Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 31, 2025, 4:03 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
190141 7.5 危険 ocean12 technologies - Ocean12 Mailing List Manager Gold における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-5978 2012-09-25 17:26 2009-01-26 Show GitHub Exploit DB Packet Storm
190142 4.3 警告 i-netsolution - i-Net Solution Orkut Clone におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-5971 2012-09-25 17:26 2009-01-26 Show GitHub Exploit DB Packet Storm
190143 6.5 警告 i-netsolution - i-Net Solution Orkut Clone の profile_social.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-5970 2012-09-25 17:26 2009-01-26 Show GitHub Exploit DB Packet Storm
190144 5 警告 lokicms - LokiCMS の index.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-5965 2012-09-25 17:26 2009-01-26 Show GitHub Exploit DB Packet Storm
190145 6.8 警告 ImpressCMS - Social ImpressCMS におけるセッションをハイジャックされる脆弱性 CWE-287
不適切な認証 		CVE-2008-5964 2012-09-25 17:26 2009-01-23 Show GitHub Exploit DB Packet Storm
190146 7.5 危険 mydyngallery - Joomla! 用の Mydyngallery コンポーネントにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-5957 2012-09-25 17:26 2009-01-23 Show GitHub Exploit DB Packet Storm
190147 6.8 警告 ktp computer customer database - KTPCCD CMS における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-5954 2012-09-25 17:26 2009-01-23 Show GitHub Exploit DB Packet Storm
190148 7.5 危険 ktp computer customer database - KTPCCD CMS におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-5953 2012-09-25 17:26 2009-01-23 Show GitHub Exploit DB Packet Storm
190149 6 警告 ktp computer customer database - KTPCCD CMS における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-5952 2012-09-25 17:26 2009-01-23 Show GitHub Exploit DB Packet Storm
190150 7.5 危険 nukevietcms - Nukeviet における管理者アクセス権を取得される脆弱性 CWE-287
不適切な認証 		CVE-2008-5945 2012-09-25 17:26 2009-01-22 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 1, 2025, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
274631 - apple airport_express
airport_extreme 		The network interface for Apple AirPort Express 6.x before Firmware Update 6.3, and AirPort Extreme 5.x before Firmware Update 5.7, allows remote attackers to cause a denial of service (unresponsive … CWE-399
 Resource Management Errors 		CVE-2005-3714 2011-03-7 14:00 2005-12-31 Show GitHub Exploit DB Packet Storm
274632 - sunncomm mediamax_drm SunnComm MediaMax DRM 5.0.21.0, as used by Sony BMG, assigns insecure Everyone/Full Control permissions to the "SunnComm Shared" directory, which allows local users to gain privileges by modifying pr… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2005-4069 2011-03-7 14:00 2005-12-8 Show GitHub Exploit DB Packet Storm
274633 - mybulletinboard mybulletinboard Multiple unspecified vulnerabilities in MyBulletinBoard (MyBB) before 1.0 have unknown impact and attack vectors, a different set of vulnerabilities than those identified by CVE-2005-4199. NVD-CWE-noinfo
CVE-2005-4200 2011-03-7 14:00 2005-12-13 Show GitHub Exploit DB Packet Storm
274634 - phpwebgallery phpwebgallery Multiple SQL injection vulnerabilities in PhpWebGallery 1.5.1 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) since, (2) sort_by, and (3) items_number parameters to c… CWE-89
SQL Injection 		CVE-2005-4228 2011-03-7 14:00 2005-12-14 Show GitHub Exploit DB Packet Storm
274635 - envolution envolution SQL injection vulnerability in the News module in Envolution allows remote attackers to execute arbitrary SQL commands via the (1) startrow and (2) catid parameter. CWE-89
SQL Injection 		CVE-2005-4263 2011-03-7 14:00 2005-12-15 Show GitHub Exploit DB Packet Storm
274636 - qualcomm worldmail Stack-based buffer overflow in Qualcomm WorldMail 3.0 allows remote attackers to execute arbitrary code via a long IMAP command that ends with a "}" character, as demonstrated using long (1) LIST, (2… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2005-4267 2011-03-7 14:00 2005-12-21 Show GitHub Exploit DB Packet Storm
274637 - nicplex plexcart_x3 SQL injection vulnerability in the search function in Plexum PLEXCART X3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, possibly involving the (1) s_itemname and (… CWE-89
SQL Injection 		CVE-2005-4315 2011-03-7 14:00 2005-12-17 Show GitHub Exploit DB Packet Storm
274638 - apple safari
webkit 		WebKit.dll in WebKit, as used in Safari.exe 4.531.9.1 in Apple Safari, allows remote attackers to cause a denial of service (application crash) via JavaScript that writes <marquee> sequences in an in… CWE-399
 Resource Management Errors 		CVE-2010-1729 2011-02-17 15:55 2010-05-6 Show GitHub Exploit DB Packet Storm
274639 - apple safari
webkit 		WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6, and before 4.1 on Mac OS X 10.4, does not properly handle clipboard (1) drag and (2) paste operations for URLs, which allows user-assi… CWE-200
Information Exposure 		CVE-2010-1388 2011-02-17 15:54 2010-06-12 Show GitHub Exploit DB Packet Storm
274640 - apple safari Buffer overflow in WebKit in Apple Safari before 4.0.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted floating-point numbers. CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2009-2195 2011-02-17 15:44 2009-08-13 Show GitHub Exploit DB Packet Storm