Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 13, 2025, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
192841 7.5 危険 Chill Creations - Joomla! 用 ccNewsletter コンポーネントにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2011-5099 2012-08-17 14:29 2012-08-14 Show GitHub Exploit DB Packet Storm
192842 4.3 警告 Timely - WordPress 用 All-in-One Event Calendar プラグインにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-1835 2012-08-17 14:03 2012-08-14 Show GitHub Exploit DB Packet Storm
192843 7.5 危険 Powerplay Gallery project - WordPress 用 Image News slider プラグインにおける脆弱性 CWE-noinfo
情報不足 		CVE-2012-4327 2012-08-17 14:00 2012-08-14 Show GitHub Exploit DB Packet Storm
192844 6.8 警告 AlstraSoft - AlstraSoft Site Uptime Enterprise の commonsettings.php におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2012-4326 2012-08-17 13:58 2012-08-14 Show GitHub Exploit DB Packet Storm
192845 6.8 警告 Utopia Software - Utopia News Pro の upload/users.php におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2012-4325 2012-08-17 13:53 2012-08-14 Show GitHub Exploit DB Packet Storm
192846 6.8 警告 PHPJabbers - PHPJabbers Vacation Rental Script におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2012-4324 2012-08-17 13:49 2012-08-14 Show GitHub Exploit DB Packet Storm
192847 2.6 注意 株式会社ミクシィ - Android 版 mixi における情報管理不備の脆弱性 CWE-Other
その他 		CVE-2012-4007 2012-08-17 12:02 2012-08-17 Show GitHub Exploit DB Packet Storm
192848 6.4 警告 Python Software Foundation - Python の utf-16 デコーダにおける重要な情報 (プロセスメモリ) を取得される脆弱性 CWE-DesignError
CVE-2012-2135 2012-08-17 11:14 2012-04-14 Show GitHub Exploit DB Packet Storm
192849 10 危険 アドビシステムズ - Adobe Shockwave Player における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2012-2047 2012-08-17 11:07 2012-08-14 Show GitHub Exploit DB Packet Storm
192850 10 危険 アドビシステムズ - Adobe Shockwave Player における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2012-2046 2012-08-17 11:05 2012-08-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 13, 2025, 4:09 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
269111 - slashcode.com slash The quick login feature in Slash Slashcode does not redirect the user to an alternate URL when the wrong password is provided, which makes it easier for remote web sites to guess the proper passwords… NVD-CWE-Other
CVE-2002-1647 2016-10-18 11:27 2002-12-31 Show GitHub Exploit DB Packet Storm
269112 - yahoo messenger Yahoo! Messenger before February 2002 allows remote attackers to add arbitrary users to another user's buddy list and possibly obtain sensitive information. NVD-CWE-Other
CVE-2002-1664 2016-10-18 11:27 2002-12-31 Show GitHub Exploit DB Packet Storm
269113 - yahoo messenger Buffer overflow in Yahoo! Messenger before February 2002 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long set_buddygrp field. NVD-CWE-Other
CVE-2002-1665 2016-10-18 11:27 2002-12-31 Show GitHub Exploit DB Packet Storm
269114 - ibm http_server IBM HTTP Server 1.0 on AS/400 allows remote attackers to obtain the path to the web root directory and other sensitive information, which is leaked in an error mesage when a request is made for a non… NVD-CWE-Other
CVE-2002-1822 2016-10-18 11:27 2002-12-31 Show GitHub Exploit DB Packet Storm
269115 - openbb openbb Open Bulletin Board (OpenBB) 1.0.0 RC3 allows remote attackers to bypass authentication and access modifier options via a direct request to moderator.php with the action and ismod parameters. NVD-CWE-Other
CVE-2002-1830 2016-10-18 11:27 2002-12-31 Show GitHub Exploit DB Packet Storm
269116 - bizdesign imagefolio The default configuration of BizDesign ImageFolio 2.23 through 2.26 does not control access to (1) admin/setup.cgi, which allows remote attackers to create an administrative account, or (2) admin/nph… NVD-CWE-Other
CVE-2002-1867 2016-10-18 11:27 2002-12-31 Show GitHub Exploit DB Packet Storm
269117 - qnx rtos /bin/su in QNX realtime operating system (RTOS) 4.25 and 6.1.0 allows local users to obtain sensitive information from core dump files by sending the SIGSERV (invalid memory reference) signal. NVD-CWE-Other
CVE-2002-2039 2016-10-18 11:27 2002-12-31 Show GitHub Exploit DB Packet Storm
269118 - michael_baumer pfinger Buffer overflow in PFinger 0.7.8 client allows remote attackers to execute arbitrary code via a long query value passed to the (1) finger program, (2) -l, (3) -d, and (4) -t options. NOTE: if PFinge… NVD-CWE-Other
CVE-2002-2048 2016-10-18 11:27 2002-12-31 Show GitHub Exploit DB Packet Storm
269119 - teekai teekai_forum TeeKai Forum 1.2 allows remote attackers to authenticate as the administrator and and gain privileged web forum access by setting the valid_level cookie to admin. NVD-CWE-Other
CVE-2002-2054 2016-10-18 11:27 2002-12-31 Show GitHub Exploit DB Packet Storm
269120 - teekai teekai_tracking_online Cross-site scripting (XSS) vulnerability in userlog.php in TeeKai Tracking Online 1.0 allows remote attackers to inject arbitrary web script or HTML via the id parameter. NVD-CWE-Other
CVE-2002-2055 2016-10-18 11:27 2002-12-31 Show GitHub Exploit DB Packet Storm