Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 22, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
249921 7.5 危険 commodityrentals - DVD Rentals Script における任意の SQL コマンドを実行される脆弱性 CWE-89
SQLインジェクション 		CVE-2010-4770 2012-03-27 18:42 2011-03-23 Show GitHub Exploit DB Packet Storm
249922 7.5 危険 Janguo
Joomla!		 - Joomla! の Jimtawl コンポーネントにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2010-4769 2012-03-27 18:42 2011-03-23 Show GitHub Exploit DB Packet Storm
249923 6 警告 OTRS プロジェクト - OTRS における待ち行列アクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-4768 2012-03-27 18:42 2011-03-18 Show GitHub Exploit DB Packet Storm
249924 5 警告 OTRS プロジェクト - OTRS におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2010-4767 2012-03-27 18:42 2011-03-18 Show GitHub Exploit DB Packet Storm
249925 4.3 警告 OTRS プロジェクト - OTRS の AgentTicketForward 機能における重要な画像情報を取得される脆弱性 CWE-20
不適切な入力確認 		CVE-2010-4766 2012-03-27 18:42 2011-03-18 Show GitHub Exploit DB Packet Storm
249926 4.9 警告 OTRS プロジェクト - OTRS の Kernel::System::Main::FileWrite メソッドにおける icketCounter.log のデータを破損される脆弱性 CWE-362
競合状態 		CVE-2010-4765 2012-03-27 18:42 2011-03-18 Show GitHub Exploit DB Packet Storm
249927 5 警告 OTRS プロジェクト - OTRS における電子メール通信をなりすまされる脆弱性 CWE-255
証明書・パスワード管理 		CVE-2010-4764 2012-03-27 18:42 2011-03-18 Show GitHub Exploit DB Packet Storm
249928 6.5 警告 OTRS プロジェクト - OTRS の ACL 顧客ステータスチケットタイプ設定における ACL 制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-4763 2012-03-27 18:42 2011-03-18 Show GitHub Exploit DB Packet Storm
249929 3.5 注意 OTRS プロジェクト - OTRS のリッチテキストエディタコンポーネントにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-4762 2012-03-27 18:42 2011-03-18 Show GitHub Exploit DB Packet Storm
249930 4 警告 OTRS プロジェクト - OTRS の顧客インターフェースチケット印刷ダイアログにおける重要な情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-4761 2012-03-27 18:42 2011-03-18 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 22, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
317851 - ethereal_group ethereal The SPNEGO dissector in Ethereal 0.9.12 and earlier allows remote attackers to cause a denial of service (crash) via an invalid ASN.1 value. NVD-CWE-Other
CVE-2003-0430 2024-02-14 10:17 2003-07-24 Show GitHub Exploit DB Packet Storm
317852 - ethereal_group ethereal The tvb_get_nstringz0 function in Ethereal 0.9.12 and earlier does not properly handle a zero-length buffer size, with unknown consequences. NVD-CWE-Other
CVE-2003-0431 2024-02-14 10:17 2003-07-24 Show GitHub Exploit DB Packet Storm
317853 - ethereal_group ethereal Ethereal 0.9.12 and earlier does not handle certain strings properly, with unknown consequences, in the (1) BGP, (2) WTP, (3) DNS, (4) 802.11, (5) ISAKMP, (6) WSP, (7) CLNP, (8) ISIS, and (9) RMI dis… NVD-CWE-Other
CVE-2003-0432 2024-02-14 10:17 2003-07-24 Show GitHub Exploit DB Packet Storm
317854 - ethereal_group ethereal Multiple integer overflow vulnerabilities in Ethereal 0.9.11 and earlier allow remote attackers to cause a denial of service and possibly execute arbitrary code via the (1) Mount and (2) PPP dissecto… NVD-CWE-Other
CVE-2003-0357 2024-02-14 10:17 2003-06-9 Show GitHub Exploit DB Packet Storm
317855 - miniportal miniportal admin.php in miniPortail allows remote attackers to gain administrative privileges by setting the miniPortailAdmin cookie to an "adminok" value. NVD-CWE-Other
CVE-2003-0272 2024-02-14 10:17 2003-05-27 Show GitHub Exploit DB Packet Storm
317856 - battleaxe_software bttlxeforum SQL injection vulnerability in bttlxeForum 2.0 beta 3 and earlier allows remote attackers to bypass authentication via the (1) username and (2) password fields, and possibly other fields. NVD-CWE-Other
CVE-2003-0215 2024-02-14 10:17 2003-05-12 Show GitHub Exploit DB Packet Storm
317857 - the_cacti_group cacti graphs.php in Cacti before 0.6.8 allows remote authenticated Cacti administrators to execute arbitrary commands via shell metacharacters in the title during edit mode. NVD-CWE-Other
CVE-2002-1477 2024-02-14 10:17 2003-04-22 Show GitHub Exploit DB Packet Storm
317858 - the_cacti_group cacti Cacti before 0.6.8 allows attackers to execute arbitrary commands via the "Data Input" option in console mode. NVD-CWE-Other
CVE-2002-1478 2024-02-14 10:17 2003-04-22 Show GitHub Exploit DB Packet Storm
317859 - the_cacti_group cacti Cacti before 0.6.8 stores a MySQL username and password in plaintext in config.php, which has world-readable permissions, which allows local users to modify databases as the Cacti user and possibly g… NVD-CWE-Other
CVE-2002-1479 2024-02-14 10:17 2003-04-22 Show GitHub Exploit DB Packet Storm
317860 - endity.com shoutbox Cross-site scripting vulnerability in board.php of endity.com ShoutBOX allows remote attackers to inject arbitrary HTML into the shoutbox page via the site parameter. NVD-CWE-Other
CVE-2002-1429 2024-02-14 10:17 2003-04-11 Show GitHub Exploit DB Packet Storm