Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 19, 2025, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
192601 5.1 警告 openi-cms group - OPENi-CMS の openi-admin/base/fileloader.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-4750 2012-09-25 15:35 2006-09-13 Show GitHub Exploit DB Packet Storm
192602 4.3 警告 idevSpot - IdevSpot TextAds におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-4747 2012-09-25 15:35 2006-09-13 Show GitHub Exploit DB Packet Storm
192603 4.3 警告 idevSpot - IDevSpot PhpLinkExchange の user_add.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-4742 2012-09-25 15:35 2006-09-13 Show GitHub Exploit DB Packet Storm
192604 7.5 危険 idevSpot - IDevSpot PhpLinkExchange における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-4741 2012-09-25 15:35 2006-09-13 Show GitHub Exploit DB Packet Storm
192605 5 警告 jetbox - Jetbox CMS における重要な情報を取得される脆弱性 - CVE-2006-4740 2012-09-25 15:35 2006-09-13 Show GitHub Exploit DB Packet Storm
192606 2.6 注意 jetbox - Jetbox CMS におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-4739 2012-09-25 15:35 2006-09-13 Show GitHub Exploit DB Packet Storm
192607 7.5 危険 jetbox - Jetbox CMS の phpthumb.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-4738 2012-09-25 15:35 2006-09-13 Show GitHub Exploit DB Packet Storm
192608 7.5 危険 jetbox - Jetbox CMS の index.php における SQL インジェクションの脆弱性 - CVE-2006-4737 2012-09-25 15:35 2006-09-13 Show GitHub Exploit DB Packet Storm
192609 5 警告 kellan elliott-mccrea - Kellan Elliott-McCrea MagpieRSS における重要な情報を取得される脆弱性 - CVE-2006-4735 2012-09-25 15:35 2006-09-13 Show GitHub Exploit DB Packet Storm
192610 10 危険 マイクロソフト - Microsoft VB 6 における脆弱性 - CVE-2006-4732 2012-09-25 15:35 2006-09-13 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 20, 2025, 4:11 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
268401 - icecast icecast Cross-site scripting (XSS) vulnerability in list.cgi in the Icecast internal web server (icecast-server) 1.3.12 and earlier allows remote attackers to inject arbitrary web script via the UserAgent pa… NVD-CWE-Other
CVE-2004-0781 2017-07-11 10:30 2004-10-20 Show GitHub Exploit DB Packet Storm
268402 - openca openca Cross-site scripting (XSS) vulnerability in the web frontend in OpenCA 0.9.1-8 and earlier, and 0.9.2 RC6 and earlier, allows remote attackers to inject arbitrary web script or HTML via the form inpu… NVD-CWE-Other
CVE-2004-0787 2017-07-11 10:30 2004-10-20 Show GitHub Exploit DB Packet Storm
268403 - delegate
dnrd
don_moore
maradns
pliant
posadis
qbik
team_johnlong
axis 		delegate
dnrd
mydns
maradns
pliant_dns_server
posadis
wingate
raidendnsd
2100_network_camera
2110_network_camera
2120_network_camera
2400_video_server
2401_video_s… 		Multiple implementations of the DNS protocol, including (1) Poslib 1.0.2-1 and earlier as used by Posadis, (2) Axis Network products before firmware 3.13, and (3) Men & Mice Suite 2.2x before 2.2.3 a… NVD-CWE-Other
CVE-2004-0789 2017-07-11 10:30 2004-12-31 Show GitHub Exploit DB Packet Storm
268404 - debian bsdmainutils The calendar program in bsdmainutils 6.0 through 6.0.14 does not drop root privileges when executed with the -a flag, which allows attackers to execute arbitrary commands via a calendar event file. CWE-264
Permissions, Privileges, and Access Controls 		CVE-2004-0793 2017-07-11 10:30 2004-10-20 Show GitHub Exploit DB Packet Storm
268405 - luke_mewburn lukemftp
tnftpd 		Multiple signal handler race conditions in lukemftpd (aka tnftpd before 20040810) allow remote authenticated attackers to cause a denial of service or execute arbitrary code. NVD-CWE-Other
CVE-2004-0794 2017-07-11 10:30 2004-10-20 Show GitHub Exploit DB Packet Storm
268406 - ibm db2_universal_database DB2 8.1 remote command server (DB2RCMD.EXE) executes the db2rcmdc.exe program as the db2admin administrator, which allows local users to gain privileges via the DB2REMOTECMD named pipe. NVD-CWE-Other
CVE-2004-0795 2017-07-11 10:30 2004-10-20 Show GitHub Exploit DB Packet Storm
268407 - linuxprinting.org
sun
conectiva
trustix 		foomatic-filters
java_desktop_system
linux
secure_linux 		Unknown vulnerability in foomatic-rip in Foomatic before 3.0.2 allows local users or remote attackers with access to CUPS to execute arbitrary commands. NVD-CWE-Other
CVE-2004-0801 2017-07-11 10:30 2004-09-16 Show GitHub Exploit DB Packet Storm
268408 - enlightenment
imagemagick
sun
conectiva
mandrakesoft
redhat
suse
turbolinux
ubuntu 		imlib
imlib2
imagemagick
java_desktop_system
linux
mandrake_linux
mandrake_linux_corporate_server
enterprise_linux
enterprise_linux_desktop
fedora_core
linux_advanced_wo… 		Buffer overflow in the BMP loader in imlib2 before 1.1.2 allows remote attackers to execute arbitrary code via a specially-crafted BMP image, a different vulnerability than CVE-2004-0817. NVD-CWE-Other
CVE-2004-0802 2017-07-11 10:30 2004-12-31 Show GitHub Exploit DB Packet Storm
268409 - mpg123
mandrakesoft 		mpg123
mandrake_linux
mandrake_linux_corporate_server 		Buffer overflow in layer2.c in mpg123 0.59r and possibly mpg123 0.59s allows remote attackers to execute arbitrary code via a certain (1) mp3 or (2) mp2 file. NVD-CWE-Other
CVE-2004-0805 2017-07-11 10:30 2004-12-23 Show GitHub Exploit DB Packet Storm
268410 - netopia timbuktu_pro_mac Buffer overflow in Netopia Timbuktu 7.0.3 allows remote attackers to cause a denial of service (server process crash) via a certain data string that is sent to multiple simultaneous client connection… NVD-CWE-Other
CVE-2004-0810 2017-07-11 10:30 2004-12-23 Show GitHub Exploit DB Packet Storm