Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 23, 2025, 12:05 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
190391 7.5 危険 PHPNUKE
kyantonius		 - PHP-Nuke の Hadith モジュールにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-1298 2012-09-25 16:59 2008-03-12 Show GitHub Exploit DB Packet Storm
190392 4.8 警告 LTSP - LTSP の ldm におけるサーバへ接続される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-1293 2012-09-25 16:59 2008-04-29 Show GitHub Exploit DB Packet Storm
190393 5 警告 IBM - IBM Rational ClearQuest におけるユーザについて重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2008-1288 2012-09-25 16:59 2008-03-4 Show GitHub Exploit DB Packet Storm
190394 5 警告 IBM - IBM Rational ClearQuest におけるユーザ名を列挙される脆弱性 CWE-16
環境設定 		CVE-2008-1287 2012-09-25 16:59 2008-03-4 Show GitHub Exploit DB Packet Storm
190395 6 警告 Horde - Horde などにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-1284 2012-09-25 16:59 2008-03-7 Show GitHub Exploit DB Packet Storm
190396 9 危険 MailEnable - MailEnable の IMAP サービスにおけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2008-1277 2012-09-25 16:59 2008-03-10 Show GitHub Exploit DB Packet Storm
190397 9 危険 MailEnable - MailEnable の IMAP サービスにおけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2008-1276 2012-09-25 16:59 2008-03-10 Show GitHub Exploit DB Packet Storm
190398 7.8 危険 MailEnable - MailEnbale の SMTP サービスにおけるサービス運用妨害 (DoS) の脆弱性 CWE-DesignError
CWE-noinfo
CVE-2008-1275 2012-09-25 16:59 2008-03-10 Show GitHub Exploit DB Packet Storm
190399 6.9 警告 IBM - IBM AIX の man における任意のコードを実行される脆弱性 CWE-Other
その他 		CVE-2008-1274 2012-09-25 16:59 2008-03-10 Show GitHub Exploit DB Packet Storm
190400 4.3 警告 imagevue - imageVue におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-1273 2012-09-25 16:59 2008-03-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 23, 2025, 5:11 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
267931 - sympa sympa Cross-site scripting (XSS) vulnerability in the create list option in Sympa 4.1.x and earlier allows remote authenticated users to inject arbitrary web script or HTML via the description field. NVD-CWE-Other
CVE-2004-1735 2017-07-11 10:31 2004-08-21 Show GitHub Exploit DB Packet Storm
267932 - the_cacti_group cacti Cacti 0.8.5a allows remote attackers to gain sensitive information via an HTTP request to (1) auth.php, (2) auth_login.php, (3) auth_changepassword.php, and possibly other php files, which reveal the… NVD-CWE-Other
CVE-2004-1736 2017-07-11 10:31 2004-12-31 Show GitHub Exploit DB Packet Storm
267933 - the_cacti_group
gentoo 		cacti
linux 		SQL injection vulnerability in auth_login.php in Cacti 0.8.5a allows remote attackers to execute arbitrary SQL commands and bypass authentication via the (1) username or (2) password parameters. NVD-CWE-Other
CVE-2004-1737 2017-07-11 10:31 2004-08-16 Show GitHub Exploit DB Packet Storm
267934 - jshop_e-commerce jshop_server Cross-site scripting (XSS) vulnerability in page.php in JShop allows remote attackers to inject arbitrary web script or HTML via the xPage parameter. NVD-CWE-Other
CVE-2004-1738 2017-07-11 10:31 2004-12-31 Show GitHub Exploit DB Packet Storm
267935 - bird_chat internet_chat_server Bird Chat 1.61 allows remote attackers to cause a denial of service (crash) via invalid users. NVD-CWE-Other
CVE-2004-1739 2017-07-11 10:31 2004-08-23 Show GitHub Exploit DB Packet Storm
267936 - bird_chat internet_chat_server This has been fixed in version 1.61 Security Release. NVD-CWE-Other
CVE-2004-1739 2017-07-11 10:31 2004-08-23 Show GitHub Exploit DB Packet Storm
267937 - music_daemon music_daemon Music daemon (musicd) 0.0.3 and earlier allows remote attackers to read arbitrary files by calling LOAD with a full pathname, then calling SHOWLIST. NVD-CWE-Other
CVE-2004-1740 2017-07-11 10:31 2004-08-23 Show GitHub Exploit DB Packet Storm
267938 - music_daemon music_daemon Music daemon (musicd) 0.0.3 and earlier allows remote attackers to cause a denial of service (crash) by calling LOAD with a binary file as an argument, then calling SHOWLIST. NVD-CWE-Other
CVE-2004-1741 2017-07-11 10:31 2004-08-23 Show GitHub Exploit DB Packet Storm
267939 - web-app.org webapp Directory traversal vulnerability in WebAPP 0.9.9 allows remote attackers to view arbitrary files via a .. (dot dot) in the viewcat parameter. NVD-CWE-Other
CVE-2004-1742 2017-07-11 10:31 2004-08-24 Show GitHub Exploit DB Packet Storm
267940 - efs_software efs_web_server Easy File Sharing (EFS) Webserver 1.25 allows remote attackers to view arbitrary files via an HTTP request for the disk_c virtual folder. NVD-CWE-Other
CVE-2004-1743 2017-07-11 10:31 2004-08-24 Show GitHub Exploit DB Packet Storm