Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 23, 2025, 2:02 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
193331 7.5 危険 mywebland - myWebland myBloggie の trackback.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2006-4042 2012-09-25 15:35 2006-08-9 Show GitHub Exploit DB Packet Storm
193332 7.5 危険 mywebland - myWebland myEvent の myevent.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-4040 2012-09-25 15:35 2006-08-9 Show GitHub Exploit DB Packet Storm
193333 7.5 危険 moderngigabyte - ModernGigabyte ModernBill における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-4034 2012-09-25 15:35 2006-08-9 Show GitHub Exploit DB Packet Storm
193334 5.1 警告 Schezo - Lhaplus の Lhaplus.exe におけるヒープベースのバッファオーバーフローの脆弱性 - CVE-2006-4033 2012-09-25 15:35 2006-08-9 Show GitHub Exploit DB Packet Storm
193335 5 警告 The PHP Group - PHP の ip2long 関数におけるネットワーク情報を取得される脆弱性 - CVE-2006-4023 2012-09-25 15:35 2006-08-8 Show GitHub Exploit DB Packet Storm
193336 4.3 警告 inter network marketing ag - INM CMS G3 の search モジュールにおけるクロスサイトスクリプティングの脆弱性 - CVE-2006-4017 2012-09-25 15:35 2006-08-7 Show GitHub Exploit DB Packet Storm
193337 5 警告 ヒューレット・パッカード - HP ProCurve スイッチにおけるサービス運用妨害 (DoS) の脆弱性 - CVE-2006-4015 2012-09-25 15:35 2006-08-7 Show GitHub Exploit DB Packet Storm
193338 2.6 注意 Kayako - Kayako eSupport における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-4011 2012-09-25 15:35 2006-08-7 Show GitHub Exploit DB Packet Storm
193339 7.5 危険 knusperleicht - Knusperleicht Faq の index.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-4008 2012-09-25 15:35 2006-08-7 Show GitHub Exploit DB Packet Storm
193340 7.5 危険 knusperleicht - Knusperleicht Guestbook の index.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-4007 2012-09-25 15:35 2006-08-7 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 23, 2025, 5:11 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
267871 - icewarp web_mail Merak Mail Server 7.4.5 with Icewarp Web Mail 5.2.7 and possibly other versions allows remote attackers to gain sensitive information via a direct request to (1) accountsettings_add.html or (2) topme… NVD-CWE-Other
CVE-2004-1671 2017-07-11 10:31 2004-10-12 Show GitHub Exploit DB Packet Storm
267872 - icewarp web_mail attachment.html in Merak Mail Server 7.4.5 with Icewarp Web Mail 5.2.7 and possibly other versions allows remote attackers to view other users' attachments by specifying the username and message ID i… NVD-CWE-Other
CVE-2004-1672 2017-07-11 10:31 2004-10-12 Show GitHub Exploit DB Packet Storm
267873 - icewarp web_mail accountsettings_add.html in Merak Mail Server 7.4.5 with Icewarp Web Mail 5.2.7 and possibly other versions allow remote attackers to create text files with arbitrary content via the accountid parame… NVD-CWE-Other
CVE-2004-1673 2017-07-11 10:31 2004-10-12 Show GitHub Exploit DB Packet Storm
267874 - icewarp
merak 		web_mail
mail_server 		viewaction.html in Merak Mail Server 7.4.5 with Icewarp Web Mail 5.2.7 and possibly other versions allows remote attackers to (1) delete arbitrary files via the originalfolder parameter or (2) move a… NVD-CWE-Other
CVE-2004-1674 2017-07-11 10:31 2004-10-12 Show GitHub Exploit DB Packet Storm
267875 - gadu-gadu gadu-gadu_instant_messenger Heap-based buffer overflow in the image sending feature in Gadu-Gadu 6.0 build 149 allows remote attackers to execute arbitrary code via a crafted GG_MSG_IMAGE_REPLY message. NVD-CWE-Other
CVE-2004-1676 2017-07-11 10:31 2004-09-12 Show GitHub Exploit DB Packet Storm
267876 - logicnow perldesk pdesk.cgi in PerlDesk allows remote attackers to gain sensitive information via an invalid lang parameter, which includes pathname information in an error message. NVD-CWE-Other
CVE-2004-1677 2017-07-11 10:31 2004-09-12 Show GitHub Exploit DB Packet Storm
267877 - logicnow perldesk Directory traversal vulnerability in pdesk.cgi in PerlDesk allows remote attackers to read portions of arbitrary files and possibly execute arbitrary Perl modules via ".." sequences terminated by a %… NVD-CWE-Other
CVE-2004-1678 2017-07-11 10:31 2004-09-13 Show GitHub Exploit DB Packet Storm
267878 - pingtel xpressa application.cgi in the Pingtel Xpressa handset running firmware 2.1.11.24 allows remote authenticated users to cause a denial of service (VxWorks OS crash) via a long HTTP GET request, possibly trigg… NVD-CWE-Other
CVE-2004-1680 2017-07-11 10:31 2004-09-13 Show GitHub Exploit DB Packet Storm
267879 - qnx photon_microgui
rtp 		Multiple buffer overflows in (1) phrelay-cfg, (2) phlocale, (3) pkg-installer, or (4) input-cfg in QNX Photon microGUI for QNX RTP 6.1 allow local users to gain privileges via a long -s (server) comm… NVD-CWE-Other
CVE-2004-1681 2017-07-11 10:31 2004-08-26 Show GitHub Exploit DB Packet Storm
267880 - qnx rtp Format string vulnerability in QNX 6.1 FTP client allows remote authenticated users to gain group bin privileges via format string specifiers in the QUOTE command. NVD-CWE-Other
CVE-2004-1682 2017-07-11 10:31 2004-08-15 Show GitHub Exploit DB Packet Storm