Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
187861 4.3 警告 GLPI-PROJECT.ORG - GLPI-PROJECT GLPI におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-4003 2012-10-12 15:46 2012-06-28 Show GitHub Exploit DB Packet Storm
187862 6.8 警告 GLPI-PROJECT.ORG - GLPI-PROJECT GLPI におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2012-4002 2012-10-12 15:45 2012-06-28 Show GitHub Exploit DB Packet Storm
187863 5 警告 OpenTTD - OpenTTD におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2012-3436 2012-10-12 15:23 2012-07-27 Show GitHub Exploit DB Packet Storm
187864 6 警告 Pay With Tweet - WordPress 用 Pay With Tweet プラグインにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2012-5350 2012-10-12 15:21 2012-10-9 Show GitHub Exploit DB Packet Storm
187865 2.6 注意 Pay With Tweet - WordPress 用 Pay With Tweet プラグインにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-5349 2012-10-12 15:20 2012-10-9 Show GitHub Exploit DB Packet Storm
187866 6.8 警告 Steven Wilson - MangosWeb Enhanced における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2012-5348 2012-10-12 15:18 2012-10-9 Show GitHub Exploit DB Packet Storm
187867 7.5 危険 TinyWebGallery - TinyWebGallery における任意のコードを実行される脆弱性 CWE-noinfo
情報不足 		CVE-2012-5347 2012-10-12 15:18 2012-10-9 Show GitHub Exploit DB Packet Storm
187868 4.3 警告 Bence Meszaros - WordPress 用 WP Live.php モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-5346 2012-10-12 15:11 2012-10-9 Show GitHub Exploit DB Packet Storm
187869 5 警告 Kepler Lam - IPtools の Remote command server におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2012-5345 2012-10-12 15:06 2012-10-9 Show GitHub Exploit DB Packet Storm
187870 5 警告 Kepler Lam - IPtools の WebServer におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2012-5344 2012-10-12 15:03 2012-10-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 3, 2025, 4:07 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
279131 - phpgroupware phpgroupware The acl_check function in phpGroupWare 0.9.16RC2 always returns True, even when mkdir does not behave as expected, which could allow remote attackers to obtain sensitive information via WebDAV from u… NVD-CWE-Other
CVE-2004-2577 2008-09-6 05:44 2004-12-31 Show GitHub Exploit DB Packet Storm
279132 - - - Quake II server before R1Q2, as used in multiple products, allows remote attackers to corrupt the server's client state data structure by exiting a session without a valid disconnect command, then re… NVD-CWE-Other
CVE-2004-2598 2008-09-6 05:44 2004-12-31 Show GitHub Exploit DB Packet Storm
279133 - vserver linux-vserver Unspecified vulnerability in procfs in the Linux-VServer stable branch for the 2.4 kernel before 1.23 and Linux-VServer development branch for the 2.4 kernel before 1.3.5 has unspecified impact and a… NVD-CWE-Other
CVE-2004-2613 2008-09-6 05:44 2004-12-31 Show GitHub Exploit DB Packet Storm
279134 - paul_l_daniels ripmime The MIMEH_read_headers function in ripMIME 1.3.1.0 does not properly handle trailing "\r" and "\n" characters in headers, which leads to a buffer underflow. NVD-CWE-Other
CVE-2004-2620 2008-09-6 05:44 2004-12-31 Show GitHub Exploit DB Packet Storm
279135 - first_virtual_communications click_to_meet_express
click_to_meet_premier
conference_server
v-gate 		Multiple vulnerabilities in the H.323 protocol implementation for First Virtual Communications Click to Meet Express (when used with H.323 conferencing endpoints), Click to Meet Premier, Conference S… NVD-CWE-Other
CVE-2004-2629 2008-09-6 05:44 2004-12-31 Show GitHub Exploit DB Packet Storm
279136 - apache james Spooler in Apache Foundation James 2.2.0 allows local users to cause a denial of service (memory consumption) by triggering various error conditions in the retrieve function, which prevents a lock fr… NVD-CWE-Other
CVE-2004-2650 2008-09-6 05:44 2004-12-31 Show GitHub Exploit DB Packet Storm
279137 - pd9_software megabbs Unspecified vulnerability in PD9 Software MegaBBS 2.0 and 2.1 allows attackers to gain privileges via unknown vectors involving (1) admin/userlevelmembers-edit.asp and (2) admin/edit-groups.asp. NVD-CWE-Other
CVE-2004-2653 2008-09-6 05:44 2004-12-31 Show GitHub Exploit DB Packet Storm
279138 - squid squid The clientAbortBody function in client_side.c in Squid Web Proxy Cache before 2.6 STABLE6 allows remote attackers to cause a denial of service (segmentation fault) via unspecified vectors that trigge… NVD-CWE-Other
CVE-2004-2654 2008-09-6 05:44 2004-12-31 Show GitHub Exploit DB Packet Storm
279139 - suse suse_linux resmgr in SUSE CORE 9 does not properly identify terminal names, which allows local users to spoof terminals and login types. NVD-CWE-Other
CVE-2004-2658 2008-09-6 05:44 2004-12-31 Show GitHub Exploit DB Packet Storm
279140 - soft3304 04webserver Soft3304 04WebServer before 1.41 does not properly check file names, which allows remote attackers to obtain sensitive information (CGI source code). NVD-CWE-Other
CVE-2004-2661 2008-09-6 05:44 2004-12-31 Show GitHub Exploit DB Packet Storm