Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 23, 2025, 6:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
192421 7.5 危険 igeneric - iGeneric の iG Shop の display_review.php における SQL インジェクションの脆弱性 - CVE-2007-0133 2012-09-25 15:36 2007-01-9 Show GitHub Exploit DB Packet Storm
192422 7.5 危険 igeneric - iGeneric の iG Shop の compare_product.php における SQL インジェクションの脆弱性 - CVE-2007-0132 2012-09-25 15:36 2007-01-9 Show GitHub Exploit DB Packet Storm
192423 7.5 危険 JAMWiki - JAMWiki における wiki への不正な変更を実施される脆弱性 - CVE-2007-0131 2012-09-25 15:36 2007-01-9 Show GitHub Exploit DB Packet Storm
192424 7.5 危険 igeneric - iGeneric の iG Calendar の user.php における SQL インジェクションの脆弱性 - CVE-2007-0130 2012-09-25 15:36 2007-01-9 Show GitHub Exploit DB Packet Storm
192425 6.8 警告 mkportal - MKPortal の admin.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-0191 2012-09-25 15:36 2007-01-12 Show GitHub Exploit DB Packet Storm
192426 7.5 危険 PHP Web Scripts - Easy Banner Pro の info.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-0178 2012-09-25 15:36 2007-01-10 Show GitHub Exploit DB Packet Storm
192427 5.1 警告 MediaWiki - MediaWiki の AJAX モジュールにおけるクロスサイトスクリプティングの脆弱性 - CVE-2007-0177 2012-09-25 15:36 2007-01-10 Show GitHub Exploit DB Packet Storm
192428 6.8 警告 l2j - L2J Statistik Script の index.php におけるディレクトリトラバーサルの脆弱性 - CVE-2007-0173 2012-09-25 15:36 2007-01-10 Show GitHub Exploit DB Packet Storm
192429 7.5 危険 locazo - LocazoList の main.asp における SQL インジェクションの脆弱性 - CVE-2007-0129 2012-09-25 15:36 2007-01-9 Show GitHub Exploit DB Packet Storm
192430 9.3 危険 Opera Software ASA - Opera の Javascript SVG サポートにおける任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2007-0127 2012-09-25 15:36 2007-01-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 23, 2025, 5:11 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
268361 - bea weblogic_server The default configuration of BEA WebLogic Server and Express 8.1 SP2 and earlier, 7.0 SP4 and earlier, 6.1 through SP6, and 5.1 through SP13 responds to the HTTP TRACE request, which can allow remote… CWE-200
Information Exposure 		CVE-2004-2320 2017-07-11 10:31 2004-12-31 Show GitHub Exploit DB Packet Storm
268362 - bea weblogic_server BEA WebLogic Server and Express 8.1 SP1 and earlier allows local users in the Operator role to obtain administrator passwords via MBean attributes, including (1) ServerStartMBean.Password and (2) Nod… NVD-CWE-Other
CVE-2004-2321 2017-07-11 10:31 2004-12-31 Show GitHub Exploit DB Packet Storm
268363 - phpwebsite phpwebsite SQL injection vulnerability in the (1) announce and (2) notes modules of phpWebSite before 0.9.3-2 allows remote attackers to execute arbitrary SQL queries, as demonstrated using the ANN_id parameter… NVD-CWE-Other
CVE-2004-2322 2017-07-11 10:31 2004-12-31 Show GitHub Exploit DB Packet Storm
268364 - dotnetnuke dotnetnuke DotNetNuke (formerly IBuySpy Workshop) 1.0.6 through 1.0.10d allows remote attackers to obtain sensitive information, including the SQL server username and password, via a GET request for source or c… NVD-CWE-Other
CVE-2004-2323 2017-07-11 10:31 2004-12-31 Show GitHub Exploit DB Packet Storm
268365 - dotnetnuke dotnetnuke SQL injection vulnerability in DotNetNuke (formerly IBuySpy Workshop) 1.0.6 through 1.0.10d allows remote attackers to modify the backend database via the (1) table and (2) field parameters in LinkCl… NVD-CWE-Other
CVE-2004-2324 2017-07-11 10:31 2004-12-31 Show GitHub Exploit DB Packet Storm
268366 - dotnetnuke dotnetnuke Cross-site scripting (XSS) vulnerability in EditModule.aspx for DotNetNuke (formerly IBuySpy Workshop) 1.0.6 through 1.0.10d allows remote attackers to inject arbitrary web script or HTML. NVD-CWE-Other
CVE-2004-2325 2017-07-11 10:31 2004-12-31 Show GitHub Exploit DB Packet Storm
268367 - vizer_web_server vizer_web_server Vizer Web Server 1.9.1 allows remote attackers to cause a denial of service (crash) via multiple malformed requests including (1) requests without GET, (2) GET requests without HTTP, (3) or long GET … NVD-CWE-Other
CVE-2004-2327 2017-07-11 10:31 2004-12-31 Show GitHub Exploit DB Packet Storm
268368 - clearswift mailsweeper Clearswift MAILsweeper for SMTP before 4.3_13 allows remote attackers to cause a denial of service (infinite loop) via an e-mail with a crafted RAR archive attached. NVD-CWE-Other
CVE-2004-2328 2017-07-11 10:31 2004-12-31 Show GitHub Exploit DB Packet Storm
268369 - kerio personal_firewall Kerio Personal Firewall (KPF) 2.1.5 allows local users to execute arbitrary code with SYSTEM privileges via the Load button in the Firewall Configuration Files option, which does not drop privileges … NVD-CWE-Other
CVE-2004-2329 2017-07-11 10:31 2004-12-31 Show GitHub Exploit DB Packet Storm
268370 - macromedia coldfusion ColdFusion MX 6.1 and 6.1 J2EE allows remote attackers to cause a denial of service via an HTTP request containing a large number of form fields. NVD-CWE-Other
CVE-2004-2330 2017-07-11 10:31 2004-12-31 Show GitHub Exploit DB Packet Storm