Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 15, 2025, 6:03 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
189751 5.7 警告 pdflib - PDFLib におけるスタックベースのバッファーオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2007-6561 2012-09-25 16:59 2007-12-27 Show GitHub Exploit DB Packet Storm
189752 4.3 警告 logaholic - Logaholic におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-6560 2012-09-25 16:59 2007-12-27 Show GitHub Exploit DB Packet Storm
189753 7.5 危険 logaholic - Logaholic における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2007-6559 2012-09-25 16:59 2007-12-27 Show GitHub Exploit DB Packet Storm
189754 7.5 危険 megacheatz - MeGaCheatZ における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2007-6557 2012-09-25 16:59 2007-12-27 Show GitHub Exploit DB Packet Storm
189755 9.3 危険 phil taylor - Joomla! 用の mosDirectory コンポーネントにおける PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2007-6555 2012-09-25 16:59 2007-12-27 Show GitHub Exploit DB Packet Storm
189756 7.5 危険 mail machine - MailMachine Pro の showMsg.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2007-6551 2012-09-25 16:59 2007-12-27 Show GitHub Exploit DB Packet Storm
189757 4.3 警告 neuron news - neuron news におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-6541 2012-09-25 16:59 2007-12-27 Show GitHub Exploit DB Packet Storm
189758 7.5 危険 neuron - neuron news における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2007-6540 2012-09-25 16:59 2007-12-27 Show GitHub Exploit DB Packet Storm
189759 6.8 警告 idevSpot - IDevspot iSupport の index.php における PHP ローカルファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2007-6539 2012-09-25 16:59 2007-12-27 Show GitHub Exploit DB Packet Storm
189760 7.5 危険 MRBS - Moodle 用の MRBS プラグインにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2007-6538 2012-09-25 16:59 2007-12-27 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 16, 2025, 4:15 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
270371 - netscape messaging_server Netscape Messaging Server 3.54, 3.55, and 3.6 allows a remote attacker to cause a denial of service (memory exhaustion) via a series of long RCPT TO commands. NVD-CWE-Other
CVE-1999-1532 2016-10-18 11:05 1999-10-29 Show GitHub Exploit DB Packet Storm
270372 - knox_software arkeia Buffer overflow in (1) nlservd and (2) rnavc in Knox Software Arkeia backup product allows local users to obtain root access via a long HOME environmental variable. NVD-CWE-Other
CVE-1999-1534 2016-10-18 11:05 1999-09-23 Show GitHub Exploit DB Packet Storm
270373 - acushop salesbuilder .sbstart startup script in AcuShop Salesbuilder is world writable, which allows local users to gain privileges by appending commands to the file. NVD-CWE-Other
CVE-1999-1536 2016-10-18 11:05 1999-07-30 Show GitHub Exploit DB Packet Storm
270374 - microsoft internet_information_server When IIS 2 or 3 is upgraded to IIS 4, ism.dll is inadvertently left in /scripts/iisadmin, which does not restrict access to the local machine and allows an unauthorized user to gain access to sensiti… NVD-CWE-Other
CVE-1999-1538 2016-10-18 11:05 1999-01-14 Show GitHub Exploit DB Packet Storm
270375 - microsoft internet_information_server Buffer overflow in FTP server in Microsoft IIS 3.0 and 4.0 allows local and sometimes remote attackers to cause a denial of service via a long NLST (ls) command. NVD-CWE-Other
CVE-1999-1544 2016-10-18 11:05 1999-01-24 Show GitHub Exploit DB Packet Storm
270376 - joes_own_editor joe Joe's Own Editor (joe) 2.8 sets the world-readable permission on its crash-save file, DEADJOE, which could allow local users to read files that were being edited by other users. NVD-CWE-Other
CVE-1999-1545 2016-10-18 11:05 1999-07-14 Show GitHub Exploit DB Packet Storm
270377 - oracle web_listener Oracle Web Listener 2.1 allows remote attackers to bypass access restrictions by replacing a character in the URL with its HTTP-encoded (hex) equivalent. CWE-20
 Improper Input Validation  		CVE-1999-1547 2016-10-18 11:05 1999-11-25 Show GitHub Exploit DB Packet Storm
270378 - microsoft index_server Index Server 2.0 on IIS 4.0 stores physical path information in the ContentIndex\Catalogs subkey of the AllowedPaths registry key, whose permissions allows local and remote users to obtain the physic… NVD-CWE-Other
CVE-1999-1397 2016-10-18 11:04 1999-03-23 Show GitHub Exploit DB Packet Storm
270379 - sgi irix Vulnerability in xfsdump in SGI IRIX may allow local users to obtain root privileges via the bck.log log file, possibly via a symlink attack. NVD-CWE-Other
CVE-1999-1398 2016-10-18 11:04 1997-05-7 Show GitHub Exploit DB Packet Storm
270380 - sgi irix spaceball program in SpaceWare 7.3 v1.0 in IRIX 6.2 allows local users to gain root privileges by setting the HOSTNAME environmental variable to contain the commands to be executed. NVD-CWE-Other
CVE-1999-1399 2016-10-18 11:04 1997-08-20 Show GitHub Exploit DB Packet Storm