Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
195941 7.5 危険 Apache Software Foundation - Apache ServiceMix などで使用される Apache CXF における任意のファイルを読まれ任意の HTTP リクエストをサーバに送信される脆弱性 CWE-20
不適切な入力確認
CVE-2010-2076 2012-06-26 16:19 2010-06-16 Show GitHub Exploit DB Packet Storm
195942 3.3 注意 GNU Project - GNU gv における任意のファイルを上書きされる脆弱性 CWE-59
リンク解釈の問題
CVE-2010-2056 2012-06-26 16:19 2010-06-6 Show GitHub Exploit DB Packet Storm
195943 3.3 注意 emesene - emesene の emesenelib/ProfileManager.py における任意のファイルを上書きされる脆弱性 CWE-59
リンク解釈の問題
CVE-2010-2053 2012-06-26 16:19 2010-06-7 Show GitHub Exploit DB Packet Storm
195944 7.5 危険 debliteck - Debliteck DBCart の article.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-2051 2012-06-26 16:19 2010-05-25 Show GitHub Exploit DB Packet Storm
195945 4.3 警告 ActiveHelper
Joomla!
- Joomla! の ActiveHelper LiveHelp (com_activehelper_livehelp) コンポーネントにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-2046 2012-06-26 16:19 2010-05-25 Show GitHub Exploit DB Packet Storm
195946 7.5 危険 Joomla!
dionesoft
- Joomla! の Dione Form Wizard コンポーネントにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2010-2045 2012-06-26 16:19 2010-05-25 Show GitHub Exploit DB Packet Storm
195947 7.5 危険 Joomla!
adhie utomo
- Joomla! 用の Konsultasi コンポーネントにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-2044 2012-06-26 16:19 2010-05-25 Show GitHub Exploit DB Packet Storm
195948 6.8 警告 gpEasy - gpEasy CMS におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2010-2039 2012-06-26 16:19 2010-05-25 Show GitHub Exploit DB Packet Storm
195949 2.1 注意 gpEasy - gpEasy CMS の include/tool/editing_files.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-2038 2012-06-26 16:19 2010-05-25 Show GitHub Exploit DB Packet Storm
195950 4.3 警告 Caucho Technology - Caucho Technology Resin Professional の resin-admin/digest.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-2032 2012-06-26 16:19 2010-05-24 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 4, 2025, 4:08 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
269471 - red-m red-alert Red-M Red-Alert 2.7.5 with software 3.1 build 24 binds authentication to IP addresses, which allows remote attackers to bypass authentication by connecting from the same IP address as an active authe… NVD-CWE-Other
CVE-2004-2079 2017-07-11 10:31 2004-02-9 Show GitHub Exploit DB Packet Storm
269472 - red-m red-alert Red-M Red-Alert 2.7.5 with software 3.1 build 24 converts multiple spaces in a Service Set Identifier (SSID) to a single space, which prevents Red-Alert from correctly identifying the SSID. NVD-CWE-Other
CVE-2004-2080 2017-07-11 10:31 2004-02-9 Show GitHub Exploit DB Packet Storm
269473 - karjasoft sami_ftp_server The samiftp.dll library in Sami FTP Server 1.1.3 allows local users to cause a denial of service (pmsystem.exe crash) by issuing (1) a CD command with a tilde (~) character or dot dot (/../) or (2) a… NVD-CWE-Other
CVE-2004-2081 2017-07-11 10:31 2004-12-31 Show GitHub Exploit DB Packet Storm
269474 - karjasoft sami_ftp_server The samiftp.dll library in Sami FTP Server 1.1.3 allows remote authenticated users to cause a denial of service (pmsystem.exe crash) via a GET request wit a large number of leading "/" (slash) charac… NVD-CWE-Other
CVE-2004-2082 2017-07-11 10:31 2004-02-13 Show GitHub Exploit DB Packet Storm
269475 - jshop_e-commerce jshop_professional
jshop_server
Cross-site scripting (XSS) vulnerability in search.php in JShop E-Commerce Server allows remote attackers to inject arbitrary web script or HTML via the xSearch parameter. NVD-CWE-Other
CVE-2004-2084 2017-07-11 10:31 2004-02-7 Show GitHub Exploit DB Packet Storm
269476 - brad_fears phpcodecabinet Multiple cross-site scripting (XSS) vulnerabilities in Brad Fears phpCodeCabinet 0.4 and earlier allow remote attackers to inject arbitrary web script or HTML via multiple parameters, including (1) t… NVD-CWE-Other
CVE-2004-2085 2017-07-11 10:31 2004-02-4 Show GitHub Exploit DB Packet Storm
269477 - sambar sambar_server Stack-based buffer overflow in results.stm for Sambar Server before the 6.0 production release allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an … NVD-CWE-Other
CVE-2004-2086 2017-07-11 10:31 2004-02-6 Show GitHub Exploit DB Packet Storm
269478 - sandsurfer sandsurfer Unknown vulnerability in SandSurfer before 1.7.0 allows remote attackers to gain access as a logged-in user. NVD-CWE-Other
CVE-2004-2087 2017-07-11 10:31 2004-02-8 Show GitHub Exploit DB Packet Storm
269479 - sophos sophos_anti-virus Sophos Anti-Virus 3.78 allows remote attackers to bypass virus scanning by using a qmail generated Delivery Status Notification (DSN) where the original email is not included in the bounce message. NVD-CWE-Other
CVE-2004-2088 2017-07-11 10:31 2004-02-12 Show GitHub Exploit DB Packet Storm
269480 - - - Matrix FTP Server allows remote attackers to cause a denial of service (crash) by logging in using four spaces as the username and password and then issuing a LIST command. NVD-CWE-Other
CVE-2004-2089 2017-07-11 10:31 2004-02-6 Show GitHub Exploit DB Packet Storm