Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
196391 4.3 警告 edgephp - EZodiak の index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2009-4684 2012-06-26 16:19 2010-03-10 Show GitHub Exploit DB Packet Storm
196392 4.3 警告 frank-karau - phpFK PHP Forum ohne の search.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2009-4677 2012-06-26 16:19 2010-03-8 Show GitHub Exploit DB Packet Storm
196393 9.3 危険 JetAudio - jetAudio の JetCast.exe におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2009-4676 2012-06-26 16:19 2010-03-5 Show GitHub Exploit DB Packet Storm
196394 7.5 危険 WordPress.org
grupenet
- WordPress 用 WP-Lytebox プラグインの main.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2009-4672 2012-06-26 16:19 2010-03-5 Show GitHub Exploit DB Packet Storm
196395 7.5 危険 beaussier - RoomPHPlanning の Login.php における管理アクセス権を取得される脆弱性 CWE-287
不適切な認証
CVE-2009-4671 2012-06-26 16:19 2010-03-5 Show GitHub Exploit DB Packet Storm
196396 7.5 危険 beaussier - RoomPHPlanning の admin/delitem.php における任意のルームを削除される脆弱性 CWE-287
不適切な認証
CVE-2009-4670 2012-06-26 16:19 2010-03-5 Show GitHub Exploit DB Packet Storm
196397 7.5 危険 beaussier - RoomPHPlanning における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2009-4669 2012-06-26 16:19 2010-03-5 Show GitHub Exploit DB Packet Storm
196398 9.3 危険 JetAudio - jetAudio の JetCast.exe におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2009-4668 2012-06-26 16:19 2010-03-5 Show GitHub Exploit DB Packet Storm
196399 5 警告 CuteSoft Components - ASP.NET 用の CuteSoft Components Cute Editor におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2009-4665 2012-06-26 16:19 2010-03-5 Show GitHub Exploit DB Packet Storm
196400 3.3 注意 Linux
fwbuilder
- Firewall Builder における権限を取得される脆弱性 CWE-59
リンク解釈の問題
CVE-2009-4664 2012-06-26 16:19 2010-03-3 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 6, 2025, 4:09 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
269461 - sympa sympa Cross-site scripting (XSS) vulnerability in the create list option in Sympa 4.1.x and earlier allows remote authenticated users to inject arbitrary web script or HTML via the description field. NVD-CWE-Other
CVE-2004-1735 2017-07-11 10:31 2004-08-21 Show GitHub Exploit DB Packet Storm
269462 - the_cacti_group cacti Cacti 0.8.5a allows remote attackers to gain sensitive information via an HTTP request to (1) auth.php, (2) auth_login.php, (3) auth_changepassword.php, and possibly other php files, which reveal the… NVD-CWE-Other
CVE-2004-1736 2017-07-11 10:31 2004-12-31 Show GitHub Exploit DB Packet Storm
269463 - the_cacti_group
gentoo
cacti
linux
SQL injection vulnerability in auth_login.php in Cacti 0.8.5a allows remote attackers to execute arbitrary SQL commands and bypass authentication via the (1) username or (2) password parameters. NVD-CWE-Other
CVE-2004-1737 2017-07-11 10:31 2004-08-16 Show GitHub Exploit DB Packet Storm
269464 - jshop_e-commerce jshop_server Cross-site scripting (XSS) vulnerability in page.php in JShop allows remote attackers to inject arbitrary web script or HTML via the xPage parameter. NVD-CWE-Other
CVE-2004-1738 2017-07-11 10:31 2004-12-31 Show GitHub Exploit DB Packet Storm
269465 - bird_chat internet_chat_server Bird Chat 1.61 allows remote attackers to cause a denial of service (crash) via invalid users. NVD-CWE-Other
CVE-2004-1739 2017-07-11 10:31 2004-08-23 Show GitHub Exploit DB Packet Storm
269466 - bird_chat internet_chat_server This has been fixed in version 1.61 Security Release. NVD-CWE-Other
CVE-2004-1739 2017-07-11 10:31 2004-08-23 Show GitHub Exploit DB Packet Storm
269467 - music_daemon music_daemon Music daemon (musicd) 0.0.3 and earlier allows remote attackers to read arbitrary files by calling LOAD with a full pathname, then calling SHOWLIST. NVD-CWE-Other
CVE-2004-1740 2017-07-11 10:31 2004-08-23 Show GitHub Exploit DB Packet Storm
269468 - music_daemon music_daemon Music daemon (musicd) 0.0.3 and earlier allows remote attackers to cause a denial of service (crash) by calling LOAD with a binary file as an argument, then calling SHOWLIST. NVD-CWE-Other
CVE-2004-1741 2017-07-11 10:31 2004-08-23 Show GitHub Exploit DB Packet Storm
269469 - web-app.org webapp Directory traversal vulnerability in WebAPP 0.9.9 allows remote attackers to view arbitrary files via a .. (dot dot) in the viewcat parameter. NVD-CWE-Other
CVE-2004-1742 2017-07-11 10:31 2004-08-24 Show GitHub Exploit DB Packet Storm
269470 - efs_software efs_web_server Easy File Sharing (EFS) Webserver 1.25 allows remote attackers to view arbitrary files via an HTTP request for the disk_c virtual folder. NVD-CWE-Other
CVE-2004-1743 2017-07-11 10:31 2004-08-24 Show GitHub Exploit DB Packet Storm