Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 31, 2025, 4:03 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
201991 7.5 危険 Sympa - Sympa の投稿保管庫管理ページにおける任意の投稿保管庫を操作される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-2352 2012-06-4 14:27 2012-05-31 Show GitHub Exploit DB Packet Storm
201992 5 警告 Canonical - Ubuntu で使用される Update Manager におけるレポジトリ証明書を読まれる脆弱性 CWE-200
情報漏えい
CVE-2012-0949 2012-06-4 14:03 2012-05-31 Show GitHub Exploit DB Packet Storm
201993 10 危険 Mozilla Foundation - 複数の Mozilla 製品におけるサービス運用妨害 (DoS) の脆弱性 CWE-DesignError
CVE-2012-0444 2012-06-1 14:19 2012-01-31 Show GitHub Exploit DB Packet Storm
201994 7.8 危険 シスコシステムズ - Cisco ASR 9000 および CRS シリーズの Cisco IOS XR におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2012-2488 2012-06-1 14:14 2012-05-30 Show GitHub Exploit DB Packet Storm
201995 6.8 警告 TYPO3 Association - TYPO3 の fileDenyPattern 機能におけるアクセス制限を回避される脆弱性 CWE-20
不適切な入力確認
CVE-2010-5099 2012-06-1 13:50 2010-12-16 Show GitHub Exploit DB Packet Storm
201996 2.6 注意 株式会社バンダイナムコゲームス - 魔法少女まどか☆マギカ iP for Android における情報漏えいの脆弱性 CWE-200
情報漏えい
CVE-2012-2630 2012-06-1 12:04 2012-06-1 Show GitHub Exploit DB Packet Storm
201997 7.5 危険 Segue Project - Segue における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2012-1255 2012-06-1 12:03 2012-06-1 Show GitHub Exploit DB Packet Storm
201998 4.3 警告 Segue Project - Segue におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-1254 2012-06-1 12:02 2012-06-1 Show GitHub Exploit DB Packet Storm
201999 7.5 危険 Jaow - Jaow の add_ons.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2012-2952 2012-05-31 14:52 2012-05-29 Show GitHub Exploit DB Packet Storm
202000 7.5 危険 Plogger Project - Plogger の plog-rss.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2012-2951 2012-05-31 14:52 2012-05-29 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Feb. 2, 2025, 4:09 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
269651 - myproxy myproxy MyProxy 6.58 allows remote authenticated users in the Users Tab to connect to arbitrary hosts from the MyProxy server, possibly bypassing access restrictions, by connecting to the proxy and issuing a… NVD-CWE-Other
CVE-2004-2481 2017-07-11 10:31 2004-12-31 Show GitHub Exploit DB Packet Storm
269652 - microsoft outlook Microsoft Outlook 2000 and 2003, when configured to use Microsoft Word 2000 or 2003 as the e-mail editor and when forwarding e-mail, does not properly handle an opening OBJECT tag that does not have … NVD-CWE-Other
CVE-2004-2482 2017-07-11 10:31 2004-12-31 Show GitHub Exploit DB Packet Storm
269653 - kerio winroute_firewall Kerio WinRoute Firewall before 6.0.9 uses information from PTR queries in response to A queries, which allows remote attackers to poison the DNS cache or cause a denial of service (connection loss). NVD-CWE-Other
CVE-2004-2483 2017-07-11 10:31 2004-12-31 Show GitHub Exploit DB Packet Storm
269654 - php_gift_registry phpgiftreg Cross-site scripting (XSS) vulnerability in PHP Gift Registry 1.3.5 and earlier allows remote attackers to inject arbitrary web script or HTML via the message parameter to (1) event.php or (2) index.… NVD-CWE-Other
CVE-2004-2484 2017-07-11 10:31 2004-12-31 Show GitHub Exploit DB Packet Storm
269655 - php_live php_live Unspecified vulnerability in PHP Live! before 2.8.2, due to a "major security problem," allows remote attackers to include arbitrary files and directories via unspecified attack vectors. NVD-CWE-Other
CVE-2004-2485 2017-07-11 10:31 2004-12-31 Show GitHub Exploit DB Packet Storm
269656 - ibm informix_dynamic_server Format string vulnerability in IBM Informix Dynamic Server (IDS) before 9.40.xC3 allows local users to execute arbitrary code via a modified INFORMIXDIR environment variable that points to a file wit… NVD-CWE-Other
CVE-2004-2489 2017-07-11 10:31 2004-12-31 Show GitHub Exploit DB Packet Storm
269657 - ibm informix_dynamic_server
informix_extended_parallel_server
Buffer overflow in IBM Informix Dynamic Server (IDS) 9.40.xC1 and 9.40.xC2 allows local users to execute arbitrary code via a long GL_PATH environment variable. NVD-CWE-Other
CVE-2004-2490 2017-07-11 10:31 2004-12-31 Show GitHub Exploit DB Packet Storm
269658 - hitachi groupmax_world_wide_web_desktop Cross-site scripting (XSS) vulnerability in Groupmax World Wide Web (GmaxWWW) Desktop 5, 6, and Desktop for Jichitai 6, allows remote attackers to inject arbitrary web script or HTML via the QUERY pa… NVD-CWE-Other
CVE-2004-2492 2017-07-11 10:31 2004-12-31 Show GitHub Exploit DB Packet Storm
269659 - hitachi groupmax_world_wide_web
groupmax_world_wide_web_desktop
Directory traversal vulnerability in Groupmax World Wide Web (GmaxWWW) 2 and 3, and Desktop 5, 6, and Desktop for Jichitai allows remote authenticated users to read arbitrary .html files via the temp… NVD-CWE-Other
CVE-2004-2493 2017-07-11 10:31 2004-12-31 Show GitHub Exploit DB Packet Storm
269660 - - - Cross-site scripting (XSS) vulnerability in _error in Ability Mail Server 1.18 allows remote attackers to inject arbitrary web script or HTML via the erromsg parameter. NVD-CWE-Other
CVE-2004-2494 2017-07-11 10:31 2004-12-31 Show GitHub Exploit DB Packet Storm