Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
197231 9.3 危険 blazevideo - BlazeVideo HDTV Player におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2009-0450 2012-06-26 16:10 2009-02-10 Show GitHub Exploit DB Packet Storm
197232 7.5 危険 ASP indir - MyDesign Sayac の default.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-0447 2012-06-26 16:10 2009-02-10 Show GitHub Exploit DB Packet Storm
197233 7.5 危険 dreampics - Dreampics Gallery Builder の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-0445 2012-06-26 16:10 2009-02-10 Show GitHub Exploit DB Packet Storm
197234 9.3 危険 elecard - Elecard AVC HD PLAYER におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2009-0443 2012-06-26 16:10 2009-02-10 Show GitHub Exploit DB Packet Storm
197235 7.5 危険 codefixer - LinksPro Standard Edition の Default.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-0431 2012-06-26 16:10 2009-02-4 Show GitHub Exploit DB Packet Storm
197236 4.3 警告 Activewebsoftwares - Active Bids におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-0430 2012-06-26 16:10 2009-02-4 Show GitHub Exploit DB Packet Storm
197237 7.5 危険 Activewebsoftwares - Active Bids における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-0429 2012-06-26 16:10 2009-02-4 Show GitHub Exploit DB Packet Storm
197238 7.5 危険 DMXReady - DMXReady Secure Document Library の CategoryManager/upload_image_category.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-0428 2012-06-26 16:10 2009-02-4 Show GitHub Exploit DB Packet Storm
197239 7.5 危険 DMXReady - DMXReady Member Directory Manager の CategoryManager/upload_image_category.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-0427 2012-06-26 16:10 2009-02-4 Show GitHub Exploit DB Packet Storm
197240 7.5 危険 DMXReady - DMXReady Classified Listings Manager の CategoryManager/upload_image_category.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-0426 2012-06-26 16:10 2009-02-4 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 25, 2025, 4:06 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
268021 - webroot_software spy_sweeper_enterprise The Spy Sweeper Enterprise Client (SpySweeperTray.exe) in WebRoot Spy Sweeper before 2.0 does not drop privileges when using the help functionality, which allows local users to gain privileges. NVD-CWE-Other
CVE-2004-2676 2017-07-29 10:29 2004-12-31 Show GitHub Exploit DB Packet Storm
268022 - hp tru64 Unspecified vulnerability in HP Tru64 UNIX 5.1B PK2(BL22) and PK3(BL24), and 5.1A PK6(BL24), when using IPsec/IKE (Internet Key Exchange) with Certificates, allows remote attackers to gain privileges… NVD-CWE-Other
CVE-2004-2678 2017-07-29 10:29 2004-12-31 Show GitHub Exploit DB Packet Storm
268023 - checkpoint firewall-1 Check Point Firewall-1 4.1 up to NG AI R55 allows remote attackers to obtain potentially sensitive information by sending an Internet Key Exchange (IKE) with a certain Vendor ID payload that causes F… NVD-CWE-Other
CVE-2004-2679 2017-07-29 10:29 2004-12-31 Show GitHub Exploit DB Packet Storm
268024 - peersec_networks matrixssl PeerSec MatrixSSL before 1.1 caches session keys for an indefinitely long time, which might make it easier for remote attackers to hijack a session. NVD-CWE-Other
CVE-2004-2681 2017-07-29 10:29 2004-12-31 Show GitHub Exploit DB Packet Storm
268025 - newsphp newsphp Cross-site scripting (XSS) vulnerability in index.php in NewsPHP allows remote attackers to inject arbitrary web script or HTML via the cat_id parameter. NOTE: this issue might overlap vector 3 in C… CWE-79
Cross-site Scripting 		CVE-2004-2688 2017-07-29 10:29 2004-12-31 Show GitHub Exploit DB Packet Storm
268026 - newsphp newsphp NewsPHP allows remote attackers to gain unauthorized administrative access by setting a cookie to the "autorized=admin; root=admin" value. CWE-264
Permissions, Privileges, and Access Controls 		CVE-2004-2689 2017-07-29 10:29 2004-12-31 Show GitHub Exploit DB Packet Storm
268027 - newsphp newsphp Unrestricted file upload vulnerability in the Administration Panel for NewsPHP allows remote authenticated administrators to upload and execute arbitrary code instead of video files. NVD-CWE-Other
CVE-2004-2690 2017-07-29 10:29 2004-12-31 Show GitHub Exploit DB Packet Storm
268028 - 3com 3c17205-us
3c17210-us
superstack_3_switch 		Unspecified vulnerability in 3Com SuperStack 3 4400 switches with firmware version before 3.31 allows remote attackers to cause a denial of service (device reset) via a crafted request to the web man… NVD-CWE-Other
CVE-2004-2691 2017-07-29 10:29 2004-12-31 Show GitHub Exploit DB Packet Storm
268029 - kyberdigi_labs php-exec-dir The exec_dir PHP patch (php-exec-dir) 4.3.2 through 4.3.7 with safe mode disabled allows remote attackers to bypass restrictions and execute arbitrary commands via a backtick operator, which is not h… CWE-16
CWE-264
Configuration
Permissions, Privileges, and Access Controls 		CVE-2004-2692 2017-07-29 10:29 2004-12-31 Show GitHub Exploit DB Packet Storm
268030 - bea weblogic_server BEA WebLogic Server and WebLogic Express 6.1, 7.0, and 8.1, when using Remote Method Invocation (RMI) over Internet Inter-ORB Protocol (IIOP), does not properly handle when multiple logins for differ… CWE-255
Credentials Management 		CVE-2004-2696 2017-07-29 10:29 2004-12-31 Show GitHub Exploit DB Packet Storm