NVD脆弱性情報トップ

検索メニュー表示

ベンダー名
プロダクト・サービス名
タイトル
CVE
CRITICAL
HIGH
MEDIUM
LOW
CWE
公表日降順
更新日降順
表示数

NVD（National Vulnerability Database）で管理されている脆弱性の一覧を検索することが出来ます。
JVN（Japan Vulnerability Note）より先に脆弱性情報が更新される事が多いため、JVNに未記載の脆弱性が更新されている場合があります。

JVN（Japan Vulnerability Note）に関連した脆弱性がある場合は詳細画面で情報を表示します。

CWEで検索する場合は、CWE概要を参照して、CWE番号を確認してください。

CRITICAL
HIGH
MEDIUM
LOW

更新日:2026年7月16日4:30

No	CVSS	レベル攻撃区分	ベンダー名	プロダクト名	タイトル	CWE	CVE	更新日	公表日	影響表示	Exploit PoC 検索
364751	5.0	MEDIUM	punbb	punbb	PunBB 1.2.9 does not require password entry when changing the e-mail address in an account's profile, which might allow an attacker to make an address change via a hijacked login session.	NVD-CWE-Other	CVE-2005-4688	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

364752	5.0	MEDIUM	-	-	Six Apart Movable Type 3.16 stores account names and password hashes in a cookie, which allows remote attackers to login to an account by sniffing the cookie.	NVD-CWE-Other	CVE-2005-4689	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

364753	2.1	LOW	six_apart	movable_type	Six Apart Movable Type 3.16 allows local users with blog-creation privileges to create or overwrite arbitrary files of certain types (such as HTML and image files) by selecting an arbitrary directory…	NVD-CWE-Other	CVE-2005-4690	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

364754	2.1	LOW	netbsd	netbsd	imake in NetBSD before 2.0.3, NetBSD-current before 12 September 2005, certain versions of X.Org, and certain versions of XFree86 allows local users to overwrite arbitrary files via a symlink attack …	NVD-CWE-Other	CVE-2005-4691	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

364755	7.5	HIGH	mroovca	mroovca_stats	Unspecified vulnerability in mroovca stats (mroovcastats) before 0.4.5b has unknown attack vectors and impact, related to cookies.	NVD-CWE-Other	CVE-2005-4692	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

364756	5.0	MEDIUM	gaim-encryption	gaim-encryption	Gaim-Encryption 2.38-1 on Debian Linux allows remote attackers to cause a denial of service (crash) via a crafted message from an ICQ buddy, possibly involving the GE_received_key function in keys.c.	NVD-CWE-Other	CVE-2005-4693	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

364757	6.4	MEDIUM	ipbproarcade	ipbproarcade	SQL injection vulnerability in the favorites module in index.php in IPBProArcade 2.5.2 allows remote attackers to inject arbitrary SQL commands via the gameid parameter. NOTE: the provenance of this…	NVD-CWE-Other	CVE-2005-4702	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

364758	5.0	MEDIUM	bea	weblogic_server	Unspecified vulnerability in BEA WebLogic Server and WebLogic Express 8.1 through SP3, 7.0 through SP6, and 6.1 through SP7, when SSL is intended to be used, causes an unencrypted protocol to be used…	NVD-CWE-Other	CVE-2005-4704	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

364759	5.0	MEDIUM	bea	weblogic_server	BEA WebLogic Server and WebLogic Express 8.1 through SP4, 7.0 through SP6, and 6.1 through SP7, when a Java client application creates an SSL connection to the server after it has already created an …	NVD-CWE-Other	CVE-2005-4705	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

364760	5.0	MEDIUM	php_handicapper	php_handicapper	CRLF injection vulnerability in process_signup.php in PHP Handicapper allows remote attackers to inject arbitrary HTTP headers via CRLF sequences in the login parameter. NOTE: the vendor has dispute…	NVD-CWE-Other	CVE-2005-4712	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

364761	5.0	MEDIUM	-	-	Hitachi TP1/Server Base and TP1/NET/Library 2 on IBM AIX allow remote attackers to (1) cause a denial of service (OpenTP1 system outage) via invalid data to a port used by a system-server process, an…	NVD-CWE-Other	CVE-2005-4716	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

364762	5.0	MEDIUM	mozilla	firefox	Mozilla Firefox 1.0.7 and earlier on Linux allows remote attackers to cause a denial of service (client crash) via an IFRAME element with a large value of the WIDTH attribute, which triggers a proble…	NVD-CWE-Other	CVE-2005-4720	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

364763	7.5	HIGH	geeklog	geeklog	Geeklog before 1.3.11sr3 allows remote attackers to bypass intended access restrictions and comment on an arbitrary story or topic by guessing the story ID.	NVD-CWE-Other	CVE-2005-4725	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

364764	5.0	MEDIUM	mute	mute	MUTE 0.4 uses improper flood protection algorithms, which allows remote attackers to obtain sensitive information (privacy leak and search result data) by controlling a drop chain neighbor that is ne…	NVD-CWE-Other	CVE-2005-4726	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

364765	4.6	MEDIUM	debian	amaya	Untrusted search path vulnerability (RPATH) in amaya 9.2.1 on Debian GNU/Linux allows local users to gain privileges via a malicious Mesa library in the /home/anand directory.	NVD-CWE-Other	CVE-2005-4728	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

364766	10.0	HIGH	pear	text_password	Unspecified vulnerability in PEAR Text_Password 1.0 has unknown impact and attack vectors, related to "problematic seeding" of the random number generator, possibly predictable seeds.	NVD-CWE-Other	CVE-2005-4730	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

364767	5.0	MEDIUM	the_php_group	pear_html_quickform_controller	The Next action in PEAR HTML_QuickForm_Controller 1.0.4 includes the SID in the URL even when session.use_only_cookies is configured, which allows remote attackers to obtain the SID via an HTTP Refer…	NVD-CWE-Other	CVE-2005-4731	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

364768	5.0	MEDIUM	the_php_group	pear_html_quickform_controller	Upgrade to version 1.0.5 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.	NVD-CWE-Other	CVE-2005-4731	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

364769	4.3	MEDIUM	tux_racer	tuxbank	Multiple cross-site scripting (XSS) vulnerabilities in index.php in Tux Racer TuxBank 0.7x and 0.8 allow remote attackers to inject arbitrary web script or HTML via the (1) name and (2) description p…	NVD-CWE-Other	CVE-2005-4732	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

364770	4.9	MEDIUM	netbsd	netbsd	NetBSD 2.0 before 20050316 and NetBSD-current before 20050112 allow local users to cause a denial of service (infinite loop and system hang) by calling the F_CLOSEM fcntl with a parameter value of 0.	NVD-CWE-Other	CVE-2005-4733	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

364771	6.4	MEDIUM	rsa	authentication_agent_for_web	Stack-based buffer overflow in IISWebAgentIF.dll in RSA Authentication Agent for Web (aka SecurID Web Agent) 5.2 and 5.3 for IIS allows remote attackers to execute arbitrary code via a long url param…	NVD-CWE-Other	CVE-2005-4734	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

364772	6.8	MEDIUM	ibm	db2_universal_database	IBM DB2 Universal Database (UDB) 810 before 8.1 FP10 allows remote authenticated users to cause a denial of service (application crash) via (1) certain equality predicates that trigger self-removal, …	NVD-CWE-Other	CVE-2005-4735	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

364773	6.8	MEDIUM	ibm	db2_universal_database	IBM DB2 Universal Database (UDB) 820 before 8.2 FP10 allows remote authenticated users to cause a denial of service (disk consumption) via a hash join (hsjn) that triggers an infinite loop in sqlri_h…	NVD-CWE-Other	CVE-2005-4736	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

364774	7.5	HIGH	ibm	db2_universal_database	IBM DB2 Universal Database (UDB) 820 before ESE AIX 5765F4100 allows remote authenticated users to cause a denial of service (CPU consumption) by "abnormally" terminating a connection, which prevents…	NVD-CWE-Other	CVE-2005-4737	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

364775	7.5	HIGH	ibm	db2_universal_database	The vulnerabilities have been fixed in Version 8 FixPak 10 (Version 8.2 FixPak 3)	NVD-CWE-Other	CVE-2005-4737	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

364776	6.5	MEDIUM	ibm	db2_universal_database	IBM DB2 Universal Database (UDB) 810 before ESE AIX 5765F4100 does not ensure that a user has execute privileges before permitting object creation based on routines, which allows remote authenticated…	NVD-CWE-Other	CVE-2005-4738	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

364777	6.8	MEDIUM	ibm	db2_universal_database	IBM DB2 Universal Database (UDB) 820 before version 8 FixPak 10 (s050811) allows remote authenticated users to cause a denial of service (application crash) by using a table function for an instance …	NVD-CWE-Other	CVE-2005-4739	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

364778	4.0	MEDIUM	-	-	IBM DB2 Universal Database (UDB) 810 before version 8 FixPak 10 allows remote authenticated users to cause a denial of service (db2jd service crash) by "connecting from a downlevel client."	NVD-CWE-Other	CVE-2005-4740	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

364779	7.5	HIGH	netbsd	netbsd	NetBSD 1.6, NetBSD 2.0 through 2.1, and NetBSD-current before 20051031 allows local users to gain privileges by attaching a debugger to a setuid/setgid (P_SUGID) process that performs an exec without…	NVD-CWE-Other	CVE-2005-4741	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

364780	4.9	MEDIUM	pavel_kankovsky	echelog	Unspecified vulnerability in Echelog 0.6.2 allows attackers to "exploit function stacks on some architectures," with unknown impact and attack vectors.	NVD-CWE-Other	CVE-2005-4742	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

364781	6.8	MEDIUM	vwar	virtual_war	PHP remote file include vulnerability in functions_admin.php in Virtual War (VWar) 1.5.0 R10 allows remote attackers to include and execute arbitrary PHP code via unspecified attack vectors. NOTE: t…	NVD-CWE-Other	CVE-2005-4748	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

364782	7.5	HIGH	bea	weblogic_server	BEA WebLogic Server and WebLogic Express 8.1 SP4 and earlier, 7.0 SP5 and earlier, and 6.1 SP7 and earlier allow remote attackers to cause a denial of service (server thread hang) via unknown attack …	NVD-CWE-Other	CVE-2005-4750	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

364783	7.5	HIGH	bea	weblogic_server	The vendor has released multiple advisories, as well as fixes to address these issues.	NVD-CWE-Other	CVE-2005-4750	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

364784	5.0	MEDIUM	bea	weblogic_server	BEA WebLogic Server and WebLogic Express 8.1 and 7.0, during a migration across operating system platforms, do not warn the administrative user about platform differences in URLResource case sensitiv…	NVD-CWE-Other	CVE-2005-4759	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

364785	1.2	LOW	bea	weblogic_server	BEA WebLogic Server and WebLogic Express 8.1 SP4 and earlier, 7.0 SP5 and earlier, and 6.1 SP7 and earlier log the Java command line at server startup, which might include sensitive information (pass…	NVD-CWE-Other	CVE-2005-4761	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

364786	1.2	LOW	bea	weblogic_server	An attacker must have read access to the server log to see the sensitive values.	NVD-CWE-Other	CVE-2005-4761	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

364787	7.2	HIGH	bea	weblogic_server	BEA WebLogic Server and WebLogic Express 8.1 SP4 and earlier, 7.0 SP6 and earlier, and 6.1 SP7 and earlier sometimes stores the boot password in the registry in cleartext, which might allow local use…	NVD-CWE-Other	CVE-2005-4762	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

364788	7.5	HIGH	bea	weblogic_server	BEA WebLogic Server and WebLogic Express 8.1 SP4 and earlier, 7.0 SP6 and earlier, and 6.1 SP7 and earlier, when Internet Inter-ORB Protocol (IIOP) is used, sometimes include a password in an excepti…	NVD-CWE-Other	CVE-2005-4763	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

364789	7.8	HIGH	bea	weblogic_server	BEA WebLogic Server and WebLogic Express 9.0, 8.1, and 7.0 lock out the admin user account after multiple incorrect password guesses, which allows remote attackers who know or guess the admin account…	NVD-CWE-Other	CVE-2005-4764	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

364790	7.6	HIGH	bea	weblogic_server	BEA WebLogic Server and WebLogic Express 8.1 SP4 and earlier and 7.0 SP6 and earlier, when using the weblogic.Deployer command with the t3 protocol, does not use the secure t3s protocol even when an …	NVD-CWE-Other	CVE-2005-4765	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

364791	7.6	HIGH	bea	weblogic_server	Condition: when using the weblogic.Deployer command with the t3 protocol.	NVD-CWE-Other	CVE-2005-4765	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

364792	5.4	MEDIUM	bea	weblogic_server	BEA WebLogic Server and WebLogic Express 8.1 SP4 and earlier, and 7.0 SP5 and earlier, do not encrypt multicast traffic, which might allow remote attackers to read sensitive cluster synchronization m…	NVD-CWE-Other	CVE-2005-4766	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

364793	5.1	MEDIUM	bea	weblogic_server	BEA WebLogic Server and WebLogic Express 8.1 SP5 and earlier, and 7.0 SP6 and earlier, when using username/password authentication, does not lock out a username after the maximum number of invalid lo…	NVD-CWE-Other	CVE-2005-4767	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

364794	7.5	HIGH	tux_racer	tuxbank	SQL injection vulnerability in manage_account.php in Tux Racer TuxBank 0.7x and 0.8 allows remote attackers to execute arbitrary SQL commands via the id parameter in a manageaccount action to index.p…	NVD-CWE-Other	CVE-2005-4768	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

364795	7.5	HIGH	-	-	SQL injection vulnerability in addrbook.php in Belchior Foundry vCard PRO 3.1 allows remote attackers to execute arbitrary SQL commands via the addr_id parameter. NOTE: the provenance of this inform…	NVD-CWE-Other	CVE-2005-4769	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

364796	7.5	HIGH	accelerated_enterprise_solutions	accelerated_e_solutions	SQL injection vulnerability in an unspecified Accelerated Enterprise Solutions product, possibly Accelerated E Solutions, allows remote attackers to execute arbitrary SQL commands via the password pa…	NVD-CWE-Other	CVE-2005-4770	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

364797	4.6	MEDIUM	-	-	Trusted Mobility Agent PC Policy in Trust Digital Trusted Mobility Suite provides a cancel button that bypasses the domain-authentication prompt, which allows local users to sync a handheld (PDA) dev…	NVD-CWE-Other	CVE-2005-4771	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

364798	6.4	MEDIUM	suse	suse_linux_openexchange_server suse_linux_school_server suse_linux_standard_server suse_sled_beagle suse_linux	liby2util in Yet another Setup Tool (YaST) in SUSE Linux before 20051007 preserves permissions and ownerships when copying a remote repository, which might allow local users to read or modify sensiti…	NVD-CWE-Other	CVE-2005-4772	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

364799	5.0	MEDIUM	michael_scholz	contineo	Michael Scholz and Sebastian Stein Contineo 2.0, when the admin account lacks an e-mail address attribute, displays the password hash in a warning upon page reload, which might allow remote attackers…	NVD-CWE-Other	CVE-2005-4775	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

364800	5.0	MEDIUM	michael_scholz	contineo	This vulnerability is addressed in the following product release: Michael Scholz, Contineo, 2.1 Beta 1	NVD-CWE-Other	CVE-2005-4775	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm