Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":June 4, 2026, 4 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 257691 | 6.8 | 警告 | アップル GNU Project サン・マイクロシステムズ サイバートラスト株式会社 レッドハット |
- | GNU tar の contains_dot_dot() 関数におけるディレクトリトラバーサルの脆弱性 | - | CVE-2007-4131 | 2010-01-18 12:21 | 2007-08-23 | Show | GitHub Exploit DB Packet Storm |
| 257692 | 4.6 | 警告 | IBM | - | IBM DB2 の dasauto における管理者権限を持たないユーザが実行可能な脆弱性 |
CWE-264
認可・権限・アクセス制御 |
CVE-2009-4150 | 2010-01-15 14:10 | 2009-12-2 | Show | GitHub Exploit DB Packet Storm |
| 257693 | 2.1 | 注意 | サン・マイクロシステムズ | - | Sun Solaris の ldap_cachemgr におけるサービス運用妨害 (DoS) の脆弱性 |
CWE-Other
その他 |
CVE-2009-4080 | 2010-01-15 14:10 | 2009-11-24 | Show | GitHub Exploit DB Packet Storm |
| 257694 | 5 | 警告 | サン・マイクロシステムズ | - | Sun Solaris の sshd におけるサービス運用妨害 (DoS) の脆弱性 |
CWE-noinfo
情報不足 |
CVE-2009-4075 | 2010-01-15 14:09 | 2009-11-23 | Show | GitHub Exploit DB Packet Storm |
| 257695 | 2.6 | 注意 | オラクル | - | Oracle Application Server におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
- | 2010-01-14 15:01 | 2010-01-14 | Show | GitHub Exploit DB Packet Storm |
| 257696 | 9.3 | 危険 | マイクロソフト | - | Microsoft Internet Explorer に脆弱性 |
CWE-94
コード・インジェクション |
CVE-2009-3672 | 2010-01-14 12:08 | 2009-11-25 | Show | GitHub Exploit DB Packet Storm |
| 257697 | 9.3 | 危険 | サン・マイクロシステムズ VMware |
- | Sun Java SE の java.lang パッケージにおける脆弱性 |
CWE-362
競合状態 |
CVE-2009-2724 | 2010-01-14 12:08 | 2009-08-10 | Show | GitHub Exploit DB Packet Storm |
| 257698 | 10 | 危険 | サン・マイクロシステムズ VMware |
- | Sun Java SE の Provider クラスにおける脆弱性 |
CWE-noinfo
情報不足 |
CVE-2009-2721 | 2010-01-14 12:08 | 2009-08-10 | Show | GitHub Exploit DB Packet Storm |
| 257699 | 5 | 警告 | 有限会社シースリー | - | WebCalenderC3 におけるディレクトリトラバーサルの脆弱性 |
CWE-22
パス・トラバーサル |
CVE-2010-0348 | 2010-01-12 15:01 | 2010-01-12 | Show | GitHub Exploit DB Packet Storm |
| 257700 | 4.3 | 警告 | 有限会社シースリー | - | WebCalenderC3 におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2010-0349 | 2010-01-12 15:00 | 2010-01-12 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:June 5, 2026, 4:11 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 297961 | - | tomatocart | tomatocart | TomatoCart 1.1.7, when the PayPal Express Checkout module is enabled in sandbox mode, allows remote authenticated users to bypass intended payment requirements by modifying a certain redirection URL. |
CWE-264
Permissions, Privileges, and Access Controls |
CVE-2012-4934 | 2024-11-21 10:43 | 2012-10-31 | Show | GitHub Exploit DB Packet Storm | |
| 297962 | - | emc | avamar | EMC Avamar Client for VMware 6.1 stores the cleartext server root password on the proxy client, which might allow remote attackers to obtain sensitive information by leveraging "network access" to th… |
CWE-255
Credentials Management |
CVE-2012-4610 | 2024-11-21 10:43 | 2012-10-31 | Show | GitHub Exploit DB Packet Storm | |
| 297963 | - | laurent_destailleur | awstats | Unspecified vulnerability in awredir.pl in AWStats before 7.1 has unknown impact and attack vectors. |
CWE-79
Cross-site Scripting |
CVE-2012-4547 | 2024-11-21 10:43 | 2012-10-31 | Show | GitHub Exploit DB Packet Storm | |
| 297964 | - | cisco |
adaptive_security_appliance_software 5500_series_adaptive_security_appliance 7600_router catalyst_6500 catalyst_6503-e catalyst_6504-e catalyst_6506-e catalyst_6509-e catalyst… |
The DCERPC inspection engine on Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services Module (ASASM) in Cisco Catalyst 6500 series devices, with software 8.3 before 8.3(2… |
CWE-119
Incorrect Access of Indexable Resource ('Range Error') |
CVE-2012-4663 | 2024-11-21 10:43 | 2012-10-30 | Show | GitHub Exploit DB Packet Storm | |
| 297965 | - | wftpserver | wing_ftp_server | Wing FTP Server before 4.1.1 allows remote authenticated users to cause a denial of service (daemon crash) via two zip commands. |
CWE-119
Incorrect Access of Indexable Resource ('Range Error') |
CVE-2012-4729 | 2024-11-21 10:43 | 2012-10-26 | Show | GitHub Exploit DB Packet Storm | |
| 297966 | - |
apache citrix |
cloudstack | Citrix Cloud.com CloudStack, and Apache CloudStack pre-release, allows remote attackers to make arbitrary API calls by leveraging the system user account, as demonstrated by API calls to delete VMs. |
CWE-264
Permissions, Privileges, and Access Controls |
CVE-2012-4501 | 2024-11-21 10:43 | 2012-10-26 | Show | GitHub Exploit DB Packet Storm | |
| 297967 | - | cisco |
adaptive_security_appliance_software 5500_series_adaptive_security_appliance 7600_router catalyst_6500 catalyst_6503-e catalyst_6504-e catalyst_6506-e catalyst_6509-e catalyst… |
The DCERPC inspection engine on Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services Module (ASASM) in Cisco Catalyst 6500 series devices, with software 8.3 before 8.3(2… |
CWE-119
Incorrect Access of Indexable Resource ('Range Error') |
CVE-2012-4662 | 2024-11-21 10:43 | 2012-10-30 | Show | GitHub Exploit DB Packet Storm | |
| 297968 | - | cisco |
adaptive_security_appliance_software 5500_series_adaptive_security_appliance 7600_router catalyst_6500 catalyst_6503-e catalyst_6504-e catalyst_6506-e catalyst_6509-e catalyst… |
Stack-based buffer overflow in the DCERPC inspection engine on Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services Module (ASASM) in Cisco Catalyst 6500 series devices,… |
CWE-119
Incorrect Access of Indexable Resource ('Range Error') |
CVE-2012-4661 | 2024-11-21 10:43 | 2012-10-30 | Show | GitHub Exploit DB Packet Storm | |
| 297969 | - | cisco |
adaptive_security_appliance_software 5500_series_adaptive_security_appliance catalyst_6500 catalyst_6503-e catalyst_6504-e catalyst_6506-e catalyst_6509-e catalyst_6509-neb-a … |
The SIP inspection engine on Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services Module (ASASM) in Cisco Catalyst 6500 series devices, with software 8.2 before 8.2(5.17… |
CWE-119
Incorrect Access of Indexable Resource ('Range Error') |
CVE-2012-4660 | 2024-11-21 10:43 | 2012-10-30 | Show | GitHub Exploit DB Packet Storm | |
| 297970 | - | cisco |
adaptive_security_appliance_software 5500_series_adaptive_security_appliance catalyst_6500 catalyst_6503-e catalyst_6504-e catalyst_6506-e catalyst_6509-e catalyst_6509-neb-a … |
The AAA functionality in the IPv4 SSL VPN implementations on Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services Module (ASASM) in Cisco Catalyst 6500 series devices, w… |
CWE-287
Improper Authentication |
CVE-2012-4659 | 2024-11-21 10:43 | 2012-10-30 | Show | GitHub Exploit DB Packet Storm |