Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
200081 7.5 危険 efestech haber - EfesTECH Haber における SQL インジェクションの脆弱性 - CVE-2007-2662 2012-06-26 15:46 2007-05-14 Show GitHub Exploit DB Packet Storm
200082 7.5 危険 drumster - BlogMe の archshow.asp における SQL インジェクションの脆弱性 - CVE-2007-2661 2012-06-26 15:46 2007-05-14 Show GitHub Exploit DB Packet Storm
200083 5 警告 bugada andrea - PHP Advanced Transfer Manager (phpATM) の index.php におけるディレクトリトラバーサルの脆弱性 - CVE-2007-2659 2012-06-26 15:46 2007-05-14 Show GitHub Exploit DB Packet Storm
200084 7.5 危険 free-sa - Free-SA における任意のコードを実行される脆弱性 - CVE-2007-2652 2012-06-26 15:46 2007-05-14 Show GitHub Exploit DB Packet Storm
200085 5 警告 ClamAV - ClamAV の OLE2 パーサにおけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-2650 2012-06-26 15:46 2007-05-14 Show GitHub Exploit DB Packet Storm
200086 9.3 危険 clever components - comparerax.ocx におけるスタックベースのバッファオーバーフローの脆弱性 - CVE-2007-2648 2012-06-26 15:46 2007-05-14 Show GitHub Exploit DB Packet Storm
200087 10 危険 efilecabinet - eFileCabinet におけるインターフェースの制限部分へアクセスされる脆弱性 - CVE-2007-2638 2012-06-26 15:46 2007-05-13 Show GitHub Exploit DB Packet Storm
200088 6.8 警告 agner fog - aForum の common/errormsg.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-2634 2012-06-26 15:46 2007-05-13 Show GitHub Exploit DB Packet Storm
200089 6.5 警告 activecampaign - FCKeditor モジュールの filemanager/browser/default/connectors/php/config.php における .php4 および .php5 をアップロードされる脆弱性 - CVE-2007-2630 2012-06-26 15:46 2007-05-2 Show GitHub Exploit DB Packet Storm
200090 7.8 危険 Bradford Networks - Bradford CampusManager Network Control Application Server における重要な情報を取得される脆弱性 - CVE-2007-2629 2012-06-26 15:46 2007-05-11 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 8, 2025, 4:10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
268371 - phlymail phlymail Cross-site scripting (XSS) vulnerability in PHlyMail before 3.3 Beta1 allows remote attackers to inject arbitrary Javascript via unknown attack vectors. NVD-CWE-Other
CVE-2005-4666 2017-07-20 10:29 2005-12-31 Show GitHub Exploit DB Packet Storm
268372 - citypost php_lnkx Cross-site scripting (XSS) vulnerability in message.php in CityPost Automated Link Exchange (LNKX) allows remote attackers to inject arbitrary web script or HTML via the msg parameter. NVD-CWE-Other
CVE-2005-4670 2017-07-20 10:29 2005-12-31 Show GitHub Exploit DB Packet Storm
268373 - citypost simple_php_upload Cross-site scripting (XSS) vulnerability in simple-upload-53.php in CityPost Simple PHP Upload 5.3 allows remote attackers to inject arbitrary web script or HTML via the message parameter. NVD-CWE-Other
CVE-2005-4671 2017-07-20 10:29 2005-12-31 Show GitHub Exploit DB Packet Storm
268374 - citypost simple_image_editor Cross-site scripting (XSS) vulnerability in image-editor-52/index.php in CityPost Simple Image-Editor 0.52 allows remote attackers to inject arbitrary web script or HTML via the (1) m1, (2) m2, (3) m… NVD-CWE-Other
CVE-2005-4672 2017-07-20 10:29 2005-12-31 Show GitHub Exploit DB Packet Storm
268375 - complete_php_counter complete_php_counter Multiple SQL injection vulnerabilities in list.php in Complete PHP Counter allow remote attackers to execute arbitrary SQL commands via the (1) c or (2) s parameter. NVD-CWE-Other
CVE-2005-4674 2017-07-20 10:29 2005-12-31 Show GitHub Exploit DB Packet Storm
268376 - complete_php_counter complete_php_counter Cross-site scripting (XSS) vulnerability in list.php in Complete PHP Counter allows remote attackers to inject arbitrary web script or HTML via the c parameter. NVD-CWE-Other
CVE-2005-4675 2017-07-20 10:29 2005-12-31 Show GitHub Exploit DB Packet Storm
268377 - andreas_huggel exiv2 Buffer overflow in Andreas Huggel Exiv2 before 0.9 does not null terminate strings before calling the sscanf function, which allows remote attackers to cause a denial of service (application crash) v… NVD-CWE-Other
CVE-2005-4676 2017-07-20 10:29 2005-12-31 Show GitHub Exploit DB Packet Storm
268378 - audienceview audienceview Cross-site scripting (XSS) vulnerability in error.asp in AudienceView allows remote attackers to inject arbitrary web script or HTML via the TSerrorMessage parameter. NOTE: the provenance of this in… NVD-CWE-Other
CVE-2005-4682 2017-07-20 10:29 2005-12-31 Show GitHub Exploit DB Packet Storm
268379 - padl_software migrationtools PADL MigrationTools 46, when a failure occurs, stores contents of /etc/shadow in a world-readable /tmp/nis.$$.ldif file, and possibly other sensitive information in other temporary files, which are n… NVD-CWE-Other
CVE-2005-4683 2017-07-20 10:29 2005-12-31 Show GitHub Exploit DB Packet Storm
268380 - kde konqueror Konqueror can associate a cookie with multiple domains when the DNS resolver has a non-root domain in its search list, which allows remote attackers to trick a user into accepting a cookie for a host… NVD-CWE-Other
CVE-2005-4684 2017-07-20 10:29 2005-12-31 Show GitHub Exploit DB Packet Storm