Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
195141 3.5 注意 Ushahidi - Ushahidi Platform におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-3476 2012-08-14 16:57 2012-08-12 Show GitHub Exploit DB Packet Storm
195142 7.5 危険 Ushahidi - Ushahidi Platform のインストーラにおける管理者権限を取得される脆弱性 CWE-DesignError
CVE-2012-3475 2012-08-14 16:56 2012-08-12 Show GitHub Exploit DB Packet Storm
195143 5 警告 Ushahidi - Ushahidi Platform におけるコメント投稿者についての重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2012-3474 2012-08-14 16:55 2012-08-12 Show GitHub Exploit DB Packet Storm
195144 6.4 警告 Ushahidi - Ushahidi Platform のコメントに関する API におけるレポートを生成される脆弱性 CWE-287
不適切な認証 		CVE-2012-3473 2012-08-14 16:54 2012-08-12 Show GitHub Exploit DB Packet Storm
195145 6.4 警告 Ushahidi - Ushahidi Platform におけるメッセージを一覧表示される脆弱性 CWE-287
不適切な認証 		CVE-2012-3472 2012-08-14 16:50 2012-08-12 Show GitHub Exploit DB Packet Storm
195146 7.5 危険 Ushahidi - Ushahidi Platform における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2012-3471 2012-08-14 16:49 2012-08-12 Show GitHub Exploit DB Packet Storm
195147 7.5 危険 Ushahidi - Ushahidi Platform における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2012-3470 2012-08-14 16:49 2012-08-12 Show GitHub Exploit DB Packet Storm
195148 7.5 危険 Ushahidi - Ushahidi Platform における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2012-3469 2012-08-14 16:44 2012-08-12 Show GitHub Exploit DB Packet Storm
195149 7.5 危険 Ushahidi - Ushahidi Platform における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2012-3468 2012-08-14 16:43 2012-08-12 Show GitHub Exploit DB Packet Storm
195150 4.3 警告 Escon Information Consulting - ESCON SupportPortal Professional Edition におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-2590 2012-08-14 16:38 2012-08-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 7, 2025, 4:09 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
270161 - mailenable mailenable_enterprise
mailenable_professional 		Buffer overflow in the IMAP service of MailEnable Professional Edition 1.52 and Enterprise Edition 1.01 allows remote attackers to execute arbitrary code via (1) a long command string or (2) a long s… NVD-CWE-Other
CVE-2004-2501 2017-07-11 10:31 2004-12-31 Show GitHub Exploit DB Packet Storm
270162 - im-switch im-switch im-switch before 11.4-46.1 in Fedora Core 2 allows local users to overwrite arbitrary files via a symlink attack on the imswitcher[PID] temporary file. NVD-CWE-Other
CVE-2004-2502 2017-07-11 10:31 2004-12-31 Show GitHub Exploit DB Packet Storm
270163 - inweb mail_server INweb Mail Server 2.40 allows remote attackers to cause a denial of service (crash) via a large number of connect/disconnect actions to the (1) POP3 and (2) SMTP services. NVD-CWE-Other
CVE-2004-2503 2017-07-11 10:31 2004-12-31 Show GitHub Exploit DB Packet Storm
270164 - alt-n mdaemon The GUI in Alt-N Technologies MDaemon 7.2 and earlier, including 6.8, executes child processes such as NOTEPAD.EXE with SYSTEM privileges when users create new files, which allows local users with ph… NVD-CWE-Other
CVE-2004-2504 2017-07-11 10:31 2004-12-31 Show GitHub Exploit DB Packet Storm
270165 - macromedia coldfusion Macromedia ColdFusion MX before 6.1 does not restrict the size of error messages, which allows remote attackers to cause a denial of service (memory consumption and crash) by sending repeated GET or … NVD-CWE-Other
CVE-2004-2505 2017-07-11 10:31 2004-12-31 Show GitHub Exploit DB Packet Storm
270166 - wikindx wikindx Unparsed web content delivery vulnerability in WIKINDX before 0.9.9g allows remote attackers to obtain sensitive information via a direct HTTP request to the config.inc file. NVD-CWE-Other
CVE-2004-2506 2017-07-11 10:31 2004-12-31 Show GitHub Exploit DB Packet Storm
270167 - linksys wvc11b Absolute path traversal vulnerability in main.cgi in Linksys WVC11B Wireless-B Internet Video Camera allows remote attackers to read arbitrary files via an absolute pathname in the next_file paramete… NVD-CWE-Other
CVE-2004-2507 2017-07-11 10:31 2004-12-31 Show GitHub Exploit DB Packet Storm
270168 - linksys wvc11b Cross-site scripting (XSS) vulnerability in main.cgi in Linksys WVC11B Wireless-B Internet Video Camera allows remote attackers to inject arbitrary web script or HTML via the next_file parameter. NVD-CWE-Other
CVE-2004-2508 2017-07-11 10:31 2004-12-31 Show GitHub Exploit DB Packet Storm
270169 - ubbcentral ubb.threads Cross-site scripting (XSS) vulnerabilities in (1) calendar.php, (2) login.php, and (3) online.php in Infopop UBB.Threads 6.2.3 and 6.5 allow remote attackers to inject arbitrary web script or HTML vi… NVD-CWE-Other
CVE-2004-2509 2017-07-11 10:31 2004-12-31 Show GitHub Exploit DB Packet Storm
270170 - ubbcentral ubb.threads Cross-site scripting (XSS) vulnerability in showflat.php in Infopop UBB.Threads before 6.5 allows remote attackers to inject arbitrary web script or HTML via the Cat parameter. NVD-CWE-Other
CVE-2004-2510 2017-07-11 10:31 2004-12-31 Show GitHub Exploit DB Packet Storm