Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 12, 2025, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
189851 9.3 危険 olate - od の Admin.php における SQL インジェクションの脆弱性 - CVE-2007-4421 2012-09-25 16:59 2007-08-18 Show GitHub Exploit DB Packet Storm
189852 9.3 危険 olate - od の Admin.php における Admin エリアへアクセスされる脆弱性 CWE-287
不適切な認証 		CVE-2007-4419 2012-09-25 16:59 2007-08-18 Show GitHub Exploit DB Packet Storm
189853 5.5 警告 IBM - IBM DB2 UDB における脆弱性 - CVE-2007-4418 2012-09-25 16:59 2007-08-18 Show GitHub Exploit DB Packet Storm
189854 6 警告 IBM - IBM DB2 UDB における無効化されたメソッドを実行される脆弱性 - CVE-2007-4417 2012-09-25 16:59 2007-08-18 Show GitHub Exploit DB Packet Storm
189855 3.5 注意 headstart solutions - Headstart Solutions の DeskPRO における任意の PHP コードを挿入される脆弱性 - CVE-2007-4413 2012-09-25 16:59 2007-08-18 Show GitHub Exploit DB Packet Storm
189856 3.5 注意 headstart solutions - Headstart Solutions の DeskPRO におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-4412 2012-09-25 16:59 2007-08-18 Show GitHub Exploit DB Packet Storm
189857 6.8 警告 mirc - Winamp 用の mIRC Control プラグインにおける任意のコードを実行される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2007-4403 2012-09-25 16:59 2007-08-18 Show GitHub Exploit DB Packet Storm
189858 6.8 警告 mirc - mIRC のスクリプトにおける任意のコードを実行される脆弱性 CWE-noinfo
情報不足 		CVE-2007-4402 2012-09-25 16:59 2007-08-18 Show GitHub Exploit DB Packet Storm
189859 6.8 警告 mirc - Advanced mIRC Integration プラグインなどにおける CRLF インジェクションの脆弱性 CWE-Other
その他 		CVE-2007-4401 2012-09-25 16:59 2007-08-18 Show GitHub Exploit DB Packet Storm
189860 6.8 警告 Konversation - Konversation に含まれるメディアスクリプトにおける CRLF インジェクションの脆弱性 - CVE-2007-4400 2012-09-25 16:59 2007-08-18 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 12, 2025, 4:59 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
275401 - bugada_andrea php_advanced_transfer_manager Multiple directory traversal vulnerabilities in PHP Advanced Transfer Manager 1.30 allow remote attackers to read arbitrary files via ".." sequences in (1) the currentdir parameter to txt.php, or the… NVD-CWE-Other
CVE-2005-2997 2008-09-6 05:53 2005-09-21 Show GitHub Exploit DB Packet Storm
275402 - bugada_andrea php_advanced_transfer_manager PHP Advanced Transfer Manager 1.30 has a default password for the administrator user, which allows remote attackers to upload and execute arbitrary PHP files. NVD-CWE-Other
CVE-2005-2998 2008-09-6 05:53 2005-09-21 Show GitHub Exploit DB Packet Storm
275403 - bugada_andrea php_advanced_transfer_manager PHP Advanced Transfer Manager 1.30 allows remote attackers to obtain sensitive PHP configuration information via a direct request to test.php. NVD-CWE-Other
CVE-2005-2999 2008-09-6 05:53 2005-09-21 Show GitHub Exploit DB Packet Storm
275404 - bugada_andrea php_advanced_transfer_manager Multiple cross-site scripting (XSS) vulnerabilities in viewers/txt.php in PHP Advanced Transfer Manager 1.30 allow remote attackers to inject arbitrary web script or HTML via the (1) font, (2) normal… NVD-CWE-Other
CVE-2005-3000 2008-09-6 05:53 2005-09-21 Show GitHub Exploit DB Packet Storm
275405 - - - SQL injection vulnerability in index.php in NooTopList 1.0.0 release 17 allows remote attackers to execute arbitrary SQL commands via the (1) o or (2) sort parameters. NVD-CWE-Other
CVE-2005-3003 2008-09-6 05:53 2005-09-22 Show GitHub Exploit DB Packet Storm
275406 - amar_sagoo tofu Tofu 0.2 allows remote attackers to execute arbitrary Python code via crafted pickled objects, which Tofu unpickles and executes. NVD-CWE-Other
CVE-2005-3008 2008-09-6 05:53 2005-09-22 Show GitHub Exploit DB Packet Storm
275407 - cutephp cutenews Direct static code injection vulnerability in the flood protection feature in inc/shows.inc.php in CuteNews 1.4.0 and earlier allows remote attackers to execute arbitrary PHP code via the HTTP_CLIENT… NVD-CWE-Other
CVE-2005-3010 2008-09-6 05:53 2005-09-22 Show GitHub Exploit DB Packet Storm
275408 - simplecdr-x simplecdr-x The MasterDataCD::createImage function in masterdatacd.cpp for SimpleCDR-X 1.3.3 creates the .temp temporary directory with insecure permissions, which allows local users to read sensitive ISO images. NVD-CWE-Other
CVE-2005-3012 2008-09-6 05:53 2005-09-22 Show GitHub Exploit DB Packet Storm
275409 - ensim webppliance Cross-site scripting (XSS) vulnerability in Ensim webplliance allows remote attackers to inject arbitrary web script or HTML via the Login (OCW_login_username) field. NVD-CWE-Other
CVE-2005-3014 2008-09-6 05:53 2005-09-22 Show GitHub Exploit DB Packet Storm
275410 - ibm lotus_domino
lotus_domino_enterprise_server 		Cross-site scripting (XSS) vulnerability in IBM Lotus Domino 6.5.2 allows remote attackers to inject arbitrary web script or HTML via the (1) BaseTarget or (2) Src parameters. NVD-CWE-Other
CVE-2005-3015 2008-09-6 05:53 2005-09-22 Show GitHub Exploit DB Packet Storm