Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":May 23, 2026, 4 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 256891 | 9.3 | 危険 | マイクロソフト | - | 複数の Microsoft 製品におけるエクセルファイルのフォーマットの処理に関する任意のコードを実行される脆弱性 |
CWE-94
コード・インジェクション |
CVE-2009-3134 | 2010-01-5 16:18 | 2009-11-10 | Show | GitHub Exploit DB Packet Storm |
| 256892 | 9.3 | 危険 | マイクロソフト | - | 複数の Microsoft 製品における計算式を含むスプレッドシートの処理に関する任意のコードを実行される脆弱性 |
CWE-94
コード・インジェクション |
CVE-2009-3132 | 2010-01-5 16:18 | 2009-11-10 | Show | GitHub Exploit DB Packet Storm |
| 256893 | 9.3 | 危険 | マイクロソフト | - | 複数の Microsoft 製品におけるセルに含まれる計算式の処理に関する任意のコードを実行される脆弱性 |
CWE-94
コード・インジェクション |
CVE-2009-3131 | 2010-01-5 16:17 | 2009-11-10 | Show | GitHub Exploit DB Packet Storm |
| 256894 | 9.3 | 危険 | マイクロソフト | - | Microsoft Office Excel における任意のコードを実行される脆弱性 |
CWE-94
コード・インジェクション |
CVE-2009-3128 | 2010-01-5 16:17 | 2009-11-10 | Show | GitHub Exploit DB Packet Storm |
| 256895 | 9.3 | 危険 | マイクロソフト | - | Microsoft Office および Open XML File Format Converter における任意のコードを実行される脆弱性 |
CWE-94
コード・インジェクション |
CVE-2009-3127 | 2010-01-5 16:16 | 2009-11-10 | Show | GitHub Exploit DB Packet Storm |
| 256896 | 6.8 | 警告 | アップル サイバートラスト株式会社 サン・マイクロシステムズ ターボリナックス ヒューレット・パッカード OpenSSL Project レッドハット |
- | OpenSSL の SSL_get_shared_ciphers() 関数における一つずれエラーの脆弱性 |
CWE-189
数値処理の問題 |
CVE-2007-5135 | 2010-01-5 13:31 | 2007-10-12 | Show | GitHub Exploit DB Packet Storm |
| 256897 | 7.8 | 危険 | マイクロソフト | - | Microsoft Windows で稼働している Active Directory の LDAP サービスにおけるサービス運用妨害 (DoS) の脆弱性 |
CWE-399
リソース管理の問題 |
CVE-2009-1928 | 2010-01-4 15:24 | 2009-11-10 | Show | GitHub Exploit DB Packet Storm |
| 256898 | 9.3 | 危険 | マイクロソフト | - | Microsoft Windows の kernel における任意のコードを実行される脆弱性 |
CWE-94
コード・インジェクション |
CVE-2009-2514 | 2010-01-4 15:24 | 2009-11-10 | Show | GitHub Exploit DB Packet Storm |
| 256899 | 6.8 | 警告 | マイクロソフト | - | Microsoft Windows の kernel の Graphics Device Interface (GDI) における権限を取得される脆弱性 |
CWE-20
不適切な入力確認 |
CVE-2009-2513 | 2010-01-4 15:24 | 2009-11-10 | Show | GitHub Exploit DB Packet Storm |
| 256900 | 6.8 | 警告 | マイクロソフト | - | Microsoft Windows の kernel における権限を取得される脆弱性 |
CWE-20
不適切な入力確認 |
CVE-2009-1127 | 2010-01-4 15:24 | 2009-11-10 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:May 23, 2026, 4:08 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 294741 | - | tomatocart | tomatocart | TomatoCart 1.1.7, when the PayPal Express Checkout module is enabled in sandbox mode, allows remote authenticated users to bypass intended payment requirements by modifying a certain redirection URL. |
CWE-264
Permissions, Privileges, and Access Controls |
CVE-2012-4934 | 2024-11-21 10:43 | 2012-10-31 | Show | GitHub Exploit DB Packet Storm | |
| 294742 | - | emc | avamar | EMC Avamar Client for VMware 6.1 stores the cleartext server root password on the proxy client, which might allow remote attackers to obtain sensitive information by leveraging "network access" to th… |
CWE-255
Credentials Management |
CVE-2012-4610 | 2024-11-21 10:43 | 2012-10-31 | Show | GitHub Exploit DB Packet Storm | |
| 294743 | - | laurent_destailleur | awstats | Unspecified vulnerability in awredir.pl in AWStats before 7.1 has unknown impact and attack vectors. |
CWE-79
Cross-site Scripting |
CVE-2012-4547 | 2024-11-21 10:43 | 2012-10-31 | Show | GitHub Exploit DB Packet Storm | |
| 294744 | - | cisco |
adaptive_security_appliance_software 5500_series_adaptive_security_appliance 7600_router catalyst_6500 catalyst_6503-e catalyst_6504-e catalyst_6506-e catalyst_6509-e catalyst… |
The DCERPC inspection engine on Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services Module (ASASM) in Cisco Catalyst 6500 series devices, with software 8.3 before 8.3(2… |
CWE-119
Incorrect Access of Indexable Resource ('Range Error') |
CVE-2012-4663 | 2024-11-21 10:43 | 2012-10-30 | Show | GitHub Exploit DB Packet Storm | |
| 294745 | - | wftpserver | wing_ftp_server | Wing FTP Server before 4.1.1 allows remote authenticated users to cause a denial of service (daemon crash) via two zip commands. |
CWE-119
Incorrect Access of Indexable Resource ('Range Error') |
CVE-2012-4729 | 2024-11-21 10:43 | 2012-10-26 | Show | GitHub Exploit DB Packet Storm | |
| 294746 | - |
apache citrix |
cloudstack | Citrix Cloud.com CloudStack, and Apache CloudStack pre-release, allows remote attackers to make arbitrary API calls by leveraging the system user account, as demonstrated by API calls to delete VMs. |
CWE-264
Permissions, Privileges, and Access Controls |
CVE-2012-4501 | 2024-11-21 10:43 | 2012-10-26 | Show | GitHub Exploit DB Packet Storm | |
| 294747 | - | cisco |
adaptive_security_appliance_software 5500_series_adaptive_security_appliance 7600_router catalyst_6500 catalyst_6503-e catalyst_6504-e catalyst_6506-e catalyst_6509-e catalyst… |
The DCERPC inspection engine on Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services Module (ASASM) in Cisco Catalyst 6500 series devices, with software 8.3 before 8.3(2… |
CWE-119
Incorrect Access of Indexable Resource ('Range Error') |
CVE-2012-4662 | 2024-11-21 10:43 | 2012-10-30 | Show | GitHub Exploit DB Packet Storm | |
| 294748 | - | cisco |
adaptive_security_appliance_software 5500_series_adaptive_security_appliance 7600_router catalyst_6500 catalyst_6503-e catalyst_6504-e catalyst_6506-e catalyst_6509-e catalyst… |
Stack-based buffer overflow in the DCERPC inspection engine on Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services Module (ASASM) in Cisco Catalyst 6500 series devices,… |
CWE-119
Incorrect Access of Indexable Resource ('Range Error') |
CVE-2012-4661 | 2024-11-21 10:43 | 2012-10-30 | Show | GitHub Exploit DB Packet Storm | |
| 294749 | - | cisco |
adaptive_security_appliance_software 5500_series_adaptive_security_appliance catalyst_6500 catalyst_6503-e catalyst_6504-e catalyst_6506-e catalyst_6509-e catalyst_6509-neb-a … |
The SIP inspection engine on Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services Module (ASASM) in Cisco Catalyst 6500 series devices, with software 8.2 before 8.2(5.17… |
CWE-119
Incorrect Access of Indexable Resource ('Range Error') |
CVE-2012-4660 | 2024-11-21 10:43 | 2012-10-30 | Show | GitHub Exploit DB Packet Storm | |
| 294750 | - | cisco |
adaptive_security_appliance_software 5500_series_adaptive_security_appliance catalyst_6500 catalyst_6503-e catalyst_6504-e catalyst_6506-e catalyst_6509-e catalyst_6509-neb-a … |
The AAA functionality in the IPv4 SSL VPN implementations on Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services Module (ASASM) in Cisco Catalyst 6500 series devices, w… |
CWE-287
Improper Authentication |
CVE-2012-4659 | 2024-11-21 10:43 | 2012-10-30 | Show | GitHub Exploit DB Packet Storm |