Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Feb. 3, 2025, 1:14 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
205551	4.3	警告	Ventics	-	Auto CMS の autocms.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-4882	2012-01-19 11:06	2011-10-7	Show	GitHub Exploit DB Packet Storm

205552	6.8	警告	ApPHP	-	ApPHP Calendar の calendar.class.php におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2010-4881	2012-01-19 10:33	2011-10-7	Show	GitHub Exploit DB Packet Storm

205553	4.3	警告	ApPHP	-	ApPHP Calendar の calendar.class.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-4880	2012-01-19 10:33	2011-10-7	Show	GitHub Exploit DB Packet Storm

205554	7.5	危険	Hinnendahl	-	Kontakt Formular の formmailer.php における任意の PHP コードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-4878	2012-01-19 10:32	2011-10-7	Show	GitHub Exploit DB Packet Storm

205555	4.3	警告	InsaneVisions	-	OneCMS の index.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-4877	2012-01-19 10:31	2011-10-7	Show	GitHub Exploit DB Packet Storm

205556	7.5	危険	got milk	-	mBlogger の viewpost.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4876	2012-01-19 10:30	2011-10-7	Show	GitHub Exploit DB Packet Storm

205557	4.3	警告	Xondie	-	WordPress 用 Vodpod Video Gallery プラグインにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-4875	2012-01-19 10:30	2011-10-7	Show	GitHub Exploit DB Packet Storm

205558	4.3	警告	NinkoBB	-	NinkoBB の users.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-4874	2012-01-19 10:28	2011-10-7	Show	GitHub Exploit DB Packet Storm

205559	4.3	警告	WeBid Support	-	WeBid におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-4873	2012-01-19 10:27	2011-10-7	Show	GitHub Exploit DB Packet Storm

205560	7.5	危険	PilotCart	-	ASPilot Pilot Cart の newsroom.asp における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4872	2012-01-19 10:27	2011-10-7	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:Feb. 8, 2025, 4:10 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
269521	-	symantec	firewall_vpn_appliance_100 firewall_vpn_appliance_200 firewall_vpn_appliance_200r gateway_security nexland_isb_soho_firewall_appliance nexland_pro100_firewall_appliance nexland_pro4…	Symantec Enterprise Firewall/VPN Appliances 100, 200, and 200R running firmware before 1.63 allow remote attackers to cause a denial of service (device freeze) via a fast UDP port scan on the WAN int…	NVD-CWE-Other	CVE-2004-1472	2017-07-11 10:31	2004-12-31	Show	GitHub Exploit DB Packet Storm

269522	-	symantec	firewall_vpn_appliance_100 firewall_vpn_appliance_200 firewall_vpn_appliance_200r gateway_security_320 gateway_security_360 gateway_security_360r nexland_isb_soho_firewall_appliance…	Symantec Enterprise Firewall/VPN Appliances 100, 200, and 200R running firmware before 1.63 and Gateway Security 320, 360, and 360R running firmware before 622 allow remote attackers to bypass filter…	NVD-CWE-Other	CVE-2004-1473	2017-07-11 10:31	2004-12-31	Show	GitHub Exploit DB Packet Storm

269523	-	symantec	firewall_vpn_appliance_100 firewall_vpn_appliance_200 firewall_vpn_appliance_200r gateway_security_320 gateway_security_360 gateway_security_360r nexland_isb_soho_firewall_appliance…	Symantec Enterprise Firewall/VPN Appliances 100, 200, and 200R running firmware before 1.63 and Gateway Security 320, 360, and 360R running firmware before 622 uses a default read/write SNMP communit…	NVD-CWE-Other	CVE-2004-1474	2017-07-11 10:31	2004-12-31	Show	GitHub Exploit DB Packet Storm

269524	-	xine	xine xine-lib	Multiple stack-based buffer overflows in xine-lib 1-rc2 through 1-rc5 allow attackers to execute arbitrary code via (1) long VideoCD vcd:// MRLs or (2) long subtitle lines.	NVD-CWE-Other	CVE-2004-1475	2017-07-11 10:31	2004-12-31	Show	GitHub Exploit DB Packet Storm

269525	-	xine suse	xine xine-lib suse_linux	Stack-based buffer overflow in the VideoCD (VCD) code in xine-lib 1-rc2 through 1-rc5, as derived from libcdio, allows attackers to execute arbitrary code via a VideoCD with an unterminated disk labe…	NVD-CWE-Other	CVE-2004-1476	2017-07-11 10:31	2004-12-31	Show	GitHub Exploit DB Packet Storm

269526	-	macromedia	jrun	Cross-site scripting (XSS) vulnerability in the Management Console in JRun 4.0 allows remote attackers to execute arbitrary web script or HTML and possibly hijack a user's session.	NVD-CWE-Other	CVE-2004-1477	2017-07-11 10:31	2004-12-31	Show	GitHub Exploit DB Packet Storm

269527	-	hitachi macromedia	cosminexus_enterprise cosminexus_server coldfusion jrun	JRun 4.0 does not properly generate and handle the JSESSIONID, which allows remote attackers to perform a session fixation attack and hijack a user's HTTP session.	NVD-CWE-Other	CVE-2004-1478	2017-07-11 10:31	2004-12-31	Show	GitHub Exploit DB Packet Storm

269528	-	hp	storageworks_command_view	Unknown vulnerability in the management station in HP StorageWorks Command View XP 1.8B and earlier allows remote attackers to bypass access restrictions.	NVD-CWE-Other	CVE-2004-1480	2017-07-11 10:31	2004-12-31	Show	GitHub Exploit DB Packet Storm

269529	-	bnc	bnc	The sbuf_getmsg function in BNC incorrectly handles backspace characters, which could allow remote attackers to bypass authentication and gain access to arbitrary scripts.	NVD-CWE-Other	CVE-2004-1482	2017-07-11 10:31	2004-12-31	Show	GitHub Exploit DB Packet Storm

269530	-	symantec	clientless_vpn_gateway_4400	Multiple unknown vulnerabilities in the ActiveX and HTML file browsers in Symantec Clientless VPN Gateway 4400 Series 5.0 have unknown attack vectors and unknown impact.	NVD-CWE-Other	CVE-2004-1483	2017-07-11 10:31	2004-12-31	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed