Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":June 8, 2026, 4:01 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 242641 | 5 | 警告 | ウェブセンス | - | Websense Email Security の Receive Service におけるアクセス制限を回避される脆弱性 |
CWE-264
認可・権限・アクセス制御 |
CVE-2009-5131 | 2012-08-30 16:44 | 2012-08-26 | Show | GitHub Exploit DB Packet Storm |
| 242642 | 4.3 | 警告 | ウェブセンス | - | Websense Email Security の Rules Service におけるサービス運用妨害 (DoS) の脆弱性 |
CWE-119
バッファエラー |
CVE-2009-5130 | 2012-08-30 16:43 | 2012-08-26 | Show | GitHub Exploit DB Packet Storm |
| 242643 | 5 | 警告 | ウェブセンス | - | Websense V10000 アプライアンスにおけるサービス運用妨害 (DoS) の脆弱性 |
CWE-119
バッファエラー |
CVE-2009-5129 | 2012-08-30 16:42 | 2012-08-26 | Show | GitHub Exploit DB Packet Storm |
| 242644 | 5 | 警告 | ウェブセンス | - | Websense V10000 アプライアンスにおけるサービス運用妨害 (DoS) の脆弱性 |
CWE-119
バッファエラー |
CVE-2009-5128 | 2012-08-30 16:41 | 2012-08-26 | Show | GitHub Exploit DB Packet Storm |
| 242645 | 3.3 | 注意 | シマンテック | - | Symantec Messaging Gateway における重要な情報を取得される脆弱性 |
CWE-200
情報漏えい |
CVE-2012-3581 | 2012-08-30 16:15 | 2012-08-27 | Show | GitHub Exploit DB Packet Storm |
| 242646 | 7.7 | 危険 | シマンテック | - | Symantec Messaging Gateway における Web アプリケーションを変更される脆弱性 |
CWE-noinfo
情報不足 |
CVE-2012-3580 | 2012-08-30 16:15 | 2012-08-27 | Show | GitHub Exploit DB Packet Storm |
| 242647 | 7.9 | 危険 | シマンテック | - | Symantec Messaging Gateway におけるアクセス権限を取得される脆弱性 |
CWE-264
認可・権限・アクセス制御 |
CVE-2012-3579 | 2012-08-30 16:14 | 2012-08-27 | Show | GitHub Exploit DB Packet Storm |
| 242648 | 6.8 | 警告 | シマンテック | - | Symantec Messaging Gateway におけるクロスサイトリクエストフォージェリの脆弱性 |
CWE-352
同一生成元ポリシー違反 |
CVE-2012-0308 | 2012-08-30 16:14 | 2012-08-27 | Show | GitHub Exploit DB Packet Storm |
| 242649 | 4.3 | 警告 | ウェブセンス | - | Websense Content Gateway にクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2012-2984 | 2012-08-29 20:22 | 2012-08-24 | Show | GitHub Exploit DB Packet Storm |
| 242650 | 6.8 | 警告 | PBBoard | - | PBBoard の admin.php における任意の PHP コードを実行される脆弱性 |
CWE-Other
その他 |
CVE-2012-4036 | 2012-08-29 19:23 | 2012-08-6 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:June 8, 2026, 4:09 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 269131 | 8.8 |
HIGH
Network |
sierrawireless | aleos_firmware | Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 execute the management web application as root. |
CWE-264
Permissions, Privileges, and Access Controls |
CVE-2016-5071 | 2024-11-21 11:53 | 2017-04-10 | Show | GitHub Exploit DB Packet Storm |
| 269132 | 9.8 |
CRITICAL
Network |
sierrawireless | aleos_firmware | Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 store passwords in cleartext. |
CWE-255
Credentials Management |
CVE-2016-5070 | 2024-11-21 11:53 | 2017-04-10 | Show | GitHub Exploit DB Packet Storm |
| 269133 | 9.8 |
CRITICAL
Network |
sierrawireless | aleos_firmware | Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 use guessable session tokens, which are in the URL. |
CWE-613
Insufficient Session Expiration |
CVE-2016-5069 | 2024-11-21 11:53 | 2017-04-10 | Show | GitHub Exploit DB Packet Storm |
| 269134 | 9.8 |
CRITICAL
Network |
sierrawireless | aleos_firmware | Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 do not require authentication for Embedded_Ace_Get_Task.cgi requests. |
CWE-287
Improper Authentication |
CVE-2016-5068 | 2024-11-21 11:53 | 2017-04-10 | Show | GitHub Exploit DB Packet Storm |
| 269135 | 8.8 |
HIGH
Network |
sierrawireless | aleos_firmware | Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 allow Hayes AT command injection. |
CWE-77
Command Injection |
CVE-2016-5067 | 2024-11-21 11:53 | 2017-04-10 | Show | GitHub Exploit DB Packet Storm |
| 269136 | 9.8 |
CRITICAL
Network |
sierrawireless | aleos_firmware | Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 have weak passwords for admin, rauser, sconsole, and user. |
CWE-255
Credentials Management |
CVE-2016-5066 | 2024-11-21 11:53 | 2017-04-10 | Show | GitHub Exploit DB Packet Storm |
| 269137 | 9.8 |
CRITICAL
Network |
sierrawireless | aleos_firmware | Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 allow Embedded_Ace_Set_Task.cgi command injection. |
CWE-77
Command Injection |
CVE-2016-5065 | 2024-11-21 11:53 | 2017-04-10 | Show | GitHub Exploit DB Packet Storm |
| 269138 | 6.5 |
MEDIUM
Network |
osram | lightify_pro | OSRAM SYLVANIA Osram Lightify Pro before 2016-07-26 allows attackers to obtain sensitive information by reading screenshots under /private/var/mobile/Containers/Data/Application. |
CWE-200
Information Exposure |
CVE-2016-5059 | 2024-11-21 11:53 | 2017-04-10 | Show | GitHub Exploit DB Packet Storm |
| 269139 | 7.5 |
HIGH
Network |
osram | lightify_pro | OSRAM SYLVANIA Osram Lightify Pro through 2016-07-26 allows Zigbee replay. |
CWE-284
Improper Access Control |
CVE-2016-5058 | 2024-11-21 11:53 | 2017-04-10 | Show | GitHub Exploit DB Packet Storm |
| 269140 | 7.5 |
HIGH
Network |
osram | lightify_pro | OSRAM SYLVANIA Osram Lightify Pro through 2016-07-26 does not use SSL pinning. |
CWE-254
7PK - Security Features |
CVE-2016-5057 | 2024-11-21 11:53 | 2017-04-10 | Show | GitHub Exploit DB Packet Storm |