NVD脆弱性情報トップ

検索メニュー表示

ベンダー名
プロダクト・サービス名
タイトル
CVE
CRITICAL
HIGH
MEDIUM
LOW
CWE
公表日降順
更新日降順
表示数

NVD（National Vulnerability Database）で管理されている脆弱性の一覧を検索することが出来ます。
JVN（Japan Vulnerability Note）より先に脆弱性情報が更新される事が多いため、JVNに未記載の脆弱性が更新されている場合があります。

JVN（Japan Vulnerability Note）に関連した脆弱性がある場合は詳細画面で情報を表示します。

CWEで検索する場合は、CWE概要を参照して、CWE番号を確認してください。

CRITICAL
HIGH
MEDIUM
LOW

更新日:2026年5月17日4:15

No	CVSS	レベル攻撃区分	ベンダー名	プロダクト名	タイトル	CWE	CVE	更新日	公表日	影響表示	Exploit PoC 検索
350501	7.5	HIGH	efilego	efilego	Directory traversal vulnerability in eFileGo 3.01 allows remote attackers to execute arbitrary code, read arbitrary files, and upload arbitrary files via a ... (triple dot) in (1) the URL on port 608…	NVD-CWE-Other	CVE-2005-4622	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

350502	5.0	MEDIUM	efilego	efilego	upload.exe in eFileGo 3.01 allows remote attackers to cause a denial of service (CPU consumption) via an argument with an invalid directory name.	NVD-CWE-Other	CVE-2005-4623	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

350503	5.0	MEDIUM	ptnet	ptnet_ircd	The m_join function in channel.c for PTnet ircd 1.5 and 1.6 allows remote attackers to cause a denial of service (memory exhaustion that triggers a daemon restart) via a large number of requests to j…	NVD-CWE-Other	CVE-2005-4624	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

350504	7.5	HIGH	3cfr	3cfr	SQL injection vulnerability in index.php in 3CFR allows remote attackers to execute arbitrary SQL commands via the LangueID parameter.	NVD-CWE-Other	CVE-2005-4645	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

350505	5.1	MEDIUM	illustrate	dbpoweramp_music_converter	Buffer overflow in Illustrate dBpowerAMP Music Converter 11.5 and earlier, possibly including (1) MusicConverter.exe, (2) playlist.exe, and (3) amp.exe, allows user-assisted attackers to cause a deni…	NVD-CWE-Other	CVE-2005-4648	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

350506	4.3	MEDIUM	advanced_guestbook	advanced_guestbook	Multiple cross-site scripting (XSS) vulnerabilities in Advanced Guestbook 2.2 and 2.3.1 allow remote attackers to inject arbitrary web script or HTML via (1) the entry parameter in index.php and (2) …	NVD-CWE-Other	CVE-2005-4649	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

350507	7.5	HIGH	ocean12_technologies	calendar_manager_pro	Ocean12 Calendar Manager Pro 1.01 allows remote attackers to bypass authentication and obtain sensitive information via a direct request to /admin/view.asp. NOTE: the provenance of this information …	NVD-CWE-Other	CVE-2005-4657	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

350508	1.2	LOW	ipcop	ipcop	Race condition in IPCop (aka IPCop Firewall) before 1.4.10 might allow local users to overwrite system configuration files and gain privileges by replacing a backup archive during the time window whe…	NVD-CWE-Other	CVE-2005-4660	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

350509	4.6	MEDIUM	parosproxy	parosproxy	The embedded HSQLDB in ParosProxy before 3.2.7, when running with JDK 1.4.2 before 1.4.2_08, allows local users to execute arbitrary comands via crafted SQL commands that interact with HSQLDB through…	NVD-CWE-Other	CVE-2005-4668	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

350510	7.5	HIGH	rt_internet_solutions	rt_internet_solutions_webadmin	SQL injection vulnerability in RT Internet Solutions (RTIS) WebAdmin allows remote attackers to execute arbitrary SQL commands via the (1) username and (2) password fields.	NVD-CWE-Other	CVE-2005-4669	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

350511	5.0	MEDIUM	inicom_networks	ioftpd	ioFTPD 0.5.84 u responds with different messages depending on whether or not a username exists, which allows remote attackers to enumerate valid usernames.	NVD-CWE-Other	CVE-2005-4673	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

350512	5.0	MEDIUM	apple	safari	Apple Safari 2.0.2 (aka 416.12) allows remote attackers to spoof the URL in the status bar via the title in an image in a link to a trusted site within a form to the malicious site. NOTE: the proven…	NVD-CWE-Other	CVE-2005-4678	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

350513	5.0	MEDIUM	microsoft	ie	Internet Explorer 6 for Windows XP Service Pack 2 allows remote attackers to spoof the URL in the status bar via the title in an image in a link to a trusted site within a form to the malicious site.	NVD-CWE-Other	CVE-2005-4679	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

350514	5.0	MEDIUM	punbb	punbb	PunBB 1.2.9, when used alone or with F-ART BLOG:CMS, includes config.php before calling the unregister_globals function, which allows attackers to obtain unspecified sensitive information.	NVD-CWE-Other	CVE-2005-4686	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

350515	5.0	MEDIUM	f-art_agency punbb	blog_cms punbb	PunBB 1.2.9, used alone or with F-ART BLOG:CMS, may trust a client's IP address as specified in the X-Forwarded-For HTTP header rather than the TCP/IP stack, which allows remote attackers to misrepre…	NVD-CWE-Other	CVE-2005-4687	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

350516	5.0	MEDIUM	punbb	punbb	PunBB 1.2.9 does not require password entry when changing the e-mail address in an account's profile, which might allow an attacker to make an address change via a hijacked login session.	NVD-CWE-Other	CVE-2005-4688	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

350517	5.0	MEDIUM	-	-	Six Apart Movable Type 3.16 stores account names and password hashes in a cookie, which allows remote attackers to login to an account by sniffing the cookie.	NVD-CWE-Other	CVE-2005-4689	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

350518	2.1	LOW	six_apart	movable_type	Six Apart Movable Type 3.16 allows local users with blog-creation privileges to create or overwrite arbitrary files of certain types (such as HTML and image files) by selecting an arbitrary directory…	NVD-CWE-Other	CVE-2005-4690	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

350519	2.1	LOW	netbsd	netbsd	imake in NetBSD before 2.0.3, NetBSD-current before 12 September 2005, certain versions of X.Org, and certain versions of XFree86 allows local users to overwrite arbitrary files via a symlink attack …	NVD-CWE-Other	CVE-2005-4691	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

350520	7.5	HIGH	mroovca	mroovca_stats	Unspecified vulnerability in mroovca stats (mroovcastats) before 0.4.5b has unknown attack vectors and impact, related to cookies.	NVD-CWE-Other	CVE-2005-4692	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

350521	5.0	MEDIUM	gaim-encryption	gaim-encryption	Gaim-Encryption 2.38-1 on Debian Linux allows remote attackers to cause a denial of service (crash) via a crafted message from an ICQ buddy, possibly involving the GE_received_key function in keys.c.	NVD-CWE-Other	CVE-2005-4693	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

350522	6.4	MEDIUM	ipbproarcade	ipbproarcade	SQL injection vulnerability in the favorites module in index.php in IPBProArcade 2.5.2 allows remote attackers to inject arbitrary SQL commands via the gameid parameter. NOTE: the provenance of this…	NVD-CWE-Other	CVE-2005-4702	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

350523	5.0	MEDIUM	bea	weblogic_server	Unspecified vulnerability in BEA WebLogic Server and WebLogic Express 8.1 through SP3, 7.0 through SP6, and 6.1 through SP7, when SSL is intended to be used, causes an unencrypted protocol to be used…	NVD-CWE-Other	CVE-2005-4704	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

350524	5.0	MEDIUM	bea	weblogic_server	BEA WebLogic Server and WebLogic Express 8.1 through SP4, 7.0 through SP6, and 6.1 through SP7, when a Java client application creates an SSL connection to the server after it has already created an …	NVD-CWE-Other	CVE-2005-4705	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

350525	5.0	MEDIUM	php_handicapper	php_handicapper	CRLF injection vulnerability in process_signup.php in PHP Handicapper allows remote attackers to inject arbitrary HTTP headers via CRLF sequences in the login parameter. NOTE: the vendor has dispute…	NVD-CWE-Other	CVE-2005-4712	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

350526	5.0	MEDIUM	-	-	Hitachi TP1/Server Base and TP1/NET/Library 2 on IBM AIX allow remote attackers to (1) cause a denial of service (OpenTP1 system outage) via invalid data to a port used by a system-server process, an…	NVD-CWE-Other	CVE-2005-4716	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

350527	5.0	MEDIUM	mozilla	firefox	Mozilla Firefox 1.0.7 and earlier on Linux allows remote attackers to cause a denial of service (client crash) via an IFRAME element with a large value of the WIDTH attribute, which triggers a proble…	NVD-CWE-Other	CVE-2005-4720	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

350528	7.5	HIGH	geeklog	geeklog	Geeklog before 1.3.11sr3 allows remote attackers to bypass intended access restrictions and comment on an arbitrary story or topic by guessing the story ID.	NVD-CWE-Other	CVE-2005-4725	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

350529	5.0	MEDIUM	mute	mute	MUTE 0.4 uses improper flood protection algorithms, which allows remote attackers to obtain sensitive information (privacy leak and search result data) by controlling a drop chain neighbor that is ne…	NVD-CWE-Other	CVE-2005-4726	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

350530	4.6	MEDIUM	debian	amaya	Untrusted search path vulnerability (RPATH) in amaya 9.2.1 on Debian GNU/Linux allows local users to gain privileges via a malicious Mesa library in the /home/anand directory.	NVD-CWE-Other	CVE-2005-4728	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

350531	10.0	HIGH	pear	text_password	Unspecified vulnerability in PEAR Text_Password 1.0 has unknown impact and attack vectors, related to "problematic seeding" of the random number generator, possibly predictable seeds.	NVD-CWE-Other	CVE-2005-4730	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

350532	5.0	MEDIUM	the_php_group	pear_html_quickform_controller	The Next action in PEAR HTML_QuickForm_Controller 1.0.4 includes the SID in the URL even when session.use_only_cookies is configured, which allows remote attackers to obtain the SID via an HTTP Refer…	NVD-CWE-Other	CVE-2005-4731	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

350533	5.0	MEDIUM	the_php_group	pear_html_quickform_controller	Upgrade to version 1.0.5 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.	NVD-CWE-Other	CVE-2005-4731	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

350534	4.3	MEDIUM	tux_racer	tuxbank	Multiple cross-site scripting (XSS) vulnerabilities in index.php in Tux Racer TuxBank 0.7x and 0.8 allow remote attackers to inject arbitrary web script or HTML via the (1) name and (2) description p…	NVD-CWE-Other	CVE-2005-4732	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

350535	4.9	MEDIUM	netbsd	netbsd	NetBSD 2.0 before 20050316 and NetBSD-current before 20050112 allow local users to cause a denial of service (infinite loop and system hang) by calling the F_CLOSEM fcntl with a parameter value of 0.	NVD-CWE-Other	CVE-2005-4733	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

350536	6.4	MEDIUM	rsa	authentication_agent_for_web	Stack-based buffer overflow in IISWebAgentIF.dll in RSA Authentication Agent for Web (aka SecurID Web Agent) 5.2 and 5.3 for IIS allows remote attackers to execute arbitrary code via a long url param…	NVD-CWE-Other	CVE-2005-4734	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

350537	6.8	MEDIUM	ibm	db2_universal_database	IBM DB2 Universal Database (UDB) 810 before 8.1 FP10 allows remote authenticated users to cause a denial of service (application crash) via (1) certain equality predicates that trigger self-removal, …	NVD-CWE-Other	CVE-2005-4735	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

350538	6.8	MEDIUM	ibm	db2_universal_database	IBM DB2 Universal Database (UDB) 820 before 8.2 FP10 allows remote authenticated users to cause a denial of service (disk consumption) via a hash join (hsjn) that triggers an infinite loop in sqlri_h…	NVD-CWE-Other	CVE-2005-4736	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

350539	7.5	HIGH	ibm	db2_universal_database	IBM DB2 Universal Database (UDB) 820 before ESE AIX 5765F4100 allows remote authenticated users to cause a denial of service (CPU consumption) by "abnormally" terminating a connection, which prevents…	NVD-CWE-Other	CVE-2005-4737	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

350540	7.5	HIGH	ibm	db2_universal_database	The vulnerabilities have been fixed in Version 8 FixPak 10 (Version 8.2 FixPak 3)	NVD-CWE-Other	CVE-2005-4737	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

350541	6.5	MEDIUM	ibm	db2_universal_database	IBM DB2 Universal Database (UDB) 810 before ESE AIX 5765F4100 does not ensure that a user has execute privileges before permitting object creation based on routines, which allows remote authenticated…	NVD-CWE-Other	CVE-2005-4738	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

350542	6.8	MEDIUM	ibm	db2_universal_database	IBM DB2 Universal Database (UDB) 820 before version 8 FixPak 10 (s050811) allows remote authenticated users to cause a denial of service (application crash) by using a table function for an instance …	NVD-CWE-Other	CVE-2005-4739	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

350543	4.0	MEDIUM	-	-	IBM DB2 Universal Database (UDB) 810 before version 8 FixPak 10 allows remote authenticated users to cause a denial of service (db2jd service crash) by "connecting from a downlevel client."	NVD-CWE-Other	CVE-2005-4740	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

350544	7.5	HIGH	netbsd	netbsd	NetBSD 1.6, NetBSD 2.0 through 2.1, and NetBSD-current before 20051031 allows local users to gain privileges by attaching a debugger to a setuid/setgid (P_SUGID) process that performs an exec without…	NVD-CWE-Other	CVE-2005-4741	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

350545	4.9	MEDIUM	pavel_kankovsky	echelog	Unspecified vulnerability in Echelog 0.6.2 allows attackers to "exploit function stacks on some architectures," with unknown impact and attack vectors.	NVD-CWE-Other	CVE-2005-4742	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

350546	6.8	MEDIUM	vwar	virtual_war	PHP remote file include vulnerability in functions_admin.php in Virtual War (VWar) 1.5.0 R10 allows remote attackers to include and execute arbitrary PHP code via unspecified attack vectors. NOTE: t…	NVD-CWE-Other	CVE-2005-4748	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

350547	7.5	HIGH	bea	weblogic_server	BEA WebLogic Server and WebLogic Express 8.1 SP4 and earlier, 7.0 SP5 and earlier, and 6.1 SP7 and earlier allow remote attackers to cause a denial of service (server thread hang) via unknown attack …	NVD-CWE-Other	CVE-2005-4750	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

350548	7.5	HIGH	bea	weblogic_server	The vendor has released multiple advisories, as well as fixes to address these issues.	NVD-CWE-Other	CVE-2005-4750	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

350549	5.0	MEDIUM	bea	weblogic_server	BEA WebLogic Server and WebLogic Express 8.1 and 7.0, during a migration across operating system platforms, do not warn the administrative user about platform differences in URLResource case sensitiv…	NVD-CWE-Other	CVE-2005-4759	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

350550	1.2	LOW	bea	weblogic_server	BEA WebLogic Server and WebLogic Express 8.1 SP4 and earlier, 7.0 SP5 and earlier, and 6.1 SP7 and earlier log the Java command line at server startup, which might include sensitive information (pass…	NVD-CWE-Other	CVE-2005-4761	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm