Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
193431 7.5 危険 netrik - Netrik の edit_textarea 関数における任意のコマンドを実行される脆弱性 - CVE-2006-6678 2012-09-25 15:36 2006-12-20 Show GitHub Exploit DB Packet Storm
193432 6.8 警告 Novell - Novell NetWare などの製品におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-6675 2012-09-25 15:36 2006-12-20 Show GitHub Exploit DB Packet Storm
193433 2.1 注意 ozeki - Ozeki HTTP-SMS Gateway における重要な情報を取得される脆弱性 CWE-310
暗号の問題
CVE-2006-6674 2012-09-25 15:36 2006-12-20 Show GitHub Exploit DB Packet Storm
193434 7.5 危険 maxiasp - Burak Yylmaz Download Portal における SQL インジェクションの脆弱性 - CVE-2006-6672 2012-09-25 15:36 2006-12-20 Show GitHub Exploit DB Packet Storm
193435 7.5 危険 maxiasp - Burak Yylmaz Download Portal の down.asp における SQL インジェクションの脆弱性 - CVE-2006-6671 2012-09-25 15:36 2006-12-20 Show GitHub Exploit DB Packet Storm
193436 10 危険 Nortel Networks - Nortel CallPilot Server における脆弱性 - CVE-2006-6670 2012-09-25 15:36 2006-12-20 Show GitHub Exploit DB Packet Storm
193437 5 警告 marathon aleph one - Marathon Aleph One におけるフォーマットストリングの脆弱性 - CVE-2006-6664 2012-09-25 15:36 2006-12-20 Show GitHub Exploit DB Packet Storm
193438 5 警告 marathon aleph one - Marathon Aleph One のサーバコンポーネントにおけるサービス運用妨害 (DoS) の脆弱性 - CVE-2006-6663 2012-09-25 15:36 2006-12-20 Show GitHub Exploit DB Packet Storm
193439 4.3 警告 KDE project - Konquerer などの製品で使用される KDE libkhtml におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2006-6660 2012-09-25 15:36 2006-12-20 Show GitHub Exploit DB Packet Storm
193440 5 警告 マイクロソフト - Windows XP SP2 の Microsoft Office ole32.dll におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2006-6659 2012-09-25 15:36 2006-12-19 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 13, 2025, 4:12 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
266891 - swsoft plesk Cross-site scripting (XSS) vulnerability in login_up.php3 in Plesk 7.0 and 7.1 Reloaded allows remote attackers to inject arbitrary web script or HTML via the login_name parameter. NOTE: this might … CWE-79
Cross-site Scripting
CVE-2004-2702 2017-07-29 10:29 2004-12-31 Show GitHub Exploit DB Packet Storm
266892 - clearswift mailsweeper_business_suite_i
mailsweeper_business_suite_ii
mailsweeper_for_smtp
mimesweeper_for_web
Clearswift MIMEsweeper 5.0.5, when it has been upgraded from MAILsweeper for SMTP version 4.3 or MAILsweeper Business Suite I or II, allows remote attackers to bypass scanning by including encrypted … CWE-310
Cryptographic Issues
CVE-2004-2703 2017-07-29 10:29 2004-12-31 Show GitHub Exploit DB Packet Storm
266893 - phrozensmoke gyach_enhanced Multiple unspecified vulnerabilities in Gyach Enhanced (Gyach-E) before 1.0.5 have unknown impact and attack vectors related to "several security flaws," probably related to buffer overflows in HTTP … NVD-CWE-noinfo
CVE-2004-2707 2017-07-29 10:29 2004-12-31 Show GitHub Exploit DB Packet Storm
266894 - windowmaker windowmaker Unspecified vulnerability in Window Maker 0.80.2 and earlier allows attackers to perform unknown actions via format string specifiers in a font specification in WMGLOBAL, probably a format string vul… CWE-134
Use of Externally-Controlled Format String
CVE-2004-2714 2017-07-29 10:29 2004-12-31 Show GitHub Exploit DB Packet Storm
266895 - php_heaven phpmychat edituser.php3 in PHPMyChat 0.14.5 allow remote attackers to bypass authentication and gain administrative privileges by setting the do_not_login parameter to false. CWE-287
Improper Authentication
CVE-2004-2715 2017-07-29 10:29 2004-12-31 Show GitHub Exploit DB Packet Storm
266896 - php_heaven phpmychat Multiple SQL injection vulnerabilities in usersL.php3 in PHPMyChat 0.14.5 allow remote attackers to execute arbitrary SQL commands via the (1) sortBy, (2) sortOrder, (3) startReg, (4) U, (5) LastChec… CWE-89
SQL Injection
CVE-2004-2716 2017-07-29 10:29 2004-12-31 Show GitHub Exploit DB Packet Storm
266897 - snitz_communications snitz_forums_2000 Cross-site scripting (XSS) vulnerability in register.asp in Snitz Forums 2000 3.4.04 and earlier allows remote attackers to inject arbitrary web script or HTML via javascript events in the Email para… CWE-79
Cross-site Scripting
CVE-2004-2720 2017-07-29 10:29 2004-12-31 Show GitHub Exploit DB Packet Storm
266898 - heiko_stamer openskat The CheckGroup function in openSkat VTMF before 2.1 generates public key pairs in which the "p" variable might not be prime, which allows remote attackers to determine the private key and decrypt mes… CWE-310
Cryptographic Issues
CVE-2004-2721 2017-07-29 10:29 2004-12-31 Show GitHub Exploit DB Packet Storm
266899 - nessus nessuswx NessusWX 1.4.4 stores account passwords in plaintext in .session files, which allows local users to obtain passwords. CWE-255
Credentials Management
CVE-2004-2723 2017-07-29 10:29 2004-12-31 Show GitHub Exploit DB Packet Storm
266900 - lionmax_software chat_anywhere LionMax Software Chat Anywhere 2.72a allows remote attackers to cause a denial of service (server crash and client CPU consumption) via a username beginning with percent (%) followed by a null charac… CWE-287
Improper Authentication
CVE-2004-2724 2017-07-29 10:29 2004-12-31 Show GitHub Exploit DB Packet Storm