Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
188471 6.8 警告 Mahara - Mahara におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2010-1668 2012-09-25 17:38 2010-07-6 Show GitHub Exploit DB Packet Storm
188472 4.3 警告 Mahara - Mahara におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-1667 2012-09-25 17:38 2010-07-6 Show GitHub Exploit DB Packet Storm
188473 4.3 警告 jcink - PHPQA の acpmoderate.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-1662 2012-09-25 17:38 2010-05-3 Show GitHub Exploit DB Packet Storm
188474 7.5 危険 jcink - PHPQA における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-1661 2012-09-25 17:38 2010-05-3 Show GitHub Exploit DB Packet Storm
188475 7.5 危険 instantrankingseo - Infocus Real Estate の system_member_login.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-1654 2012-09-25 17:38 2010-05-3 Show GitHub Exploit DB Packet Storm
188476 7.5 危険 htmlcoderhelper - Com_graphics の graphics.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2010-1653 2012-09-25 17:38 2010-05-3 Show GitHub Exploit DB Packet Storm
188477 5 警告 helpcenterlive - HCL の HelpCenter モジュールにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2010-1652 2012-09-25 17:38 2010-05-3 Show GitHub Exploit DB Packet Storm
188478 1.9 注意 IBM - IBM WAS における重要な情報を取得される脆弱性 CWE-310
暗号の問題 		CVE-2010-1651 2012-09-25 17:38 2010-05-3 Show GitHub Exploit DB Packet Storm
188479 1.9 注意 IBM - IBM WAS における重要な情報を取得される脆弱性 CWE-310
暗号の問題 		CVE-2010-1650 2012-09-25 17:38 2010-05-3 Show GitHub Exploit DB Packet Storm
188480 4.3 警告 Joomla! - Joomla! のバックエンドにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-1649 2012-09-25 17:38 2010-05-13 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 13, 2025, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
269911 - sun one_web_server Sun SunONE web server 6.1 SP1 allows remote attackers to poison the web cache, bypass web application firewall protection, and conduct XSS attacks via an HTTP request with both a "Transfer-Encoding: … NVD-CWE-Other
CVE-2005-2094 2017-07-11 10:32 2005-07-5 Show GitHub Exploit DB Packet Storm
269912 - the_cacti_group cacti Cacti 0.8.6e and earlier does not perform proper input validation to protect against common attacks, which allows remote attackers to execute arbitrary commands or SQL by sending a legitimate value i… NVD-CWE-Other
CVE-2005-2148 2017-07-11 10:32 2005-07-6 Show GitHub Exploit DB Packet Storm
269913 - microsoft windows_2000
windows_nt 		Windows NT 4.0 and Windows 2000 before URP1 for Windows 2000 SP4 does not properly prevent NULL sessions from accessing certain alternate named pipes, which allows remote attackers to (1) list Window… NVD-CWE-Other
CVE-2005-2150 2017-07-11 10:32 2005-07-11 Show GitHub Exploit DB Packet Storm
269914 - apple mac_os_x Unspecified vulnerability in the Apple Mac OS X kernel before 10.4.2 allows remote attackers to cause a denial of service (kernel panic) via a crafted TCP packet, possibly related to source routing o… NVD-CWE-Other
CVE-2005-2194 2017-07-11 10:32 2005-12-31 Show GitHub Exploit DB Packet Storm
269915 - freebsd freebsd The device file system (devfs) in FreeBSD 5.x does not properly check parameters of the node type when creating a device node, which makes hidden devices available to attackers, who can then bypass r… NVD-CWE-Other
CVE-2005-2218 2017-07-11 10:32 2005-07-26 Show GitHub Exploit DB Packet Storm
269916 - cisco call_manager The aupair service (aupair.exe) in Cisco CallManager (CCM) 3.2 and earlier, 3.3 before 3.3(5), 4.0 before 4.0(2a)SR2b, and 4.1 4.1 before 4.1(3)SR1 allows remote attackers to execute arbitrary code o… NVD-CWE-Other
CVE-2005-2244 2017-07-11 10:32 2005-07-12 Show GitHub Exploit DB Packet Storm
269917 - apple safari Safari version 2.0 (412) does not clearly associate a Javascript dialog box with the web page that generated it, which allows remote attackers to spoof a dialog box from a trusted site and facilitate… NVD-CWE-Other
CVE-2005-2272 2017-07-11 10:32 2005-07-13 Show GitHub Exploit DB Packet Storm
269918 - novell groupwise_webaccess Cross-site scripting (XSS) vulnerability in Novell Groupwise WebAccess 6.5 before July 11, 2005 allows remote attackers to inject arbitrary web script or HTML via an e-mail message with an encoded ja… NVD-CWE-Other
CVE-2005-2276 2017-07-11 10:32 2005-07-26 Show GitHub Exploit DB Packet Storm
269919 - cisco security_agent Cisco Security Agent (CSA) 4.5 allows remote attackers to cause a denial of service (system crash) via a crafted IP packet. NVD-CWE-Other
CVE-2005-2280 2017-07-11 10:32 2005-07-18 Show GitHub Exploit DB Packet Storm
269920 - oracle jdeveloper Oracle JDeveloper 9.0.4, 9.0.5, and 10.1.2 stores cleartext passwords in (1) IDEConnections.xml, (2) XSQLConfig.xml and (3) settings.xml, which allows local users to obtain sensitive information. NVD-CWE-Other
CVE-2005-2292 2017-07-11 10:32 2005-07-18 Show GitHub Exploit DB Packet Storm