognos TM1 の Executive Viewer におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2012-0696 | 2012-01-16 15:04 | 2010-11-12 | Show | GitHub Exploit DB Packet Storm |
| 252525 | 10 | 危険 | Google サムスン 日本エイサー |
- | Chromebook プラットフォームで稼働する Google Chrome における詳細不明な脆弱性 |
CWE-noinfo
情報不足 |
CVE-2012-0695 | 2012-01-16 15:04 | 2012-01-10 | Show | GitHub Exploit DB Packet Storm |
| 252526 | 4.9 | 警告 | Adaptive Computing | - | TORQUE Resource Manager における任意のユーザアカウントを偽装される脆弱性 |
CWE-264
認可・権限・アクセス制御 |
CVE-2011-4925 | 2012-01-16 15:03 | 2012-01-13 | Show | GitHub Exploit DB Packet Storm |
| 252527 | 10 | 危険 | ヒューレット・パッカード | - | HP Diagnostics におけるスタックベースのバッファオーバーフローの脆弱性 |
CWE-119
バッファエラー |
CVE-2011-4789 | 2012-01-16 15:02 | 2012-01-13 | Show | GitHub Exploit DB Packet Storm |
| 252528 | 7.8 | 危険 | ヒューレット・パッカード | - | HP StorageWorks P2000 G3 MSA array systems における絶対パストラバーサルの脆弱性 |
CWE-22
パス・トラバーサル |
CVE-2011-4788 | 2012-01-16 15:02 | 2012-01-13 | Show | GitHub Exploit DB Packet Storm |
| 252529 | 9.3 | 危険 | ヒューレット・パッカード | - | HP Easy Printer Care Software における任意のプログラムをダウンロードされる脆弱性 |
CWE-94
コード・インジェクション |
CVE-2011-4787 | 2012-01-16 15:01 | 2012-01-11 | Show | GitHub Exploit DB Packet Storm |
| 252530 | 9.3 | 危険 | ヒューレット・パッカード | - | HP Easy Printer Care Software における任意のプログラムをダウンロードされる脆弱性 |
CWE-94
コード・インジェクション |
CVE-2011-4786 | 2012-01-16 15:00 | 2012-01-11 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:June 3, 2026, 4:18 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 195401 | 6.1 |
MEDIUM
Network |
open-xchange | open-xchange_appsuite | OX App Suite through 7.10.4 allows XSS via an appointment in which the location contains JavaScript code. |
CWE-79
Cross-site Scripting |
CVE-2021-23935 | 2024-11-21 14:52 | 2021-01-13 | Show | GitHub Exploit DB Packet Storm |
| 195402 | 6.1 |
MEDIUM
Network |
open-xchange | open-xchange_appsuite | OX App Suite through 7.10.4 allows XSS via a contact whose name contains JavaScript code. |
CWE-79
Cross-site Scripting |
CVE-2021-23934 | 2024-11-21 14:52 | 2021-01-13 | Show | GitHub Exploit DB Packet Storm |
| 195403 | 6.1 |
MEDIUM
Network |
open-xchange | open-xchange_appsuite | OX App Suite through 7.10.4 allows XSS via JavaScript in a Note referenced by a mail:// URL. |
CWE-79
Cross-site Scripting |
CVE-2021-23933 | 2024-11-21 14:52 | 2021-01-13 | Show | GitHub Exploit DB Packet Storm |
| 195404 | 6.1 |
MEDIUM
Network |
open-xchange | open-xchange_appsuite | OX App Suite through 7.10.4 allows XSS via an inline image with a crafted filename. |
CWE-79
Cross-site Scripting |
CVE-2021-23932 | 2024-11-21 14:52 | 2021-01-13 | Show | GitHub Exploit DB Packet Storm |
| 195405 | 6.1 |
MEDIUM
Network |
open-xchange | open-xchange_appsuite | OX App Suite through 7.10.4 allows XSS via an inline binary file. |
CWE-79
Cross-site Scripting |
CVE-2021-23931 | 2024-11-21 14:52 | 2021-01-13 | Show | GitHub Exploit DB Packet Storm |
| 195406 | 6.1 |
MEDIUM
Network |
open-xchange | open-xchange_appsuite | OX App Suite through 7.10.4 allows XSS via use of the conversion API for a distributedFile. |
CWE-79
Cross-site Scripting |
CVE-2021-23930 | 2024-11-21 14:52 | 2021-01-13 | Show | GitHub Exploit DB Packet Storm |
| 195407 | 6.1 |
MEDIUM
Network |
open-xchange | open-xchange_appsuite | OX App Suite through 7.10.4 allows XSS via a crafted Content-Disposition header in an uploaded HTML document to an ajax/share/<share-token>?delivery=view URI. |
CWE-79
Cross-site Scripting |
CVE-2021-23929 | 2024-11-21 14:52 | 2021-01-13 | Show | GitHub Exploit DB Packet Storm |
| 195408 | 6.1 |
MEDIUM
Network |
open-xchange | open-xchange_appsuite | OX App Suite through 7.10.3 allows XSS via the ajax/apps/manifests query string. |
CWE-79
Cross-site Scripting |
CVE-2021-23928 | 2024-11-21 14:52 | 2021-01-13 | Show | GitHub Exploit DB Packet Storm |
| 195409 | 6.4 |
MEDIUM
Network |
open-xchange | open-xchange_appsuite | OX App Suite through 7.10.4 allows SSRF via a URL with an @ character in an appsuite/api/oauth/proxy PUT request. |
CWE-918
Server-Side Request Forgery (SSRF) |
CVE-2021-23927 | 2024-11-21 14:52 | 2021-01-13 | Show | GitHub Exploit DB Packet Storm |
| 195410 | 9.1 |
CRITICAL
Network |
ivanti | avalanche | An attacker can send a specially crafted request which could lead to leakage of sensitive data or potentially a resource-based DoS attack. |
NVD-CWE-noinfo
|
CVE-2021-22962 | 2024-11-21 14:51 | 2023-12-20 | Show | GitHub Exploit DB Packet Storm |