Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 16, 2025, 4:04 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
191641 10 危険 karl dahlke - Karl Dahlke Edbrowse の http.c におけるスタックベースのバッファオーバーフローの脆弱性 - CVE-2006-6909 2012-09-25 15:36 2006-12-31 Show GitHub Exploit DB Packet Storm
191642 10 危険 マイクロソフト - Microsoft Windows Mobile Pocket PC edition の Bluetooth スタックにおける管理者のアクセス権限を取得される脆弱性 - CVE-2006-6902 2012-09-25 15:36 2006-12-31 Show GitHub Exploit DB Packet Storm
191643 4.3 警告 Opera Software ASA - Opera におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2006-6955 2012-09-25 15:36 2004-04-6 Show GitHub Exploit DB Packet Storm
191644 10 危険 マイクロソフト - Microsoft Windows の Bluetooth スタックにおける管理者のアクセス権限を取得される脆弱性 - CVE-2006-6901 2012-09-25 15:36 2006-12-31 Show GitHub Exploit DB Packet Storm
191645 6.8 警告 jonathon freeman - Jonathon J. Freeman OvBB の online.php の GetLocation 関数におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-6892 2012-09-25 15:36 2006-12-31 Show GitHub Exploit DB Packet Storm
191646 6.8 警告 logahead - logahead UNU における任意の PHP コードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2006-6887 2012-09-25 15:36 2006-12-31 Show GitHub Exploit DB Packet Storm
191647 4.3 警告 macromedia - Macromedia Shockwave の SwDir.dll におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2006-6885 2012-09-25 15:36 2006-12-31 Show GitHub Exploit DB Packet Storm
191648 6.8 警告 matteolucarelli - Matteo Lucarelli 3editor CMS の index.php におけるディレクトリトラバーサルの脆弱性 - CVE-2006-6877 2012-09-25 15:36 2006-12-31 Show GitHub Exploit DB Packet Storm
191649 7.5 危険 openser - OpenSER の SMS handling モジュールにおけるバッファオーバーフローの脆弱性 - CVE-2006-6876 2012-09-25 15:36 2006-12-31 Show GitHub Exploit DB Packet Storm
191650 7.5 危険 openser - OpenSER の OSP モジュールにおけるバッファオーバーフローの脆弱性 - CVE-2006-6875 2012-09-25 15:36 2006-12-31 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 16, 2025, 4:15 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
269551 - gadu-gadu gadu-gadu_instant_messenger Cross-site scripting (XSS) vulnerability in Gadu-Gadu build 155 and earlier allows remote attackers to inject arbitrary web script via a URL, which is echoed in a popup window that displays a parsing… NVD-CWE-Other
CVE-2004-1410 2016-10-18 11:54 2004-12-31 Show GitHub Exploit DB Packet Storm
269552 - gadu-gadu gadu-gadu_instant_messenger Gadu-Gadu 6.1 build 156 allows remote attackers to cause a denial of service (application hang) via a message that contains many special strings that are converted to images. NVD-CWE-Other
CVE-2004-1414 2016-10-18 11:54 2004-12-31 Show GitHub Exploit DB Packet Storm
269553 - korweblog korweblog Directory traversal vulnerability in index.php in KorWeblog 1.6.2-cvs and earlier allows remote attackers to read arbitrary files and execute arbitrary PHP files via .. (dot dot) sequences in the lng… NVD-CWE-Other
CVE-2004-1426 2016-10-18 11:54 2004-12-31 Show GitHub Exploit DB Packet Storm
269554 - asante fm2008_managed_ethernet_switch The configuration backup in Asante FM2008 running firmware 1.06 stores the username and password in cleartext, which could allow remote attackers to gain unauthorized access. NVD-CWE-Other
CVE-2004-1321 2016-10-18 11:53 2004-12-15 Show GitHub Exploit DB Packet Storm
269555 - oracle application_server
collaboration_suite
e-business_suite
enterprise_manager
enterprise_manager_database_control
enterprise_manager_grid_control
oracle10g
oracle8i
oracle9i 		Oracle 10g Database Server, when installed with a password that contains an exclamation point ("!") for the (1) DBSNMP or (2) SYSMAN user, generates an error that logs the password in the world-reada… CWE-200
Information Exposure 		CVE-2004-1367 2016-10-18 11:53 2004-08-4 Show GitHub Exploit DB Packet Storm
269556 - gnu glibc The glibcbug script in glibc 2.3.4 and earlier allows local users to overwrite arbitrary files via a symlink attack on temporary files, a different vulnerability than CVE-2004-0968. NVD-CWE-Other
CVE-2004-1382 2016-10-18 11:53 2004-12-31 Show GitHub Exploit DB Packet Storm
269557 - hylafax hylafax hfaxd in HylaFAX before 4.2.1, when installed with a "weak" hosts.hfaxd file, allows remote attackers to authenticate and bypass intended access restrictions via a crafted (1) username or (2) hostnam… NVD-CWE-Other
CVE-2004-1182 2016-10-18 11:52 2004-12-31 Show GitHub Exploit DB Packet Storm
269558 - gadu-gadu gadu-gadu_instant_messenger Cross-site scripting vulnerability in the parser for Gadu-Gadu allows remote attackers to inject arbitrary web script or HTML via (1) http:// or (2) news:// URLs, a different vulnerability than CVE-2… NVD-CWE-Other
CVE-2004-1229 2016-10-18 11:52 2005-01-10 Show GitHub Exploit DB Packet Storm
269559 - atari800
debian 		atari800
debian_linux 		Multiple buffer overflows in the RtConfigLoad function in rt-config.c for Atari800 before 1.3.4 allow local users to execute arbitrary code via large values in the configuration file. NVD-CWE-Other
CVE-2004-1076 2016-10-18 11:51 2005-01-10 Show GitHub Exploit DB Packet Storm
269560 - rssh
gentoo 		rssh
linux 		rssh 2.2.2 and earlier does not properly restrict programs that can be run, which could allow remote authenticated users to bypass intended access restrictions and execute arbitrary programs via (1) … NVD-CWE-Other
CVE-2004-1161 2016-10-18 11:51 2005-01-10 Show GitHub Exploit DB Packet Storm