NVD脆弱性情報トップ

検索メニュー表示

ベンダー名
プロダクト・サービス名
タイトル
CVE
CRITICAL
HIGH
MEDIUM
LOW
CWE
公表日降順
更新日降順
表示数

NVD（National Vulnerability Database）で管理されている脆弱性の一覧を検索することが出来ます。
JVN（Japan Vulnerability Note）より先に脆弱性情報が更新される事が多いため、JVNに未記載の脆弱性が更新されている場合があります。

JVN（Japan Vulnerability Note）に関連した脆弱性がある場合は詳細画面で情報を表示します。

CWEで検索する場合は、CWE概要を参照して、CWE番号を確認してください。

CRITICAL
HIGH
MEDIUM
LOW

更新日:2026年6月11日5:13

No	CVSS	レベル攻撃区分	ベンダー名	プロダクト名	タイトル	CWE	CVE	更新日	公表日	影響表示	Exploit PoC 検索
350051	7.5	HIGH	motorola	wr850g	Motorola Wireless Router WR850G running firmware 4.03 allows remote attackers to bypass authentication, log on as an administrator, and obtain sensitive information by repeatedly making an HTTP reque…	NVD-CWE-Other	CVE-2004-1550	2017-07-11 10:31	2004-12-31	表示	GitHub Exploit DB Packet Storm

350052	4.3	MEDIUM	php_arena	pafiledb	Cross-site scripting (XSS) vulnerability in the (1) email or (2) file modules in paFileDB 3.1 Final allows remote attackers to execute arbitrary web script or HTML via the id parameter.	NVD-CWE-Other	CVE-2004-1551	2017-07-11 10:31	2004-12-31	表示	GitHub Exploit DB Packet Storm

350053	7.5	HIGH	alexphpteam	alex_guestbook	PHP remote file inclusion vulnerability in livre_include.php in @lex Guestbook allows remote attackers to execute arbitrary PHP code by modifying the chem_absolu parameter to reference a URL on a rem…	NVD-CWE-Other	CVE-2004-1554	2017-07-11 10:31	2004-12-31	表示	GitHub Exploit DB Packet Storm

350054	7.5	HIGH	broadboard_instant	asp_message_board	Multiple SQL injection vulnerabilities in BroadBoard Instant ASP Message Board allow remote attackers to run arbitrary SQL commands via the (1) keywords parameter to search.asp, (2) handle parameter …	NVD-CWE-Other	CVE-2004-1555	2017-07-11 10:31	2004-12-31	表示	GitHub Exploit DB Packet Storm

350055	5.0	MEDIUM	mywebserver	mywebserver	MyWebServer 1.0.3 allows remote attackers to cause a denial of service (application crash) via a large number of connections within a short time.	NVD-CWE-Other	CVE-2004-1556	2017-07-11 10:31	2004-12-31	表示	GitHub Exploit DB Packet Storm

350056	6.4	MEDIUM	mywebserver	mywebserver	MyWebServer 1.0.3 allows remote attackers to bypass authentication, modify configuration, and read arbitrary files via a direct HTTP request to (1) /admin or (2) ServerProperties.html.	NVD-CWE-Other	CVE-2004-1557	2017-07-11 10:31	2004-12-31	表示	GitHub Exploit DB Packet Storm

350057	7.5	HIGH	ypops	ypops	Multiple stack-based buffer overflows in YPOPs! (aka YahooPOPS) 0.4 through 0.6 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long (1) POP3 USE…	NVD-CWE-Other	CVE-2004-1558	2017-07-11 10:31	2004-12-31	表示	GitHub Exploit DB Packet Storm

350058	4.3	MEDIUM	wordpress	wordpress	Multiple cross-site scripting (XSS) vulnerabilities in Wordpress 1.2 allow remote attackers to inject arbitrary web script or HTML via the (1) redirect_to, text, popupurl, or popuptitle parameters to…	NVD-CWE-Other	CVE-2004-1559	2017-07-11 10:31	2004-12-31	表示	GitHub Exploit DB Packet Storm

350059	5.0	MEDIUM	microsoft	sql_server	Microsoft SQL Server 7.0 allows remote attackers to cause a denial of service (mssqlserver service halt) via a long request to TCP port 1433, possibly triggering a buffer overflow.	NVD-CWE-Other	CVE-2004-1560	2017-07-11 10:31	2004-12-31	表示	GitHub Exploit DB Packet Storm

350060	7.5	HIGH	icecast	icecast	Buffer overflow in Icecast 2.0.1 and earlier allows remote attackers to execute arbitrary code via an HTTP request with a large number of headers.	NVD-CWE-Other	CVE-2004-1561	2017-07-11 10:31	2004-12-31	表示	GitHub Exploit DB Packet Storm

350061	7.5	HIGH	w-agora	w-agora	SQL injection vulnerability in redir_url.php in w-Agora 4.1.6a allows remote attackers to execute arbitrary SQL commands via the key parameter.	NVD-CWE-Other	CVE-2004-1562	2017-07-11 10:31	2004-12-31	表示	GitHub Exploit DB Packet Storm

350062	4.3	MEDIUM	w-agora	w-agora	Multiple cross-site scripting (XSS) vulnerabilities in w-Agora 4.1.6a allow remote attackers to execute arbitrary web script or HTML via the (1) thread parameter to download_thread.php, (2) loginuser…	NVD-CWE-Other	CVE-2004-1563	2017-07-11 10:31	2004-12-31	表示	GitHub Exploit DB Packet Storm

350063	5.0	MEDIUM	w-agora	w-agora	CRLF injection vulnerability in subscribe_thread.php in w-Agora 4.1.6a allows remote attackers to perform HTTP Response Splitting attacks to modify expected HTML content from the server via the threa…	NVD-CWE-Other	CVE-2004-1564	2017-07-11 10:31	2004-12-31	表示	GitHub Exploit DB Packet Storm

350064	4.3	MEDIUM	silent-storm	silent-storm_portal	Cross-site scripting (XSS) vulnerability in index.php in Silent Storm Portal 2.1 and 2.2 allows remote attackers to execute arbitrary web script or HTML via the module parameter.	NVD-CWE-Other	CVE-2004-1566	2017-07-11 10:31	2004-12-31	表示	GitHub Exploit DB Packet Storm

350065	7.5	HIGH	-	-	profile.php in Silent Storm Portal 2.1 and 2.2 allows remote attackers to gain privileges by setting the mail parameter to 1, which is the value for an administrator.	NVD-CWE-Other	CVE-2004-1567	2017-07-11 10:31	2004-12-31	表示	GitHub Exploit DB Packet Storm

350066	5.0	MEDIUM	parachat	parachat_server	Directory traversal vulnerability in ParaChat Server 5.5 allows remote attackers to read arbitrary files via a ..%5C (hex-encoded dot dot) in the URL.	NVD-CWE-Other	CVE-2004-1568	2017-07-11 10:31	2004-12-31	表示	GitHub Exploit DB Packet Storm

350067	4.0	MEDIUM	illustrate	dbpoweramp_audio_player dbpoweramp_music_converter	Buffer overflow in (1) MusicConverter.exe, (2) playlist.exe, and (3) amp.exe in dBpowerAMP Audio Player 2.0 and dbPowerAmp Music Converter 10.0 allows remote attackers to cause a denial of service or…	NVD-CWE-Other	CVE-2004-1569	2017-07-11 10:31	2004-12-31	表示	GitHub Exploit DB Packet Storm

350068	7.5	HIGH	eaden_mckee	bblog	SQL injection vulnerability in bBlog 0.7.2 and 0.7.3 allows remote attackers to execute arbitrary SQL commands via the p parameter.	NVD-CWE-Other	CVE-2004-1570	2017-07-11 10:31	2004-12-31	表示	GitHub Exploit DB Packet Storm

350069	5.0	MEDIUM	aj-fork	aj-fork	AJ-Fork 167 allows remote attackers to gain sensitive information via a direct request to (1) auto-acronyms.php, (2) auto-archive.php, (3) ount-article-views.php, (4) kses.php, (5) custom-quick-tags.…	NVD-CWE-Other	CVE-2004-1571	2017-07-11 10:31	2004-12-31	表示	GitHub Exploit DB Packet Storm

350070	5.0	MEDIUM	aj-fork	aj-fork	AJ-Fork 167 does not restrict access to directories such as (1) data, (2) inc, (3) plugins, (4) skins, or (5) tools, which allows remote attackers to list files in those directories via a direct HTTP…	NVD-CWE-Other	CVE-2004-1572	2017-07-11 10:31	2004-12-31	表示	GitHub Exploit DB Packet Storm

350071	7.2	HIGH	aj-fork cutephp	aj-fork cutenews	The documentation for AJ-Fork 167 implies that users should set permissions for users.db.php to 777, which allows local users to execute arbitrary PHP code and gain privileges as the administrator.	NVD-CWE-Other	CVE-2004-1573	2017-07-11 10:31	2004-12-31	表示	GitHub Exploit DB Packet Storm

350072	7.5	HIGH	-	-	Buffer overflow in Vypress Messenger 3.5.1 and earlier allows remote attackers to execute arbitrary code via a message with a long first field.	NVD-CWE-Other	CVE-2004-1574	2017-07-11 10:31	2004-12-31	表示	GitHub Exploit DB Packet Storm

350073	5.0	MEDIUM	apache	xerces-c\+\+	The XML parser in Xerces-C++ 2.5.0 allows remote attackers to cause a denial of service (CPU consumption) via XML attributes in a crafted XML document.	NVD-CWE-Other	CVE-2004-1575	2017-07-11 10:31	2004-12-31	表示	GitHub Exploit DB Packet Storm

350074	5.0	MEDIUM	-	-	Format string vulnerability in Judge Dredd: Dredd vs. Death 1.01 and earlier allows remote attackers to cause a denial of service (application crash) via format string specifiers in a chat message.	NVD-CWE-Other	CVE-2004-1576	2017-07-11 10:31	2004-12-31	表示	GitHub Exploit DB Packet Storm

350075	5.0	MEDIUM	greg_donald	phplinks	index.php in PHP Links allows remote attackers to gain sensitive information via an invalid show parameter, which reveals the full path in an error message.	NVD-CWE-Other	CVE-2004-1577	2017-07-11 10:31	2004-12-31	表示	GitHub Exploit DB Packet Storm

350076	4.3	MEDIUM	invision_power_services	invision_power_board	Cross-site scripting (XSS) vulnerability in index.php in Invision Power Board 2.0.0 allows remote attackers to execute arbitrary web script or HTML via the Referer field in the HTTP header.	NVD-CWE-Other	CVE-2004-1578	2017-07-11 10:31	2004-12-31	表示	GitHub Exploit DB Packet Storm

350077	5.0	MEDIUM	devellion	cubecart	index.php in CubeCart 2.0.1 allows remote attackers to gain sensitive information via an HTTP request with an invalid cat_id parameter, which reveals the full path in a PHP error message.	NVD-CWE-Other	CVE-2004-1579	2017-07-11 10:31	2004-12-31	表示	GitHub Exploit DB Packet Storm

350078	7.5	HIGH	devellion	cubecart	SQL injection vulnerability in index.php in CubeCart 2.0.1 allows remote attackers to execute arbitrary SQL commands via the cat_id parameter.	NVD-CWE-Other	CVE-2004-1580	2017-07-11 10:31	2004-12-31	表示	GitHub Exploit DB Packet Storm

350079	5.0	MEDIUM	blackboard	blackboard	BlackBoard 1.5.1 allows remote attackers to gain sensitive information via a direct request to (1) checkdb.inc.php, (2) admin.inc.php or (3) cp.inc.php, which reveals the path in a PHP error message.	NVD-CWE-Other	CVE-2004-1581	2017-07-11 10:31	2004-12-31	表示	GitHub Exploit DB Packet Storm

350080	5.0	MEDIUM	wordpress	wordpress	CRLF injection vulnerability in wp-login.php in WordPress 1.2 allows remote attackers to perform HTTP Response Splitting attacks to modify expected HTML content from the server via the text parameter.	NVD-CWE-Other	CVE-2004-1584	2017-07-11 10:31	2004-12-31	表示	GitHub Exploit DB Packet Storm

350081	5.0	MEDIUM	jera_technology	flash_messaging	Flash Messaging 5.2.0g (rev 1.1.2) and earlier allows remote attackers to cause a denial of service (application crash) via certain wide characters.	NVD-CWE-Other	CVE-2004-1585	2017-07-11 10:31	2004-12-31	表示	GitHub Exploit DB Packet Storm

350082	5.0	MEDIUM	monolith_productions	alien_versus_predator blood no_one_lives_forever shogo	Buffer overflow in Monolith games including (1) Alien versus Predator 2 1.0.9.6 and earlier, (2) Blood 2 2.1 and earlier, (3) No one lives forever 1.004 and earlier and (4) Shogo 2.2 and earlier allo…	NVD-CWE-Other	CVE-2004-1587	2017-07-11 10:31	2004-12-31	表示	GitHub Exploit DB Packet Storm

350083	7.5	HIGH	gosmart	gosmart_message_board	SQL injection vulnerability in GoSmart Message Board allows remote attackers to execute arbitrary SQL code via the (1) QuestionNumber and Category parameters to Forum.asp or (2) Username and Password…	NVD-CWE-Other	CVE-2004-1588	2017-07-11 10:31	2004-12-31	表示	GitHub Exploit DB Packet Storm

350084	4.3	MEDIUM	gosmart	gosmart_message_board	Cross-site scripting (XSS) vulnerability in GoSmart Message Board allows remote attackers to execute inject web script or HTML via the (1) Category parameter to Forum.asp or (2) MainMessageID paramet…	NVD-CWE-Other	CVE-2004-1589	2017-07-11 10:31	2004-12-31	表示	GitHub Exploit DB Packet Storm

350085	5.0	MEDIUM	clientexec	clientexec	Clientexec allows remote attackers to gain sensitive information via an HTTP request to phpinfo.php, which calls the phpinfo function.	NVD-CWE-Other	CVE-2004-1590	2017-07-11 10:31	2004-12-31	表示	GitHub Exploit DB Packet Storm

350086	7.5	HIGH	micronet	sp916bm	The web interface for Micronet Wireless Broadband Router SP916BM running firmware before 1.9 08/04/2004 resets the password to the default password when the router is shut off, which could allow remo…	NVD-CWE-Other	CVE-2004-1591	2017-07-11 10:31	2004-12-31	表示	GitHub Exploit DB Packet Storm

350087	7.5	HIGH	ocportal	ocportal	PHP remote file inclusion vulnerability in index.php in ocPortal 1.0.3 and earlier allows remote attackers to execute arbitrary PHP code by modifying the req_path parameter to reference a URL on a re…	NVD-CWE-Other	CVE-2004-1592	2017-07-11 10:31	2004-12-31	表示	GitHub Exploit DB Packet Storm

350088	4.3	MEDIUM	sct_corporation	campus_pipeline	Cross-site scripting (XSS) vulnerability in render.UserLayoutRootNode.uP in SCT Campus Pipeline allows remote attackers to inject arbitrary web script or HTML via the utf parameter.	NVD-CWE-Other	CVE-2004-1593	2017-07-11 10:31	2004-12-31	表示	GitHub Exploit DB Packet Storm

350089	4.3	MEDIUM	e-zone_media_inc.	fusetalk	Cross-site scripting (XSS) vulnerability in FuseTalk 4.0 allows remote attackers to execute arbitrary web script via an img src tag.	NVD-CWE-Other	CVE-2004-1594	2017-07-11 10:31	2004-10-13	表示	GitHub Exploit DB Packet Storm

350090	7.5	HIGH	shixxnote	shixxnote	Buffer overflow in ShixxNote 6.net build 117 allows remote attackers to execute arbitrary code via a long font field.	NVD-CWE-Other	CVE-2004-1595	2017-07-11 10:31	2004-10-13	表示	GitHub Exploit DB Packet Storm

350091	7.5	HIGH	3com	3cradsl72	The 3COM Wireless router 3CRADSL72 running Boot Code 1.3d allows remote attackers to gain sensitive information such as passwords and router settings via a direct HTTP request to app_sta.stm.	NVD-CWE-Other	CVE-2004-1596	2017-07-11 10:31	2004-10-13	表示	GitHub Exploit DB Packet Storm

350092	5.0	MEDIUM	adobe	acrobat acrobat_reader	Adobe Acrobat and Acrobat Reader 6.0 allow remote attackers to read arbitrary files via a PDF file that contains an embedded Shockwave (swf) file that references files outside of the temporary direct…	NVD-CWE-Other	CVE-2004-1598	2017-07-11 10:31	2004-10-12	表示	GitHub Exploit DB Packet Storm

350093	4.3	MEDIUM	coolphp	coolphpweb_portal	Cross-site scripting (XSS) vulnerability in index.php in CoolPHP 1.0-stable allows remote attackers to execute arbitrary web script or HTML via the (1) query or (2) nick parameters.	NVD-CWE-Other	CVE-2004-1599	2017-07-11 10:31	2004-10-16	表示	GitHub Exploit DB Packet Storm

350094	5.0	MEDIUM	coolphp	coolphp	index.php in CoolPHP 1.0-stable allows remote attackers to gain sensitive information via an invalid op parameter, which reveals the path in an error message.	NVD-CWE-Other	CVE-2004-1600	2017-07-11 10:31	2004-10-16	表示	GitHub Exploit DB Packet Storm

350095	7.5	HIGH	coolphp	coolphp_web_portal	Directory traversal vulnerability in index.php in CoolPHP 1.0-stable allows remote attackers to access arbitrary files and execute local PHP scripts via a .. (dot dot) in the op parameter.	NVD-CWE-Other	CVE-2004-1601	2017-07-11 10:31	2004-10-16	表示	GitHub Exploit DB Packet Storm

350096	7.5	HIGH	best_software saleslogix_corporation	saleslogix	SalesLogix 6.1 allows remote attackers to bypass authentication by modifying the slxweb cookie to set user=Admin, teams=ADMIN!, and usertype=Administrator.	NVD-CWE-Other	CVE-2004-1605	2017-07-11 10:31	2004-10-14	表示	GitHub Exploit DB Packet Storm

350097	6.4	MEDIUM	best_software saleslogix_corporation	saleslogix	slxweb.dll in SalesLogix 6.1 allows remote attackers to cause a denial service (application crash) via an invalid HTTP request, which might also leak sensitive information in the ErrorLogMsg cookie.	NVD-CWE-Other	CVE-2004-1606	2017-07-11 10:31	2004-10-18	表示	GitHub Exploit DB Packet Storm

350098	5.0	MEDIUM	best_software saleslogix_corporation	saleslogix	slxweb.dll in SalesLogix 6.1 allows remote attackers to obtain sensitive information via a (1) Library or (2) Attachment request with an invalid file parameter, which reveals the path in an error mes…	NVD-CWE-Other	CVE-2004-1607	2017-07-11 10:31	2004-10-18	表示	GitHub Exploit DB Packet Storm

350099	7.5	HIGH	best_software saleslogix_corporation	saleslogix	SQL injection vulnerability in SalesLogix 6.1 allows remote attackers to execute arbitrary SQL statements via the id parameter in a view operation.	NVD-CWE-Other	CVE-2004-1608	2017-07-11 10:31	2004-10-18	表示	GitHub Exploit DB Packet Storm

350100	5.0	MEDIUM	best_software saleslogix_corporation	saleslogix	SalesLogix 6.1 includes usernames, passwords, and other sensitive information in the headers of an HTTP response, which could allow remote attackers to gain access.	NVD-CWE-Other	CVE-2004-1609	2017-07-11 10:31	2004-10-18	表示	GitHub Exploit DB Packet Storm