Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 27, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
227971 5 警告 simplog - Simplog の comments.php におけるコメントを編集される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2009-4091 2012-12-20 19:28 2009-11-29 Show GitHub Exploit DB Packet Storm
227972 7.5 危険 telepark - telepark.wiki の ajax/addComment.php における任意のコードを実行される脆弱性 CWE-20
不適切な入力確認
CVE-2009-4090 2012-12-20 19:28 2009-11-29 Show GitHub Exploit DB Packet Storm
227973 5 警告 telepark - telepark.wiki における認可を回避される脆弱性 CWE-287
不適切な認証
CVE-2009-4089 2012-12-20 19:28 2009-11-29 Show GitHub Exploit DB Packet Storm
227974 6.8 警告 telepark - telepark.wiki におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2009-4088 2012-12-20 19:28 2009-11-29 Show GitHub Exploit DB Packet Storm
227975 4.3 警告 telepark - telepark.wiki の index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2009-4087 2012-12-20 19:28 2009-11-29 Show GitHub Exploit DB Packet Storm
227976 4.3 警告 puntolatinoclub - Drupal 用の Gallery Assist モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2009-4064 2012-12-20 19:28 2009-11-18 Show GitHub Exploit DB Packet Storm
227977 4.3 警告 yuriy babenko - Drupal 用の Agreement モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2009-4061 2012-12-20 19:28 2009-11-18 Show GitHub Exploit DB Packet Storm
227978 7.5 危険 telebidauctionscript - Telebid Auction Script の allauctions.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2009-4058 2012-12-20 19:28 2009-11-23 Show GitHub Exploit DB Packet Storm
227979 7.5 危険 PowerDNS - PowerDNS Recursor における DNS データを偽装される脆弱性 CWE-noinfo
情報不足
CVE-2009-4010 2012-12-20 19:28 2010-01-6 Show GitHub Exploit DB Packet Storm
227980 10 危険 PowerDNS - PowerDNS Recursor におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2009-4009 2012-12-20 19:28 2010-01-6 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 27, 2026, 4:52 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
345921 - props props Directory traversal vulnerability in glossary.php in PROPS 0.6.1 allows remote attackers to view arbitrary files via a .. (dot dot) in (1) module or (2) format variables. NVD-CWE-Other
CVE-2004-1980 2017-07-11 10:31 2004-04-30 Show GitHub Exploit DB Packet Storm
345922 - businessobjects crystal_enterprise
crystal_reports
The web interface for Crystal Reports allows remote attackers to cause a denial of service (disk exhaustion) by repeatedly requesting reports without retrieving the associated image files, which are … NVD-CWE-Other
CVE-2004-1981 2017-07-11 10:31 2004-05-2 Show GitHub Exploit DB Packet Storm
345923 - the_pax_team
gentoo
pax_linux
linux
The arch_get_unmapped_area function in mmap.c in the PaX patches for Linux kernel 2.6, when Address Space Layout Randomization (ASLR) is enabled, allows local users to cause a denial of service (infi… NVD-CWE-Other
CVE-2004-1983 2017-07-11 10:31 2004-05-2 Show GitHub Exploit DB Packet Storm
345924 - coppermine
francisco_burzi
coppermine_photo_gallery
php-nuke
Coppermine Photo Gallery 1.2.2b and 1.2.0 RC4 allows remote attackers to obtain sensitive information via a direct HTTP request to (1) phpinfo.php, (2) addpic.php, (3) config.php, (4) db_input.php, (… NVD-CWE-Other
CVE-2004-1984 2017-07-11 10:31 2004-05-2 Show GitHub Exploit DB Packet Storm
345925 - coppermine
francisco_burzi
coppermine_photo_gallery
php-nuke
Cross-site scripting (XSS) vulnerability in menu.inc.php in Coppermine Photo Gallery 1.2.2b allows remote attackers to inject arbitrary HTML or web script via the CPG_URL parameter. NVD-CWE-Other
CVE-2004-1985 2017-07-11 10:31 2004-04-30 Show GitHub Exploit DB Packet Storm
345926 - coppermine
francisco_burzi
coppermine_photo_gallery
php-nuke
Directory traversal vulnerability in modules.php in Coppermine Photo Gallery 1.2.2b and 1.2.0 RC4 allows remote attackers with administrative privileges to read arbitrary files via a .. (dot dot) in … NVD-CWE-Other
CVE-2004-1986 2017-07-11 10:31 2004-04-4 Show GitHub Exploit DB Packet Storm
345927 - coppermine
francisco_burzi
coppermine_photo_gallery
php-nuke
picmgmtbatch.inc.php in Coppermine Photo Gallery 1.2.2b and 1.2.0 RC4 allows remote attackers with administrative privileges to execute arbitrary commands via shell metacharacters in the (1) $CONFIG[… NVD-CWE-Other
CVE-2004-1987 2017-07-11 10:31 2004-04-30 Show GitHub Exploit DB Packet Storm
345928 - coppermine
francisco_burzi
coppermine_photo_gallery
php-nuke
PHP remote file inclusion vulnerability in init.inc.php in Coppermine Photo Gallery 1.2.0 RC4 allows remote attackers to execute arbitrary PHP code by modifying the CPG_M_DIR to reference a URL on a … NVD-CWE-Other
CVE-2004-1988 2017-07-11 10:31 2004-04-30 Show GitHub Exploit DB Packet Storm
345929 - coppermine
francisco_burzi
coppermine_photo_gallery
php-nuke
PHP remote file inclusion vulnerability in theme.php in Coppermine Photo Gallery 1.2.2b allows remote attackers to execute arbitrary PHP code by modifying the THEME_DIR parameter to reference a URL o… NVD-CWE-Other
CVE-2004-1989 2017-07-11 10:31 2004-04-30 Show GitHub Exploit DB Packet Storm
345930 - aldo_vargas aldos_web_server Aldo's Web Server (aweb) 1.5 allows remote attackers to gain sensitive information via an arbitrary character, which reveals the full path and the user running the aweb process, possibly due to a mal… NVD-CWE-Other
CVE-2004-1990 2017-07-11 10:31 2004-03-3 Show GitHub Exploit DB Packet Storm