Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 13, 2025, 2 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
189951 7.5 危険 index script - IndexScript における SQL インジェクションの脆弱性 - CVE-2007-4163 2012-09-25 16:59 2007-07-26 Show GitHub Exploit DB Packet Storm
189952 5 警告 mldonkey - MLDonkey における IP ブロックリストを回避される脆弱性 - CVE-2007-4100 2012-09-25 16:59 2007-07-31 Show GitHub Exploit DB Packet Storm
189953 7.5 危険 idevSpot - IDevSpot PhpHostBot における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-4094 2012-09-25 16:59 2007-07-30 Show GitHub Exploit DB Packet Storm
189954 7.8 危険 minb - minb におけるユーザ名などを含むデータベースをダウンロードされる脆弱性 - CVE-2007-4093 2012-09-25 16:47 2007-07-30 Show GitHub Exploit DB Packet Storm
189955 5 警告 ifoto - iFoto の index.php におけるディレクトリトラバーサルの脆弱性 - CVE-2007-4092 2012-09-25 16:47 2007-07-30 Show GitHub Exploit DB Packet Storm
189956 7.5 危険 index script - IndexScript の show_cat.php における SQL インジェクションの脆弱性 - CVE-2007-4069 2012-09-25 16:47 2007-07-26 Show GitHub Exploit DB Packet Storm
189957 7.8 危険 Tenable, Inc. - Nessus Vulnerability Scanner の SCANCTRL.ScanCtrlCtrl.1 ActiveX コントロールにおける任意のファイルを削除される脆弱性 CWE-22
パス・トラバーサル 		CVE-2007-4062 2012-09-25 16:47 2007-07-30 Show GitHub Exploit DB Packet Storm
189958 9.3 危険 Tenable, Inc. - Nessus Vulnerability Scanner の特定の ActiveX コントロールにおけるディレクトリトラバーサルの脆弱性 - CVE-2007-4061 2012-09-25 16:47 2007-07-30 Show GitHub Exploit DB Packet Storm
189959 6.5 警告 Neocrome - Neocrome Seditio の pfs.php における任意の PHP コードをアップロードされる脆弱性 - CVE-2007-4057 2012-09-25 16:47 2007-07-30 Show GitHub Exploit DB Packet Storm
189960 7.5 危険 php123 - PHP123 Top Sites の category.php における SQL インジェクションの脆弱性 - CVE-2007-4054 2012-09-25 16:47 2007-07-30 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 13, 2025, 4:09 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
271231 - timobraun dynamic_galerie Cross-site scripting (XSS) vulnerability in Dynamic Galerie 1.0 allows remote attackers to inject arbitrary web script or HTML via the pfad parameter in (1) index.php and (2) galerie.php. NOTE: this… NVD-CWE-Other
CVE-2006-2294 2011-03-8 11:35 2006-05-10 Show GitHub Exploit DB Packet Storm
271232 - new_atlanta_communications bluedragon_server
bluedragon_server_jx 		BlueDragon Server and Server JX 6.2.1.286 for Windows allows remote attackers to cause a denial of service (hang) via a request for a .cfm file whose name contains an MS-DOS device name such as (1) c… NVD-CWE-Other
CVE-2006-2310 2011-03-8 11:35 2006-06-26 Show GitHub Exploit DB Packet Storm
271233 - new_atlanta_communications bluedragon_server
bluedragon_server_jx 		This vulnerability is addressed in the following product release: New Atlanta Communications, BlueDragon Server, 6.2.1.309 NVD-CWE-Other
CVE-2006-2310 2011-03-8 11:35 2006-06-26 Show GitHub Exploit DB Packet Storm
271234 - new_atlanta_communications bluedragon_server
bluedragon_server_jx 		Cross-site scripting (XSS) vulnerability in BlueDragon Server and Server JX 6.2.1.286 for Windows allows remote attackers to inject arbitrary web script or HTML via the filename in a request to a (1)… NVD-CWE-Other
CVE-2006-2311 2011-03-8 11:35 2006-06-26 Show GitHub Exploit DB Packet Storm
271235 - updi_network_enterprise at1_event_publisher Cross-site scripting (XSS) vulnerability in tablepublisher.cgi in UPDI Network Enterprise @1 Table Publisher 2006-03-23 allows remote attackers to inject arbitrary web script or HTML via the Title of… NVD-CWE-Other
CVE-2006-1795 2011-03-8 11:34 2006-04-17 Show GitHub Exploit DB Packet Storm
271236 - digium asterisk Integer signedness error in format_jpeg.c in Asterisk 1.2.6 and earlier allows remote attackers to execute arbitrary code via a length value that passes a length check as a negative number, but trigg… NVD-CWE-Other
CVE-2006-1827 2011-03-8 11:34 2006-04-19 Show GitHub Exploit DB Packet Storm
271237 - francisco_burzi php-nuke Cross-site scripting (XSS) vulnerability in the Your_Account module in PHP-Nuke 7.8 might allows remote attackers to inject arbitrary HTML and web script via the ublock parameter, which is saved in t… NVD-CWE-Other
CVE-2006-1846 2011-03-8 11:34 2006-04-20 Show GitHub Exploit DB Packet Storm
271238 - sweetphp totalcalendar PHP remote file inclusion vulnerability in (1) about.php or (2) auth.php in TotalCalendar allows remote attackers to execute arbitrary PHP code via a URL in the inc_dir parameter. NVD-CWE-Other
CVE-2006-1922 2011-03-8 11:34 2006-04-21 Show GitHub Exploit DB Packet Storm
271239 - community_architect community_architect_guestbook Cross-site scripting (XSS) vulnerability in cgi-bin/guest in Community Architect Guestbook allows remote attackers to inject arbitrary web script or HTML by signing the guestbook, which is displayed … NVD-CWE-Other
CVE-2006-2003 2011-03-8 11:34 2006-04-25 Show GitHub Exploit DB Packet Storm
271240 - vihor vihordesign Directory traversal vulnerability in index.php in ViHor Design allows remote attackers to read arbitrary files via the page parameter. NVD-CWE-Other
CVE-2006-1497 2011-03-8 11:33 2006-03-30 Show GitHub Exploit DB Packet Storm