Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 10, 2025, 6:04 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
198591 7.8 危険 fast browser - Fast Browser Pro における他のドメインから制限された情報にアクセスされる脆弱性 - CVE-2006-6991 2012-06-26 15:38 2007-02-8 Show GitHub Exploit DB Packet Storm
198592 7.8 危険 advanced search technologies inc. - Enigma Browser における他のドメインから制限された情報にアクセスされる脆弱性 - CVE-2006-6990 2012-06-26 15:38 2007-02-8 Show GitHub Exploit DB Packet Storm
198593 7.8 危険 flashpeak - Slim Browser における他のドメインから制限された情報へアクセスされる脆弱性 - CVE-2006-6988 2012-06-26 15:38 2007-02-8 Show GitHub Exploit DB Packet Storm
198594 5 警告 3proxy - 3proxy における資格情報を不正に取得される脆弱性 - CVE-2006-6982 2012-06-26 15:38 2007-02-8 Show GitHub Exploit DB Packet Storm
198595 5 警告 3proxy - 3proxy におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2006-6981 2012-06-26 15:38 2007-02-8 Show GitHub Exploit DB Packet Storm
198596 7.5 危険 amarok - Amarok の Magnatune コンポーネントの ruby ハンドラにおける任意のコマンドを実行される脆弱性 CWE-20
不適切な入力確認
CVE-2006-6979 2012-06-26 15:38 2007-02-8 Show GitHub Exploit DB Packet Storm
198597 4.3 警告 CKEditor Team - FCKEditorto の "Basic Toolbar Selection" におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2006-6978 2012-06-26 15:38 2007-02-8 Show GitHub Exploit DB Packet Storm
198598 4.3 警告 freetextbox - FreeTextBox の "Basic Toolbar Selection" におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2006-6977 2012-06-26 15:38 2007-02-8 Show GitHub Exploit DB Packet Storm
198599 7.5 危険 centipaid - CentiPaid の centipaid_class.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション
CVE-2006-6976 2012-06-26 15:38 2007-02-8 Show GitHub Exploit DB Packet Storm
198600 7.5 危険 bti-tracker - BtitTracker の torrents.php における SQL インジェクションの脆弱性 - CVE-2006-6972 2012-06-26 15:38 2007-02-7 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 11, 2025, 5:03 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
267941 - phpstat phpstat setup.php in phpStat 1.5 allows remote attackers to bypass authentication and gain administrator privileges by setting the $check variable. CWE-20
 Improper Input Validation 
CVE-2005-1787 2016-11-26 03:27 2005-05-27 Show GitHub Exploit DB Packet Storm
267942 - postnuke_software_foundation postnuke Cross-site scripting (XSS) vulnerability in readpmsg.php in PostNuke 0.750 allows remote attackers to inject arbitrary web script or HTML via the start parameter. CWE-79
Cross-site Scripting
CVE-2005-1778 2016-11-26 03:26 2005-05-31 Show GitHub Exploit DB Packet Storm
267943 - oracle database_server Unspecified vulnerability in the Oracle Spatial component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.3 allows remote authenticated users to affect confidentiality and integrity via u… NVD-CWE-noinfo
CVE-2009-3413 2016-11-24 04:42 2010-01-13 Show GitHub Exploit DB Packet Storm
267944 - oracle database_server Unspecified vulnerability in the Oracle Spatial component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.3 allows remote authenticated users to affect confidentiality and integrity via u… NVD-CWE-noinfo
CVE-2009-3414 2016-11-24 04:42 2010-01-13 Show GitHub Exploit DB Packet Storm
267945 - oracle jd_edwards_enterpriseone
peoplesoft_enterprise
Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.49.19 allows remote attackers to affect confidentiality and… NVD-CWE-noinfo
CVE-2009-1014 2016-11-24 04:40 2009-04-15 Show GitHub Exploit DB Packet Storm
267946 - ibm
oracle
websphere_portal
application_server
Unspecified vulnerability in the Outside In Technology component in Oracle Application Server 8.2.2 and 8.3.0 allows local users to affect confidentiality, integrity, and availability, related to HTM… NVD-CWE-noinfo
CVE-2009-1010 2016-11-23 01:23 2009-04-15 Show GitHub Exploit DB Packet Storm
267947 - oracle jd_edwards_enterpriseone
peoplesoft_enterprise
Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.49.19 allows remote attackers to affect confidentiality and… NVD-CWE-noinfo
CVE-2009-1013 2016-11-23 01:17 2009-04-15 Show GitHub Exploit DB Packet Storm
267948 - oracle database_10g
database_11g
Unspecified vulnerability in the Workspace Manager component in Oracle Database 10.2.0.4 and 11.1.0.6 allows remote authenticated users to affect confidentiality and integrity via unknown vectors, a … NVD-CWE-noinfo
CVE-2009-0978 2016-11-23 01:16 2009-04-15 Show GitHub Exploit DB Packet Storm
267949 - oracle secure_backup Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.2.0.2 allows remote attackers to affect availability via unknown vectors, a different vulnerability than CVE… NVD-CWE-noinfo
CVE-2008-5441 2016-11-23 01:16 2009-01-14 Show GitHub Exploit DB Packet Storm
267950 - oracle secure_backup Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.2.0.2 allows remote attackers to affect availability via unknown vectors, a different vulnerability than CVE… NVD-CWE-noinfo
CVE-2008-5442 2016-11-23 01:15 2009-01-14 Show GitHub Exploit DB Packet Storm