NVD脆弱性情報トップ

検索メニュー表示

ベンダー名
プロダクト・サービス名
タイトル
CRITICAL
HIGH
MEDIUM
LOW
CVE
CWE
公表日降順
更新日降順
表示数

NVD（National Vulnerability Database）で管理されている脆弱性の一覧を検索することが出来ます。
JVN（Japan Vulnerability Note）より先に脆弱性情報が更新される事が多いため、JVNに未記載の脆弱性が更新されている場合があります。

JVN（Japan Vulnerability Note）に関連した脆弱性がある場合は詳細画面で情報を表示します。

CWEで検索する場合は、CWE概要を参照して、CWE番号を確認してください。

CRITICAL
HIGH
MEDIUM
LOW

更新日:2024年12月29日4:05

No	CVSS	レベル攻撃区分	ベンダー名	プロダクト名	タイトル	CWE	CVE	更新日	公表日	影響表示	Exploit PoC 検索
273501	7.5	HIGH	mroovca	mroovca_stats	Unspecified vulnerability in mroovca stats (mroovcastats) before 0.4.5b has unknown attack vectors and impact, related to cookies.	NVD-CWE-Other	CVE-2005-4692	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

273502	5.0	MEDIUM	gaim-encryption	gaim-encryption	Gaim-Encryption 2.38-1 on Debian Linux allows remote attackers to cause a denial of service (crash) via a crafted message from an ICQ buddy, possibly involving the GE_received_key function in keys.c.	NVD-CWE-Other	CVE-2005-4693	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

273503	6.4	MEDIUM	ipbproarcade	ipbproarcade	SQL injection vulnerability in the favorites module in index.php in IPBProArcade 2.5.2 allows remote attackers to inject arbitrary SQL commands via the gameid parameter. NOTE: the provenance of this…	NVD-CWE-Other	CVE-2005-4702	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

273504	5.0	MEDIUM	bea	weblogic_server	Unspecified vulnerability in BEA WebLogic Server and WebLogic Express 8.1 through SP3, 7.0 through SP6, and 6.1 through SP7, when SSL is intended to be used, causes an unencrypted protocol to be used…	NVD-CWE-Other	CVE-2005-4704	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

273505	5.0	MEDIUM	bea	weblogic_server	BEA WebLogic Server and WebLogic Express 8.1 through SP4, 7.0 through SP6, and 6.1 through SP7, when a Java client application creates an SSL connection to the server after it has already created an …	NVD-CWE-Other	CVE-2005-4705	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

273506	5.0	MEDIUM	php_handicapper	php_handicapper	CRLF injection vulnerability in process_signup.php in PHP Handicapper allows remote attackers to inject arbitrary HTTP headers via CRLF sequences in the login parameter. NOTE: the vendor has dispute…	NVD-CWE-Other	CVE-2005-4712	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

273507	5.0	MEDIUM	-	-	Hitachi TP1/Server Base and TP1/NET/Library 2 on IBM AIX allow remote attackers to (1) cause a denial of service (OpenTP1 system outage) via invalid data to a port used by a system-server process, an…	NVD-CWE-Other	CVE-2005-4716	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

273508	5.0	MEDIUM	mozilla	firefox	Mozilla Firefox 1.0.7 and earlier on Linux allows remote attackers to cause a denial of service (client crash) via an IFRAME element with a large value of the WIDTH attribute, which triggers a proble…	NVD-CWE-Other	CVE-2005-4720	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

273509	7.5	HIGH	geeklog	geeklog	Geeklog before 1.3.11sr3 allows remote attackers to bypass intended access restrictions and comment on an arbitrary story or topic by guessing the story ID.	NVD-CWE-Other	CVE-2005-4725	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

273510	5.0	MEDIUM	mute	mute	MUTE 0.4 uses improper flood protection algorithms, which allows remote attackers to obtain sensitive information (privacy leak and search result data) by controlling a drop chain neighbor that is ne…	NVD-CWE-Other	CVE-2005-4726	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

273511	4.6	MEDIUM	debian	amaya	Untrusted search path vulnerability (RPATH) in amaya 9.2.1 on Debian GNU/Linux allows local users to gain privileges via a malicious Mesa library in the /home/anand directory.	NVD-CWE-Other	CVE-2005-4728	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

273512	10.0	HIGH	pear	text_password	Unspecified vulnerability in PEAR Text_Password 1.0 has unknown impact and attack vectors, related to "problematic seeding" of the random number generator, possibly predictable seeds.	NVD-CWE-Other	CVE-2005-4730	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

273513	5.0	MEDIUM	the_php_group	pear_html_quickform_controller	The Next action in PEAR HTML_QuickForm_Controller 1.0.4 includes the SID in the URL even when session.use_only_cookies is configured, which allows remote attackers to obtain the SID via an HTTP Refer…	NVD-CWE-Other	CVE-2005-4731	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

273514	5.0	MEDIUM	the_php_group	pear_html_quickform_controller	Upgrade to version 1.0.5 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.	NVD-CWE-Other	CVE-2005-4731	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

273515	4.3	MEDIUM	tux_racer	tuxbank	Multiple cross-site scripting (XSS) vulnerabilities in index.php in Tux Racer TuxBank 0.7x and 0.8 allow remote attackers to inject arbitrary web script or HTML via the (1) name and (2) description p…	NVD-CWE-Other	CVE-2005-4732	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

273516	4.9	MEDIUM	netbsd	netbsd	NetBSD 2.0 before 20050316 and NetBSD-current before 20050112 allow local users to cause a denial of service (infinite loop and system hang) by calling the F_CLOSEM fcntl with a parameter value of 0.	NVD-CWE-Other	CVE-2005-4733	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

273517	6.4	MEDIUM	rsa	authentication_agent_for_web	Stack-based buffer overflow in IISWebAgentIF.dll in RSA Authentication Agent for Web (aka SecurID Web Agent) 5.2 and 5.3 for IIS allows remote attackers to execute arbitrary code via a long url param…	NVD-CWE-Other	CVE-2005-4734	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

273518	6.8	MEDIUM	ibm	db2_universal_database	IBM DB2 Universal Database (UDB) 810 before 8.1 FP10 allows remote authenticated users to cause a denial of service (application crash) via (1) certain equality predicates that trigger self-removal, …	NVD-CWE-Other	CVE-2005-4735	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

273519	6.8	MEDIUM	ibm	db2_universal_database	IBM DB2 Universal Database (UDB) 820 before 8.2 FP10 allows remote authenticated users to cause a denial of service (disk consumption) via a hash join (hsjn) that triggers an infinite loop in sqlri_h…	NVD-CWE-Other	CVE-2005-4736	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

273520	7.5	HIGH	ibm	db2_universal_database	IBM DB2 Universal Database (UDB) 820 before ESE AIX 5765F4100 allows remote authenticated users to cause a denial of service (CPU consumption) by "abnormally" terminating a connection, which prevents…	NVD-CWE-Other	CVE-2005-4737	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

273521	7.5	HIGH	ibm	db2_universal_database	The vulnerabilities have been fixed in Version 8 FixPak 10 (Version 8.2 FixPak 3)	NVD-CWE-Other	CVE-2005-4737	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

273522	6.5	MEDIUM	ibm	db2_universal_database	IBM DB2 Universal Database (UDB) 810 before ESE AIX 5765F4100 does not ensure that a user has execute privileges before permitting object creation based on routines, which allows remote authenticated…	NVD-CWE-Other	CVE-2005-4738	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

273523	6.8	MEDIUM	ibm	db2_universal_database	IBM DB2 Universal Database (UDB) 820 before version 8 FixPak 10 (s050811) allows remote authenticated users to cause a denial of service (application crash) by using a table function for an instance …	NVD-CWE-Other	CVE-2005-4739	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

273524	4.0	MEDIUM	-	-	IBM DB2 Universal Database (UDB) 810 before version 8 FixPak 10 allows remote authenticated users to cause a denial of service (db2jd service crash) by "connecting from a downlevel client."	NVD-CWE-Other	CVE-2005-4740	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

273525	7.5	HIGH	netbsd	netbsd	NetBSD 1.6, NetBSD 2.0 through 2.1, and NetBSD-current before 20051031 allows local users to gain privileges by attaching a debugger to a setuid/setgid (P_SUGID) process that performs an exec without…	NVD-CWE-Other	CVE-2005-4741	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

273526	4.9	MEDIUM	pavel_kankovsky	echelog	Unspecified vulnerability in Echelog 0.6.2 allows attackers to "exploit function stacks on some architectures," with unknown impact and attack vectors.	NVD-CWE-Other	CVE-2005-4742	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

273527	6.8	MEDIUM	vwar	virtual_war	PHP remote file include vulnerability in functions_admin.php in Virtual War (VWar) 1.5.0 R10 allows remote attackers to include and execute arbitrary PHP code via unspecified attack vectors. NOTE: t…	NVD-CWE-Other	CVE-2005-4748	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

273528	7.5	HIGH	bea	weblogic_server	BEA WebLogic Server and WebLogic Express 8.1 SP4 and earlier, 7.0 SP5 and earlier, and 6.1 SP7 and earlier allow remote attackers to cause a denial of service (server thread hang) via unknown attack …	NVD-CWE-Other	CVE-2005-4750	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

273529	7.5	HIGH	bea	weblogic_server	The vendor has released multiple advisories, as well as fixes to address these issues.	NVD-CWE-Other	CVE-2005-4750	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

273530	5.0	MEDIUM	bea	weblogic_server	BEA WebLogic Server and WebLogic Express 8.1 and 7.0, during a migration across operating system platforms, do not warn the administrative user about platform differences in URLResource case sensitiv…	NVD-CWE-Other	CVE-2005-4759	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

273531	1.2	LOW	bea	weblogic_server	BEA WebLogic Server and WebLogic Express 8.1 SP4 and earlier, 7.0 SP5 and earlier, and 6.1 SP7 and earlier log the Java command line at server startup, which might include sensitive information (pass…	NVD-CWE-Other	CVE-2005-4761	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

273532	1.2	LOW	bea	weblogic_server	An attacker must have read access to the server log to see the sensitive values.	NVD-CWE-Other	CVE-2005-4761	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

273533	7.2	HIGH	bea	weblogic_server	BEA WebLogic Server and WebLogic Express 8.1 SP4 and earlier, 7.0 SP6 and earlier, and 6.1 SP7 and earlier sometimes stores the boot password in the registry in cleartext, which might allow local use…	NVD-CWE-Other	CVE-2005-4762	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

273534	7.5	HIGH	bea	weblogic_server	BEA WebLogic Server and WebLogic Express 8.1 SP4 and earlier, 7.0 SP6 and earlier, and 6.1 SP7 and earlier, when Internet Inter-ORB Protocol (IIOP) is used, sometimes include a password in an excepti…	NVD-CWE-Other	CVE-2005-4763	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

273535	7.8	HIGH	bea	weblogic_server	BEA WebLogic Server and WebLogic Express 9.0, 8.1, and 7.0 lock out the admin user account after multiple incorrect password guesses, which allows remote attackers who know or guess the admin account…	NVD-CWE-Other	CVE-2005-4764	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

273536	7.6	HIGH	bea	weblogic_server	BEA WebLogic Server and WebLogic Express 8.1 SP4 and earlier and 7.0 SP6 and earlier, when using the weblogic.Deployer command with the t3 protocol, does not use the secure t3s protocol even when an …	NVD-CWE-Other	CVE-2005-4765	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

273537	7.6	HIGH	bea	weblogic_server	Condition: when using the weblogic.Deployer command with the t3 protocol.	NVD-CWE-Other	CVE-2005-4765	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

273538	5.4	MEDIUM	bea	weblogic_server	BEA WebLogic Server and WebLogic Express 8.1 SP4 and earlier, and 7.0 SP5 and earlier, do not encrypt multicast traffic, which might allow remote attackers to read sensitive cluster synchronization m…	NVD-CWE-Other	CVE-2005-4766	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

273539	5.1	MEDIUM	bea	weblogic_server	BEA WebLogic Server and WebLogic Express 8.1 SP5 and earlier, and 7.0 SP6 and earlier, when using username/password authentication, does not lock out a username after the maximum number of invalid lo…	NVD-CWE-Other	CVE-2005-4767	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

273540	7.5	HIGH	tux_racer	tuxbank	SQL injection vulnerability in manage_account.php in Tux Racer TuxBank 0.7x and 0.8 allows remote attackers to execute arbitrary SQL commands via the id parameter in a manageaccount action to index.p…	NVD-CWE-Other	CVE-2005-4768	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

273541	7.5	HIGH	-	-	SQL injection vulnerability in addrbook.php in Belchior Foundry vCard PRO 3.1 allows remote attackers to execute arbitrary SQL commands via the addr_id parameter. NOTE: the provenance of this inform…	NVD-CWE-Other	CVE-2005-4769	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

273542	7.5	HIGH	accelerated_enterprise_solutions	accelerated_e_solutions	SQL injection vulnerability in an unspecified Accelerated Enterprise Solutions product, possibly Accelerated E Solutions, allows remote attackers to execute arbitrary SQL commands via the password pa…	NVD-CWE-Other	CVE-2005-4770	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

273543	4.6	MEDIUM	-	-	Trusted Mobility Agent PC Policy in Trust Digital Trusted Mobility Suite provides a cancel button that bypasses the domain-authentication prompt, which allows local users to sync a handheld (PDA) dev…	NVD-CWE-Other	CVE-2005-4771	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

273544	6.4	MEDIUM	suse	suse_linux_openexchange_server suse_linux_school_server suse_linux_standard_server suse_sled_beagle suse_linux	liby2util in Yet another Setup Tool (YaST) in SUSE Linux before 20051007 preserves permissions and ownerships when copying a remote repository, which might allow local users to read or modify sensiti…	NVD-CWE-Other	CVE-2005-4772	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

273545	5.0	MEDIUM	michael_scholz	contineo	Michael Scholz and Sebastian Stein Contineo 2.0, when the admin account lacks an e-mail address attribute, displays the password hash in a warning upon page reload, which might allow remote attackers…	NVD-CWE-Other	CVE-2005-4775	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

273546	5.0	MEDIUM	michael_scholz	contineo	This vulnerability is addressed in the following product release: Michael Scholz, Contineo, 2.1 Beta 1	NVD-CWE-Other	CVE-2005-4775	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

273547	7.2	HIGH	netbsd	netbsd	Integer overflow in the FreeBSD compatibility code (freebsd_misc.c) in NetBSD-current, NetBSD-3, NetBSD-2.0, and NetBSD-2 before 20050913; and NetBSD-1.6 before 20050914; allows local users to cause …	NVD-CWE-Other	CVE-2005-4776	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

273548	7.2	HIGH	netbsd	netbsd	this vulnerbaility is addressed in the following product versions: NetBSD, NetBSD, 2.0.3, and higher	NVD-CWE-Other	CVE-2005-4776	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

273549	4.9	MEDIUM	tashcom	aspedit	Tashcom ASPEdit 2.9 stores the administration password (aka the FTP password) in cleartext in the registry, which might allow local users to view the password.	NVD-CWE-Other	CVE-2005-4777	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

273550	2.1	LOW	-	-	The powersave daemon in SUSE Linux 10.0 before 20051007 has an unspecified "configuration problem," which allows local users to suspend the computer and possibly perform certain other unauthorized ac…	NVD-CWE-Other	CVE-2005-4778	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm