Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 16, 2025, 6:05 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
197831 7.5 危険 focus-sis - Focus/SIS の modules/Discipline/StudentFieldBreakdown.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション
CVE-2007-4942 2012-06-26 15:54 2007-09-18 Show GitHub Exploit DB Packet Storm
197832 5 警告 comscripts - CS Guestbook における admin 名および MD5 パスワードハッシュを取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2007-4937 2012-06-26 15:54 2007-09-18 Show GitHub Exploit DB Packet Storm
197833 4.3 警告 アクシスコミュニケーションズ - AXIS カメラ におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2007-4930 2012-06-26 15:54 2007-09-18 Show GitHub Exploit DB Packet Storm
197834 4.3 警告 アクシスコミュニケーションズ - AXIS カメラにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2007-4929 2012-06-26 15:54 2007-09-18 Show GitHub Exploit DB Packet Storm
197835 4.9 警告 アクシスコミュニケーションズ - AXIS カメラにおける重要な情報を取得される脆弱性 CWE-310
暗号の問題
CVE-2007-4928 2012-06-26 15:54 2007-09-18 Show GitHub Exploit DB Packet Storm
197836 3.5 注意 アクシスコミュニケーションズ - AXIS カメラの axis-cgi/buffer/command.cgi におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2007-4927 2012-06-26 15:54 2007-09-18 Show GitHub Exploit DB Packet Storm
197837 9.3 危険 アクシスコミュニケーションズ - AXIS カメラにおける重要な情報を取得される脆弱性 CWE-310
暗号の問題
CVE-2007-4926 2012-06-26 15:54 2007-09-18 Show GitHub Exploit DB Packet Storm
197838 7.5 危険 ewire - ePC の ewirepcfunctions.php の ewirePC_Decrypt 関数における任意のコマンドを実行される脆弱性 CWE-20
不適切な入力確認
CVE-2007-4925 2012-06-26 15:54 2007-09-18 Show GitHub Exploit DB Packet Storm
197839 7.5 危険 ajax - Ajax File Browser の in _includes/settings.inc.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション
CVE-2007-4921 2012-06-26 15:54 2007-09-17 Show GitHub Exploit DB Packet Storm
197840 7.5 危険 gelatocms - Gelato の classes/gelato.class.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2007-4918 2012-06-26 15:54 2007-09-17 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 16, 2025, 4:15 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
270241 - sendpage sendpage.pl Sendpage.pl allows remote attackers to execute arbitrary commands via a message containing shell metacharacters. NVD-CWE-Other
CVE-2001-0930 2016-10-18 11:13 2001-11-28 Show GitHub Exploit DB Packet Storm
270242 - cooolsoft powerftp Cooolsoft PowerFTP Server 2.03 allows remote attackers to list the contents of arbitrary drives via a ls (LIST) command that includes the drive letter as an argument, e.g. "ls C:". NVD-CWE-Other
CVE-2001-0933 2016-10-18 11:13 2001-11-28 Show GitHub Exploit DB Packet Storm
270243 - cooolsoft powerftp Cooolsoft PowerFTP Server 2.03 allows remote attackers to obtain the physical path of the server root via the pwd command, which lists the full pathname. NVD-CWE-Other
CVE-2001-0934 2016-10-18 11:13 2001-11-28 Show GitHub Exploit DB Packet Storm
270244 - matt_wright pgpmail.pl PGPMail.pl 1.31 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) recipient or (2) pgpuserid parameters. NVD-CWE-Other
CVE-2001-0937 2016-10-18 11:13 2001-11-30 Show GitHub Exploit DB Packet Storm
270245 - persits aspupload Directory traversal vulnerability in AspUpload 2.1, in certain configurations, allows remote attackers to upload and read arbitrary files, and list arbitrary directories, via a .. (dot dot) in the Fi… NVD-CWE-Other
CVE-2001-0938 2016-10-18 11:13 2001-11-30 Show GitHub Exploit DB Packet Storm
270246 - khaled_mardam-bey mirc DDE in mIRC allows local users to launch applications under another user's account via a DDE message that executes a command, which may be executed by the other user's process. NVD-CWE-Other
CVE-2001-0944 2016-10-18 11:13 2001-12-2 Show GitHub Exploit DB Packet Storm
270247 - microsoft outlook_express Buffer overflow in Outlook Express 5.0 through 5.02 for Macintosh allows remote attackers to cause a denial of service via an e-mail message that contains a long line. NVD-CWE-Other
CVE-2001-0945 2016-10-18 11:13 2001-12-3 Show GitHub Exploit DB Packet Storm
270248 - oracle database_server Unknown vulnerability in Oracle Label Security in Oracle 8.1.7 and 9.0.1, when audit functionality, SET_LABEL, or SQL*Predicate is being used, allows local users to gain additional access. NVD-CWE-Other
CVE-2001-0831 2016-10-18 11:12 2001-12-6 Show GitHub Exploit DB Packet Storm
270249 - oracle database_server Vulnerability in Oracle 8.0.x through 9.0.1 on Unix allows local users to overwrite arbitrary files, possibly via a symlink attack or incorrect file permissions in (1) the ORACLE_HOME/rdbms/log direc… NVD-CWE-Other
CVE-2001-0832 2016-10-18 11:12 2001-12-6 Show GitHub Exploit DB Packet Storm
270250 - ikonboard.com ikonboard Directory traversal vulnerability in Search.cgi in Ikonboard ib219 and earlier allows remote attackers to overwrite files and gain privileges via .. (dot dot) sequences in the amembernamecookie cooki… NVD-CWE-Other
CVE-2001-0841 2016-10-18 11:12 2001-12-6 Show GitHub Exploit DB Packet Storm