Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 6, 2025, 6:04 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
193281 6.5 警告 シスコシステムズ - Management Center for Cisco Security Agents における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-0147 2012-06-26 16:19 2010-02-17 Show GitHub Exploit DB Packet Storm
193282 6.8 警告 シスコシステムズ - Management Center for Cisco Security Agents におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2010-0146 2012-06-26 16:19 2010-02-17 Show GitHub Exploit DB Packet Storm
193283 10 危険 シスコシステムズ - Cisco IronPort Encryption Appliance などに組み込まれている HTTPS サーバにおける任意のコードを実行される脆弱性 CWE-noinfo
情報不足 		CVE-2010-0145 2012-06-26 16:19 2010-02-10 Show GitHub Exploit DB Packet Storm
193284 7.8 危険 シスコシステムズ - Cisco IronPort Encryption Appliance などに組み込まれている WebSafe DistributorServlet における任意のファイルを読まれる脆弱性 CWE-noinfo
情報不足 		CVE-2010-0144 2012-06-26 16:19 2010-02-10 Show GitHub Exploit DB Packet Storm
193285 7.8 危険 シスコシステムズ - Cisco IronPort Encryption Appliance などの管理インターフェースにおける任意のファイルを読まれる脆弱性 CWE-noinfo
情報不足 		CVE-2010-0143 2012-06-26 16:19 2010-02-10 Show GitHub Exploit DB Packet Storm
193286 8.5 危険 シスコシステムズ - Cisco Unified MeetingPlace の MeetingTime における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-0142 2012-06-26 16:19 2010-01-27 Show GitHub Exploit DB Packet Storm
193287 6.4 警告 シスコシステムズ - Cisco Unified MeetingPlace の MeetingTime におけるユーザデータベースから情報を発見される脆弱性 CWE-255
証明書・パスワード管理 		CVE-2010-0141 2012-06-26 16:19 2010-01-27 Show GitHub Exploit DB Packet Storm
193288 10 危険 シスコシステムズ - Cisco Unified MeetingPlace の Web サーバにおける管理者アカウントを作成される脆弱性 CWE-noinfo
情報不足 		CVE-2010-0140 2012-06-26 16:19 2010-01-27 Show GitHub Exploit DB Packet Storm
193289 9 危険 シスコシステムズ - Cisco Unified MeetingPlace におけるデータベースのデータを変更される脆弱性 CWE-89
SQLインジェクション 		CVE-2010-0139 2012-06-26 16:19 2010-01-27 Show GitHub Exploit DB Packet Storm
193290 10 危険 マイクロソフト
シスコシステムズ		 - CiscoWorks LMS に同梱されている Cisco CiscoWorks IPM におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2010-0138 2012-06-26 16:19 2010-01-20 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 7, 2025, 4:05 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
270301 - ibm websphere_application_server IBM WebSphere Application Server (WAS) 5.0.2.5 through 5.1.1.3 allows remote attackers to obtain JSP source code and other sensitive information, related to incorrect request processing by the web co… NVD-CWE-Other
CVE-2005-4834 2011-03-8 11:29 2005-12-31 Show GitHub Exploit DB Packet Storm
270302 - hitachi groupmax_mail_smtp Hitachi Groupmax Mail SMTP 06-50 through 06-52-/A and 07-00 through 07-20 allows remote attackers to cause a denial of service (service stop) via an e-mail message with an "invalid format." NVD-CWE-Other
CVE-2005-4324 2011-03-8 11:28 2005-12-17 Show GitHub Exploit DB Packet Storm
270303 - university_of_arizona webglimpse Cross-site scripting (XSS) vulnerability in webglimpse.cgi in Webglimpse 2.14.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the ID parameter. NVD-CWE-Other
CVE-2005-4328 2011-03-8 11:28 2005-12-17 Show GitHub Exploit DB Packet Storm
270304 - php_arena pafiledb SQL injection vulnerability in pafiledb.php in PHP Arena paFileDB Extreme Edition RC 5 and earlier allows remote attackers to execute arbitrary SQL commands via the (1) newsid and (2) id parameter. NVD-CWE-Other
CVE-2005-4329 2011-03-8 11:28 2005-12-17 Show GitHub Exploit DB Packet Storm
270305 - - - SQL injection vulnerability in browse.ihtml in iHTML Merchant Mall allows remote attackers to execute arbitrary SQL commands via the (1) id, (2) store, and (3) step parameters. NVD-CWE-Other
CVE-2005-4330 2011-03-8 11:28 2005-12-17 Show GitHub Exploit DB Packet Storm
270306 - ihtml_merchant ihtml_merchant SQL injection vulnerability in merchant.ihtml in iHTML Merchant Version 2 Pro allows remote attackers to execute arbitrary SQL commands via the (1) step, (2) id, and (3) pid parameters. NVD-CWE-Other
CVE-2005-4331 2011-03-8 11:28 2005-12-17 Show GitHub Exploit DB Packet Storm
270307 - courseforum projectforum Cross-site scripting (XSS) vulnerability in ProjectForum 4.7.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) fwd parameter in admin/adminsignin.html and (2) o… NVD-CWE-Other
CVE-2005-4336 2011-03-8 11:28 2005-12-17 Show GitHub Exploit DB Packet Storm
270308 - macromedia coldfusion ColdFusion Sandbox on Adobe (formerly Macromedia) ColdFusion MX 6.0, 6.1, 6.1 with JRun, and 7.0 does not throw an exception if the SecurityManager is disabled, which might allow remote attackers to … NVD-CWE-Other
CVE-2005-4342 2011-03-8 11:28 2005-12-19 Show GitHub Exploit DB Packet Storm
270309 - macromedia coldfusion Adobe (formerly Macromedia) ColdFusion MX 6.0, 6.1, 6.1 with JRun, and 7.0 allows remote attackers to attach arbitrary files and send mail via a crafted Subject field, which is not properly handled b… NVD-CWE-Other
CVE-2005-4343 2011-03-8 11:28 2005-12-19 Show GitHub Exploit DB Packet Storm
270310 - macromedia coldfusion Adobe (formerly Macromedia) ColdFusion MX 7.0 does not honor when the CFOBJECT /CreateObject(Java) setting is disabled, which allows local users to create an object despite the specified configuratio… NVD-CWE-Other
CVE-2005-4344 2011-03-8 11:28 2005-12-19 Show GitHub Exploit DB Packet Storm