Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 24, 2025, 6:02 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
197641 7.5 危険 Condor Project - Condor におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-3424 2012-06-26 16:02 2008-07-31 Show GitHub Exploit DB Packet Storm
197642 4.3 警告 Blackboard, Inc. - Blackboard Academic Suite におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2008-3421 2012-06-26 16:02 2008-07-31 Show GitHub Exploit DB Packet Storm
197643 7.5 危険 greatclone - Youtuber Clone の ugroups.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-3419 2012-06-26 16:02 2008-07-31 Show GitHub Exploit DB Packet Storm
197644 7.5 危険 fipsasp - fipsCMS light の home/index.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-3417 2012-06-26 16:02 2008-07-31 Show GitHub Exploit DB Packet Storm
197645 7.5 危険 CMScout - CMScout の common.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-3415 2012-06-26 16:02 2008-07-31 Show GitHub Exploit DB Packet Storm
197646 7.5 危険 greatclone - Greatclone GC Auction Platinum の category.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-3413 2012-06-26 16:02 2008-07-31 Show GitHub Exploit DB Packet Storm
197647 7.5 危険 ecshop - Comsenz EPShop における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-3412 2012-06-26 16:02 2008-07-31 Show GitHub Exploit DB Packet Storm
197648 10 危険 Axesstel - Axesstel AXW-D800 モデムにおける設定を変更される脆弱性 CWE-287
不適切な認証 		CVE-2008-3411 2012-06-26 16:02 2008-07-31 Show GitHub Exploit DB Packet Storm
197649 5 警告 epic games - Unreal Tournament 3 におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
CWE-399
CVE-2008-3410 2012-06-26 16:02 2008-07-31 Show GitHub Exploit DB Packet Storm
197650 7.5 危険 epic games - Unreal Tournament 3 におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2008-3409 2012-06-26 16:02 2008-07-31 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 25, 2025, 4:09 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
269941 - iplanet
netscape 		iplanet_web_server
enterprise_server 		iPlanet Web Server Enterprise Edition and Netscape Enterprise Server 4.0 and 4.1 allows remote attackers to conduct HTTP Basic Authentication via the wp-force-auth Web Publisher command, which provid… NVD-CWE-Other
CVE-2002-1654 2017-07-11 10:29 2002-12-31 Show GitHub Exploit DB Packet Storm
269942 - iplanet
netscape 		iplanet_web_server
enterprise_server 		The Web Publishing feature in Netscape Enterprise Server 3.x and iPlanet Web Server 4.x allows remote attackers to cause a denial of service (crash) via a wp-html-rend request. NVD-CWE-Other
CVE-2002-1655 2017-07-11 10:29 2002-12-31 Show GitHub Exploit DB Packet Storm
269943 - xqus x-news X-News (x_news) 1.1 and earlier allows attackers to authenticate as other users by obtaining the MD5 checksum of the password, e.g. via sniffing or the users.txt data file, and providing it in a cook… NVD-CWE-Other
CVE-2002-1656 2017-07-11 10:29 2002-12-31 Show GitHub Exploit DB Packet Storm
269944 - apache http_server Buffer overflow in htdigest in Apache 1.3.26 and 1.3.27 may allow attackers to execute arbitrary code via a long user argument. NOTE: since htdigest is normally only locally accessible and not setui… NVD-CWE-Other
CVE-2002-1658 2017-07-11 10:29 2002-12-31 Show GitHub Exploit DB Packet Storm
269945 - iatek portalapp user_profile.asp in PortalApp 2.2 allows local users to gain privileges by modifying the user_id variable. NVD-CWE-Other
CVE-2002-1659 2017-07-11 10:29 2002-12-31 Show GitHub Exploit DB Packet Storm
269946 - jelsoft vbulletin calendar.php in vBulletin before 2.2.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the command parameter. CWE-78
OS Command  		CVE-2002-1660 2017-07-11 10:29 2002-12-31 Show GitHub Exploit DB Packet Storm
269947 - leafnode leafnode The leafnode server in leafnode 1.9.20 to 1.9.29 allows remote attackers to cause a denial of service (infinite loop) when leafnode requests a cross-posted article to one group whose name is a prefix… NVD-CWE-Other
CVE-2002-1661 2017-07-11 10:29 2002-12-31 Show GitHub Exploit DB Packet Storm
269948 - mambo mambo_site_server Multiple cross-site scripting (XSS) vulnerabilities in Mambo Site Server 4.0.11 allow remote attackers to execute arbitrary script on other clients via (1) search.php and (2) the "Your name" field du… NVD-CWE-Other
CVE-2002-1662 2017-07-11 10:29 2002-12-31 Show GitHub Exploit DB Packet Storm
269949 - oracle e-business_suite Unknown vulnerability in Oracle E-Business Suite 11i.1 through 11i.6 allows remote attackers to execute unauthorized PL/SQL procedures by modifying the Oracle Applications URL. NVD-CWE-Other
CVE-2002-1666 2017-07-11 10:29 2002-12-31 Show GitHub Exploit DB Packet Storm
269950 - freebsd freebsd The virtual memory management system in FreeBSD 4.5-RELEASE and earlier does not properly check the existence of a VM object during page invalidation, which allows local users to cause a denial of se… NVD-CWE-Other
CVE-2002-1667 2017-07-11 10:29 2002-12-31 Show GitHub Exploit DB Packet Storm