Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 23, 2025, 6:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
198021 7.5 危険 aeries - Eagle Software ABI の GradebookStuScores.aspSQL における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-0942 2012-06-26 15:55 2008-02-25 Show GitHub Exploit DB Packet Storm
198022 4.3 警告 aeries - Eagle Software ABI におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-0941 2012-06-26 15:55 2008-02-25 Show GitHub Exploit DB Packet Storm
198023 7.2 危険 freshmeat
Debian		 - Debian GNU/Linux の XWine の w_editeur.c における任意のファイルを上書きされる脆弱性 CWE-59
リンク解釈の問題 		CVE-2008-0930 2012-06-26 15:55 2008-02-26 Show GitHub Exploit DB Packet Storm
198024 7.5 危険 becontent - beContent の news.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-0921 2012-06-26 15:55 2008-02-22 Show GitHub Exploit DB Packet Storm
198025 7.5 危険 astats
Joomla!		 - Joomla! の astatspro コンポーネントの includes/count_dl_or_link.inc.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-0918 2012-06-26 15:55 2008-02-22 Show GitHub Exploit DB Packet Storm
198026 7.5 危険 エフ・セキュア - 複数の F-Secure アンチウイルス製品におけるマルウェアを回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-0910 2012-06-26 15:55 2008-02-22 Show GitHub Exploit DB Packet Storm
198027 7.8 危険 bea systems - BEA Plumtree Collaboration SP2 における任意のファイルを読まれる脆弱性 CWE-200
情報漏えい 		CVE-2008-0904 2012-06-26 15:55 2008-02-22 Show GitHub Exploit DB Packet Storm
198028 4.9 警告 bea systems - BEA WebLogic Portal MP1 におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-0896 2012-06-26 15:55 2008-02-22 Show GitHub Exploit DB Packet Storm
198029 6.8 警告 アップル - Apple Safari における重要なメモリコンテンツを取得される脆弱性 CWE-DesignError
CVE-2008-0894 2012-06-26 15:55 2008-02-21 Show GitHub Exploit DB Packet Storm
198030 7.5 危険 BEAシステムズ - BEA WebLogic Portal Maintenance Pack 2 におけるセッションを傍受される脆弱性 CWE-59
リンク解釈の問題 		CVE-2008-0870 2012-06-26 15:55 2008-02-20 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 23, 2025, 5:11 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
269511 - nullsoft winamp Winamp 3.0 allows remote attackers to cause a denial of service (crash) via .b4s file with a file: argument to the Playstring parameter that contains MS-DOS device names such as aux. NVD-CWE-Other
CVE-2003-1274 2017-07-11 10:29 2003-12-31 Show GitHub Exploit DB Packet Storm
269512 - - - Sambar Server before 6.0 beta 6 allows remote attackers to obtain sensitive information via direct requests to the default scripts (1) environ.pl and (2) testcgi.exe. NVD-CWE-Other
CVE-2003-1284 2017-07-11 10:29 2003-12-31 Show GitHub Exploit DB Packet Storm
269513 - sambar sambar_server Multiple cross-site scripting (XSS) vulnerabilities in Sambar Server before 6.0 beta 6 allow remote attackers to inject arbitrary web script or HTML via the query string to (1) isapi/testisa.dll, (2)… NVD-CWE-Other
CVE-2003-1285 2017-07-11 10:29 2003-12-31 Show GitHub Exploit DB Packet Storm
269514 - sambar sambar_server HTTP Proxy in Sambar Server before 6.0 beta 6, when security.ini lacks a 127.0.0.1 proxydeny entry, allows remote attackers to send proxy HTTP requests to the Sambar Server's administrative interface… NVD-CWE-Other
CVE-2003-1286 2017-07-11 10:29 2003-12-31 Show GitHub Exploit DB Packet Storm
269515 - sambar sambar_server Sambar Server before 6.0 beta 3 allows attackers with physical access to execute arbitrary code via a request with an MS-DOS device name such as com1.pl, con.pl, or aux.pl, which causes Perl to read … NVD-CWE-Other
CVE-2003-1287 2017-07-11 10:29 2003-12-31 Show GitHub Exploit DB Packet Storm
269516 - microsoft windows_nt The default setting for the Winlogon key entry ShutdownWithoutLogon in Windows NT allows users with physical access to shut down a Windows NT system without logging in. NVD-CWE-Other
CVE-1999-0593 2017-07-11 10:29 1999-01-1 Show GitHub Exploit DB Packet Storm
269517 - - - The netstat service is running, which provides sensitive information to remote attackers. NVD-CWE-Other
CVE-1999-0650 2017-07-11 10:29 1999-01-1 Show GitHub Exploit DB Packet Storm
269518 - linux linux_kernel The ugidd RPC interface, by design, allows remote attackers to enumerate valid usernames by specifying arbitrary UIDs that ugidd maps to local user and group names. CWE-16
Configuration 		CVE-1999-0656 2017-07-11 10:29 1999-01-1 Show GitHub Exploit DB Packet Storm
269519 - linux linux_kernel This Common Vulnerabilities and Exposures (CVE) entry is a configuration issue and not a software flaw. As such, it doesn’t fit in the CVE software flaw list. The Common Vulnerability Scoring System … CWE-16
Configuration 		CVE-1999-0656 2017-07-11 10:29 1999-01-1 Show GitHub Exploit DB Packet Storm
269520 - hp hp-ux Buffer overflow in chfn command in HP-UX 9.X through 10.20 allows local users to gain privileges via a long command line argument. NVD-CWE-Other
CVE-1999-1089 2017-07-11 10:29 1996-12-13 Show GitHub Exploit DB Packet Storm