Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":Feb. 9, 2026, 12:59 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 229821 | 4.3 | 警告 | マイクロソフト | - | ASP.NET in Microsoft .NET のデフォルト設定におけるクロスサイトスクリプティング攻撃を実行される脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2010-2085 | 2012-09-25 17:38 | 2010-05-27 | Show | GitHub Exploit DB Packet Storm |
| 229822 | 4.3 | 警告 | マイクロソフト | - | Microsoft ASP.NET におけるクロスサイトスクリプティング攻撃を実行される脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2010-2084 | 2012-09-25 17:38 | 2010-05-27 | Show | GitHub Exploit DB Packet Storm |
| 229823 | 4 | 警告 | マイクロソフト | - | Microsoft Dynamics GP におけるアクセス制限を回避される脆弱性 |
CWE-255
証明書・パスワード管理 |
CVE-2010-2083 | 2012-09-25 17:38 | 2010-05-26 | Show | GitHub Exploit DB Packet Storm |
| 229824 | 5 | 警告 | magnoware | - | DataTrack System におけるファイルを読まれる脆弱性 |
CWE-20
不適切な入力確認 |
CVE-2010-2079 | 2012-09-25 17:38 | 2010-05-25 | Show | GitHub Exploit DB Packet Storm |
| 229825 | 5 | 警告 | magnoware | - | DataTrack System におけるルートディレクトリを一覧される脆弱性 |
CWE-20
不適切な入力確認 |
CVE-2010-2078 | 2012-09-25 17:38 | 2010-05-25 | Show | GitHub Exploit DB Packet Storm |
| 229826 | 4.6 | 警告 | Linux | - | Linux kernel の fs/btrfs/acl.c におけるファイルパーミッションを回避される脆弱性 |
CWE-264
認可・権限・アクセス制御 |
CVE-2010-2071 | 2012-09-25 17:38 | 2010-05-18 | Show | GitHub Exploit DB Packet Storm |
| 229827 | 6.8 | 警告 | LibTIFF | - | LibTIFF の tif_dirread.c におけるスタックベースのバッファオーバーフローの脆弱性 |
CWE-119
バッファエラー |
CVE-2010-2067 | 2012-09-25 17:38 | 2010-06-3 | Show | GitHub Exploit DB Packet Storm |
| 229828 | 7.5 | 危険 | m0r0n | - | Moron Solutions MS Comment におけるディレクトリトラバーサルの脆弱性 |
CWE-22
パス・トラバーサル |
CVE-2010-2050 | 2012-09-25 17:38 | 2010-05-25 | Show | GitHub Exploit DB Packet Storm |
| 229829 | 4.3 | 警告 | Zoho Corporation | - | ManageEngine ADAudit Plus におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2010-2049 | 2012-09-25 17:38 | 2010-05-25 | Show | GitHub Exploit DB Packet Storm |
| 229830 | 3.5 | 注意 | menhir | - | Drupal 用の Heartbeat モジュールにおけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2010-2048 | 2012-09-25 17:38 | 2010-05-19 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:April 23, 2026, 4 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 298111 | - | softcart | softcart | Multiple cross-site scripting (XSS) vulnerabilities in SoftCart.exe in SoftCart 5.1.2.2 allow remote attackers to inject arbitrary web script or HTML via the (1) License_Plate, (2) License_State, (3)… |
CWE-79
Cross-site Scripting |
CVE-2008-0523 | 2017-08-8 10:29 | 2008-02-1 | Show | GitHub Exploit DB Packet Storm | |
| 298112 | - | yamaha |
rt107e rt52pro rt56v rt57i rt58i rt60w rt80i rta50i rta52i rta54i rta55i rtv700 rtw65b rtw65i rtx1000 rtx1100 rtx1500 srt100 |
Cross-site request forgery (CSRF) vulnerability in the management interface in multiple Yamaha RT series routers allows remote attackers to change password settings and probably other configuration s… |
CWE-352
Origin Validation Error |
CVE-2008-0524 | 2017-08-8 10:29 | 2008-02-1 | Show | GitHub Exploit DB Packet Storm | |
| 298113 | - | cisco |
skinny_client_control_protocol_\(sccp\)_firmware session_initiation_protocol_\(sip\)_firmware |
Cisco Unified IP Phone 7940, 7940G, 7960, and 7960G running SCCP firmware allows remote attackers to cause a denial of service (reboot) via a long ICMP echo request (ping) packet. |
CWE-20
Improper Input Validation |
CVE-2008-0526 | 2017-08-8 10:29 | 2008-02-15 | Show | GitHub Exploit DB Packet Storm | |
| 298114 | - | cisco |
skinny_client_control_protocol_\(sccp\)_firmware session_initiation_protocol_\(sip\)_firmware |
In order to download the patch, login is required |
CWE-20
Improper Input Validation |
CVE-2008-0526 | 2017-08-8 10:29 | 2008-02-15 | Show | GitHub Exploit DB Packet Storm | |
| 298115 | - | cisco |
skinny_client_control_protocol_\(sccp\)_firmware session_initiation_protocol_\(sip\)_firmware |
The HTTP server in Cisco Unified IP Phone 7935 and 7936 running SCCP firmware allows remote attackers to cause a denial of service (reboot) via a crafted HTTP request. |
CWE-20
Improper Input Validation |
CVE-2008-0527 | 2017-08-8 10:29 | 2008-02-15 | Show | GitHub Exploit DB Packet Storm | |
| 298116 | - | cisco |
skinny_client_control_protocol_\(sccp\)_firmware session_initiation_protocol_\(sip\)_firmware |
Patch download requires login |
CWE-20
Improper Input Validation |
CVE-2008-0527 | 2017-08-8 10:29 | 2008-02-15 | Show | GitHub Exploit DB Packet Storm | |
| 298117 | - | cisco |
skinny_client_control_protocol_\(sccp\)_firmware session_initiation_protocol_\(sip\)_firmware |
Buffer overflow in Cisco Unified IP Phone 7940, 7940G, 7960, and 7960G running SIP firmware might allow remote attackers to execute arbitrary code via a SIP message with crafted MIME data. |
CWE-119
Incorrect Access of Indexable Resource ('Range Error') |
CVE-2008-0528 | 2017-08-8 10:29 | 2008-02-15 | Show | GitHub Exploit DB Packet Storm | |
| 298118 | - | cisco |
skinny_client_control_protocol_\(sccp\)_firmware session_initiation_protocol_\(sip\)_firmware |
Patch requires login |
CWE-119
Incorrect Access of Indexable Resource ('Range Error') |
CVE-2008-0528 | 2017-08-8 10:29 | 2008-02-15 | Show | GitHub Exploit DB Packet Storm | |
| 298119 | - | cisco |
skinny_client_control_protocol_\(sccp\)_firmware session_initiation_protocol_\(sip\)_firmware |
Buffer overflow in the telnet server in Cisco Unified IP Phone 7906G, 7911G, 7941G, 7961G, 7970G, and 7971G running SCCP firmware might allow remote authenticated users to execute arbitrary code via … |
CWE-119
Incorrect Access of Indexable Resource ('Range Error') |
CVE-2008-0529 | 2017-08-8 10:29 | 2008-02-15 | Show | GitHub Exploit DB Packet Storm | |
| 298120 | - | cisco |
skinny_client_control_protocol_\(sccp\)_firmware session_initiation_protocol_\(sip\)_firmware |
Patch requires login |
CWE-119
Incorrect Access of Indexable Resource ('Range Error') |
CVE-2008-0529 | 2017-08-8 10:29 | 2008-02-15 | Show | GitHub Exploit DB Packet Storm |