Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
195141 3.5 注意 Ushahidi - Ushahidi Platform におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-3476 2012-08-14 16:57 2012-08-12 Show GitHub Exploit DB Packet Storm
195142 7.5 危険 Ushahidi - Ushahidi Platform のインストーラにおける管理者権限を取得される脆弱性 CWE-DesignError
CVE-2012-3475 2012-08-14 16:56 2012-08-12 Show GitHub Exploit DB Packet Storm
195143 5 警告 Ushahidi - Ushahidi Platform におけるコメント投稿者についての重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2012-3474 2012-08-14 16:55 2012-08-12 Show GitHub Exploit DB Packet Storm
195144 6.4 警告 Ushahidi - Ushahidi Platform のコメントに関する API におけるレポートを生成される脆弱性 CWE-287
不適切な認証 		CVE-2012-3473 2012-08-14 16:54 2012-08-12 Show GitHub Exploit DB Packet Storm
195145 6.4 警告 Ushahidi - Ushahidi Platform におけるメッセージを一覧表示される脆弱性 CWE-287
不適切な認証 		CVE-2012-3472 2012-08-14 16:50 2012-08-12 Show GitHub Exploit DB Packet Storm
195146 7.5 危険 Ushahidi - Ushahidi Platform における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2012-3471 2012-08-14 16:49 2012-08-12 Show GitHub Exploit DB Packet Storm
195147 7.5 危険 Ushahidi - Ushahidi Platform における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2012-3470 2012-08-14 16:49 2012-08-12 Show GitHub Exploit DB Packet Storm
195148 7.5 危険 Ushahidi - Ushahidi Platform における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2012-3469 2012-08-14 16:44 2012-08-12 Show GitHub Exploit DB Packet Storm
195149 7.5 危険 Ushahidi - Ushahidi Platform における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2012-3468 2012-08-14 16:43 2012-08-12 Show GitHub Exploit DB Packet Storm
195150 4.3 警告 Escon Information Consulting - ESCON SupportPortal Professional Edition におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-2590 2012-08-14 16:38 2012-08-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 13, 2025, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
270801 - agsm agsm Buffer overflow in aGSM Half-Life client allows remote Half-Life servers to cause a denial of service (crash) and possibly execute arbitrary code via a long server response. NVD-CWE-Other
CVE-2004-2277 2017-07-11 10:31 2004-12-31 Show GitHub Exploit DB Packet Storm
270802 - chaogic_systems vhost Unknown cross-site scripting (XSS) vulnerability in the web GUI in vHost before 3.10r1 has unknown impact and attack vectors. NVD-CWE-Other
CVE-2004-2278 2017-07-11 10:31 2004-12-31 Show GitHub Exploit DB Packet Storm
270803 - invision_power_services invision_power_board Cross-site scripting (XSS) vulnerability in Invision Power Board 1.3 Final allows remote attackers to execute arbitrary script as other users via the pop parameter in a chat action to index.php. NVD-CWE-Other
CVE-2004-2279 2017-07-11 10:31 2004-12-31 Show GitHub Exploit DB Packet Storm
270804 - open_webmail open_webmail The read_list_from_file function in vacation.pl for OpenWebmail before 2.32 20040629 allows remote attackers to execute arbitrary commands via shell metacharacters in a filename argument. NVD-CWE-Other
CVE-2004-2284 2017-07-11 10:31 2004-12-31 Show GitHub Exploit DB Packet Storm
270805 - activestate
larry_wall 		activeperl
perl 		Integer overflow in the duplication operator in ActivePerl allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a large multiplier, which may trigger a… NVD-CWE-Other
CVE-2004-2286 2017-07-11 10:31 2004-12-31 Show GitHub Exploit DB Packet Storm
270806 - - - Microsoft Windows XP Explorer allows attackers to execute arbitrary code via a HTML and script in a self-executing folder that references an executable file within the folder, which is automatically … NVD-CWE-Other
CVE-2004-2290 2017-07-11 10:31 2004-12-31 Show GitHub Exploit DB Packet Storm
270807 - alt-n mdaemon Buffer overflow in Alt-N MDaemon 7.0.1 allows remote attackers to cause a denial of service (application crash) via a long STATUS command to the IMAP server. NVD-CWE-Other
CVE-2004-2292 2017-07-11 10:31 2004-12-31 Show GitHub Exploit DB Packet Storm
270808 - francisco_burzi php-nuke Multiple cross-site scripting (XSS) vulnerabilities in PHP-Nuke 6.0 to 7.3 allow remote attackers to inject arbitrary web script or HTML via the (1) eid parameter or (2) query parameter to the Encycl… NVD-CWE-Other
CVE-2004-2293 2017-07-11 10:31 2004-12-31 Show GitHub Exploit DB Packet Storm
270809 - - - SQL injection vulnerability in the Reviews module in PHP-Nuke 6.0 to 7.3 allows remote attackers to execute arbitrary SQL commands via the order parameter. NVD-CWE-Other
CVE-2004-2295 2017-07-11 10:31 2004-12-31 Show GitHub Exploit DB Packet Storm
270810 - francisco_burzi php-nuke The preview_review function in the Reviews module in PHP-Nuke 6.0 to 7.3, when running on Windows systems, allows remote attackers to obtain sensitive information via an invalid date parameter, which… NVD-CWE-Other
CVE-2004-2296 2017-07-11 10:31 2004-12-31 Show GitHub Exploit DB Packet Storm