Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
197591 5 警告 aspportal - ASP Portal におけるデータベースをダウンロードされる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-6382 2012-06-26 16:10 2009-03-2 Show GitHub Exploit DB Packet Storm
197592 4.6 警告 bcoos - bcoos の modules/adresses/viewcat.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6381 2012-06-26 16:10 2009-03-2 Show GitHub Exploit DB Packet Storm
197593 7.5 危険 Activewebsoftwares - Active Web Helpdesk の default.aspx における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6380 2012-06-26 16:10 2009-03-2 Show GitHub Exploit DB Packet Storm
197594 5 警告 codefixer - CodefixerSoftware MailingListPro Free Edition における重要な情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-6374 2012-06-26 16:10 2009-03-2 Show GitHub Exploit DB Packet Storm
197595 7.5 危険 Chipmunk Scripts - Chipmunk Guestbook の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6368 2012-06-26 16:10 2009-03-2 Show GitHub Exploit DB Packet Storm
197596 7.5 危険 adserversolutions - Ad Server Solutions Affiliate Software Java の logon.jsp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6366 2012-06-26 16:10 2009-03-2 Show GitHub Exploit DB Packet Storm
197597 6.4 警告 DNN - DotNetNuke におけるユーザアカウントに付加ロールを追加される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-6399 2012-06-26 16:10 2008-12-24 Show GitHub Exploit DB Packet Storm
197598 6.9 警告 eric raymond - SNG の sng_regress における任意のファイルを上書きされる脆弱性 CWE-59
リンク解釈の問題 		CVE-2008-6398 2012-06-26 16:10 2008-08-24 Show GitHub Exploit DB Packet Storm
197599 7.5 危険 adserversolutions - Ad Server Solutions Ad Management Software Java の logon.jsp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6365 2012-06-26 16:10 2009-03-2 Show GitHub Exploit DB Packet Storm
197600 7.5 危険 adserversolutions - Ad Server Solutions Banner Exchange Solution Java の logon_process.jsp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6364 2012-06-26 16:10 2009-03-2 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 4, 2025, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
269341 - x-micro wlan_11b_broadband_router_firmware X-Micro WLAN 11b Broadband Router 1.2.2, 1.2.2.3, 1.2.2.4, and 1.6.0.0 has a hardcoded "super" username and password, which could allow remote attackers to gain access. NVD-CWE-Other
CVE-2004-1920 2017-07-11 10:31 2004-04-10 Show GitHub Exploit DB Packet Storm
269342 - x-micro wlan_11b_broadband_router_firmware X-Micro WLAN 11b Broadband Router 1.6.0.1 has a hardcoded "1502" username and password, which could allow remote attackers to gain access. NVD-CWE-Other
CVE-2004-1921 2017-07-11 10:31 2004-04-10 Show GitHub Exploit DB Packet Storm
269343 - tiki tikiwiki_cms\/groupware Tiki CMS/Groupware (TikiWiki) 1.8.1 and earlier allows remote attackers to gain sensitive information via a direct request to (1) banner_click.php, (2) categorize.php, (3) tiki-admin_include_director… CWE-200
Information Exposure 		CVE-2004-1923 2017-07-11 10:31 2004-04-11 Show GitHub Exploit DB Packet Storm
269344 - tiki tikiwiki_cms\/groupware Multiple cross-site scripting (XSS) vulnerabilities in Tiki CMS/Groupware (TikiWiki) 1.8.1 and earlier allow remote attackers to inject arbitrary web script or HTML via via the (1) theme parameter to… CWE-79
Cross-site Scripting 		CVE-2004-1924 2017-07-11 10:31 2004-04-11 Show GitHub Exploit DB Packet Storm
269345 - tiki tikiwiki_cms\/groupware Multiple SQL injection vulnerabilities in Tiki CMS/Groupware (TikiWiki) 1.8.1 and earlier allow remote attackers to execute arbitrary SQL commands via the sort_mode parameter in (1) tiki-usermenu.php… CWE-89
SQL Injection 		CVE-2004-1925 2017-07-11 10:31 2004-04-12 Show GitHub Exploit DB Packet Storm
269346 - tiki tikiwiki_cms\/groupware Directory traversal vulnerability in the map feature (tiki-map.phtml) in Tiki CMS/Groupware (TikiWiki) 1.8.1 and earlier allows remote attackers to determine the existence of arbitrary files via .. (… CWE-22
Path Traversal 		CVE-2004-1927 2017-07-11 10:31 2004-04-11 Show GitHub Exploit DB Packet Storm
269347 - tiki tikiwiki_cms\/groupware The image upload feature in Tiki CMS/Groupware (TikiWiki) 1.8.1 and earlier allows remote attackers to upload and possibly execute arbitrary files via the img/wiki_up URL. CWE-20
 Improper Input Validation  		CVE-2004-1928 2017-07-11 10:31 2004-04-12 Show GitHub Exploit DB Packet Storm
269348 - francisco_burzi php-nuke SQL injection vulnerability in the bblogin function in functions.php in PHP-Nuke 6.x through 7.2 allows remote attackers to bypass authentication and gain access by injecting base64-encoded SQL code … NVD-CWE-Other
CVE-2004-1929 2017-07-11 10:31 2004-04-13 Show GitHub Exploit DB Packet Storm
269349 - francisco_burzi php-nuke Cross-site scripting (XSS) vulnerability in the cookiedecode function in mainfile.php for PHP-Nuke 6.x through 7.2, when themes are used, allows remote attackers to inject arbitrary web script or HTM… NVD-CWE-Other
CVE-2004-1930 2017-07-11 10:31 2004-04-12 Show GitHub Exploit DB Packet Storm
269350 - francisco_burzi php-nuke SQL injection vulnerability in (1) auth.php and (2) admin.php in PHP-Nuke 6.x through 7.2 allows remote attackers to execute arbitrary SQL code and create an administrator account via base64-encoded … NVD-CWE-Other
CVE-2004-1932 2017-07-11 10:31 2004-04-12 Show GitHub Exploit DB Packet Storm