NVD脆弱性情報トップ

検索メニュー表示

ベンダー名
プロダクト・サービス名
タイトル
CVE
CRITICAL
HIGH
MEDIUM
LOW
CWE
公表日降順
更新日降順
表示数

NVD（National Vulnerability Database）で管理されている脆弱性の一覧を検索することが出来ます。
JVN（Japan Vulnerability Note）より先に脆弱性情報が更新される事が多いため、JVNに未記載の脆弱性が更新されている場合があります。

JVN（Japan Vulnerability Note）に関連した脆弱性がある場合は詳細画面で情報を表示します。

CWEで検索する場合は、CWE概要を参照して、CWE番号を確認してください。

CRITICAL
HIGH
MEDIUM
LOW

更新日:2026年6月17日4:19

No	CVSS	レベル攻撃区分	ベンダー名	プロダクト名	タイトル	CWE	CVE	更新日	公表日	影響表示	Exploit PoC 検索
357551	5.0	MEDIUM	apple	safari	Apple Safari 2.0.2 (aka 416.12) allows remote attackers to spoof the URL in the status bar via the title in an image in a link to a trusted site within a form to the malicious site. NOTE: the proven…	NVD-CWE-Other	CVE-2005-4678	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

357552	5.0	MEDIUM	microsoft	ie	Internet Explorer 6 for Windows XP Service Pack 2 allows remote attackers to spoof the URL in the status bar via the title in an image in a link to a trusted site within a form to the malicious site.	NVD-CWE-Other	CVE-2005-4679	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

357553	5.0	MEDIUM	punbb	punbb	PunBB 1.2.9, when used alone or with F-ART BLOG:CMS, includes config.php before calling the unregister_globals function, which allows attackers to obtain unspecified sensitive information.	NVD-CWE-Other	CVE-2005-4686	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

357554	5.0	MEDIUM	f-art_agency punbb	blog_cms punbb	PunBB 1.2.9, used alone or with F-ART BLOG:CMS, may trust a client's IP address as specified in the X-Forwarded-For HTTP header rather than the TCP/IP stack, which allows remote attackers to misrepre…	NVD-CWE-Other	CVE-2005-4687	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

357555	5.0	MEDIUM	punbb	punbb	PunBB 1.2.9 does not require password entry when changing the e-mail address in an account's profile, which might allow an attacker to make an address change via a hijacked login session.	NVD-CWE-Other	CVE-2005-4688	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

357556	5.0	MEDIUM	-	-	Six Apart Movable Type 3.16 stores account names and password hashes in a cookie, which allows remote attackers to login to an account by sniffing the cookie.	NVD-CWE-Other	CVE-2005-4689	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

357557	2.1	LOW	six_apart	movable_type	Six Apart Movable Type 3.16 allows local users with blog-creation privileges to create or overwrite arbitrary files of certain types (such as HTML and image files) by selecting an arbitrary directory…	NVD-CWE-Other	CVE-2005-4690	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

357558	2.1	LOW	netbsd	netbsd	imake in NetBSD before 2.0.3, NetBSD-current before 12 September 2005, certain versions of X.Org, and certain versions of XFree86 allows local users to overwrite arbitrary files via a symlink attack …	NVD-CWE-Other	CVE-2005-4691	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

357559	7.5	HIGH	mroovca	mroovca_stats	Unspecified vulnerability in mroovca stats (mroovcastats) before 0.4.5b has unknown attack vectors and impact, related to cookies.	NVD-CWE-Other	CVE-2005-4692	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

357560	5.0	MEDIUM	gaim-encryption	gaim-encryption	Gaim-Encryption 2.38-1 on Debian Linux allows remote attackers to cause a denial of service (crash) via a crafted message from an ICQ buddy, possibly involving the GE_received_key function in keys.c.	NVD-CWE-Other	CVE-2005-4693	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

357561	6.4	MEDIUM	ipbproarcade	ipbproarcade	SQL injection vulnerability in the favorites module in index.php in IPBProArcade 2.5.2 allows remote attackers to inject arbitrary SQL commands via the gameid parameter. NOTE: the provenance of this…	NVD-CWE-Other	CVE-2005-4702	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

357562	5.0	MEDIUM	bea	weblogic_server	Unspecified vulnerability in BEA WebLogic Server and WebLogic Express 8.1 through SP3, 7.0 through SP6, and 6.1 through SP7, when SSL is intended to be used, causes an unencrypted protocol to be used…	NVD-CWE-Other	CVE-2005-4704	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

357563	5.0	MEDIUM	bea	weblogic_server	BEA WebLogic Server and WebLogic Express 8.1 through SP4, 7.0 through SP6, and 6.1 through SP7, when a Java client application creates an SSL connection to the server after it has already created an …	NVD-CWE-Other	CVE-2005-4705	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

357564	5.0	MEDIUM	php_handicapper	php_handicapper	CRLF injection vulnerability in process_signup.php in PHP Handicapper allows remote attackers to inject arbitrary HTTP headers via CRLF sequences in the login parameter. NOTE: the vendor has dispute…	NVD-CWE-Other	CVE-2005-4712	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

357565	5.0	MEDIUM	-	-	Hitachi TP1/Server Base and TP1/NET/Library 2 on IBM AIX allow remote attackers to (1) cause a denial of service (OpenTP1 system outage) via invalid data to a port used by a system-server process, an…	NVD-CWE-Other	CVE-2005-4716	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

357566	5.0	MEDIUM	mozilla	firefox	Mozilla Firefox 1.0.7 and earlier on Linux allows remote attackers to cause a denial of service (client crash) via an IFRAME element with a large value of the WIDTH attribute, which triggers a proble…	NVD-CWE-Other	CVE-2005-4720	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

357567	7.5	HIGH	geeklog	geeklog	Geeklog before 1.3.11sr3 allows remote attackers to bypass intended access restrictions and comment on an arbitrary story or topic by guessing the story ID.	NVD-CWE-Other	CVE-2005-4725	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

357568	5.0	MEDIUM	mute	mute	MUTE 0.4 uses improper flood protection algorithms, which allows remote attackers to obtain sensitive information (privacy leak and search result data) by controlling a drop chain neighbor that is ne…	NVD-CWE-Other	CVE-2005-4726	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

357569	4.6	MEDIUM	debian	amaya	Untrusted search path vulnerability (RPATH) in amaya 9.2.1 on Debian GNU/Linux allows local users to gain privileges via a malicious Mesa library in the /home/anand directory.	NVD-CWE-Other	CVE-2005-4728	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

357570	10.0	HIGH	pear	text_password	Unspecified vulnerability in PEAR Text_Password 1.0 has unknown impact and attack vectors, related to "problematic seeding" of the random number generator, possibly predictable seeds.	NVD-CWE-Other	CVE-2005-4730	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

357571	5.0	MEDIUM	the_php_group	pear_html_quickform_controller	The Next action in PEAR HTML_QuickForm_Controller 1.0.4 includes the SID in the URL even when session.use_only_cookies is configured, which allows remote attackers to obtain the SID via an HTTP Refer…	NVD-CWE-Other	CVE-2005-4731	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

357572	5.0	MEDIUM	the_php_group	pear_html_quickform_controller	Upgrade to version 1.0.5 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.	NVD-CWE-Other	CVE-2005-4731	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

357573	4.3	MEDIUM	tux_racer	tuxbank	Multiple cross-site scripting (XSS) vulnerabilities in index.php in Tux Racer TuxBank 0.7x and 0.8 allow remote attackers to inject arbitrary web script or HTML via the (1) name and (2) description p…	NVD-CWE-Other	CVE-2005-4732	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

357574	4.9	MEDIUM	netbsd	netbsd	NetBSD 2.0 before 20050316 and NetBSD-current before 20050112 allow local users to cause a denial of service (infinite loop and system hang) by calling the F_CLOSEM fcntl with a parameter value of 0.	NVD-CWE-Other	CVE-2005-4733	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

357575	6.4	MEDIUM	rsa	authentication_agent_for_web	Stack-based buffer overflow in IISWebAgentIF.dll in RSA Authentication Agent for Web (aka SecurID Web Agent) 5.2 and 5.3 for IIS allows remote attackers to execute arbitrary code via a long url param…	NVD-CWE-Other	CVE-2005-4734	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

357576	6.8	MEDIUM	ibm	db2_universal_database	IBM DB2 Universal Database (UDB) 810 before 8.1 FP10 allows remote authenticated users to cause a denial of service (application crash) via (1) certain equality predicates that trigger self-removal, …	NVD-CWE-Other	CVE-2005-4735	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

357577	6.8	MEDIUM	ibm	db2_universal_database	IBM DB2 Universal Database (UDB) 820 before 8.2 FP10 allows remote authenticated users to cause a denial of service (disk consumption) via a hash join (hsjn) that triggers an infinite loop in sqlri_h…	NVD-CWE-Other	CVE-2005-4736	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

357578	7.5	HIGH	ibm	db2_universal_database	IBM DB2 Universal Database (UDB) 820 before ESE AIX 5765F4100 allows remote authenticated users to cause a denial of service (CPU consumption) by "abnormally" terminating a connection, which prevents…	NVD-CWE-Other	CVE-2005-4737	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

357579	7.5	HIGH	ibm	db2_universal_database	The vulnerabilities have been fixed in Version 8 FixPak 10 (Version 8.2 FixPak 3)	NVD-CWE-Other	CVE-2005-4737	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

357580	6.5	MEDIUM	ibm	db2_universal_database	IBM DB2 Universal Database (UDB) 810 before ESE AIX 5765F4100 does not ensure that a user has execute privileges before permitting object creation based on routines, which allows remote authenticated…	NVD-CWE-Other	CVE-2005-4738	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

357581	6.8	MEDIUM	ibm	db2_universal_database	IBM DB2 Universal Database (UDB) 820 before version 8 FixPak 10 (s050811) allows remote authenticated users to cause a denial of service (application crash) by using a table function for an instance …	NVD-CWE-Other	CVE-2005-4739	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

357582	4.0	MEDIUM	-	-	IBM DB2 Universal Database (UDB) 810 before version 8 FixPak 10 allows remote authenticated users to cause a denial of service (db2jd service crash) by "connecting from a downlevel client."	NVD-CWE-Other	CVE-2005-4740	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

357583	7.5	HIGH	netbsd	netbsd	NetBSD 1.6, NetBSD 2.0 through 2.1, and NetBSD-current before 20051031 allows local users to gain privileges by attaching a debugger to a setuid/setgid (P_SUGID) process that performs an exec without…	NVD-CWE-Other	CVE-2005-4741	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

357584	4.9	MEDIUM	pavel_kankovsky	echelog	Unspecified vulnerability in Echelog 0.6.2 allows attackers to "exploit function stacks on some architectures," with unknown impact and attack vectors.	NVD-CWE-Other	CVE-2005-4742	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

357585	6.8	MEDIUM	vwar	virtual_war	PHP remote file include vulnerability in functions_admin.php in Virtual War (VWar) 1.5.0 R10 allows remote attackers to include and execute arbitrary PHP code via unspecified attack vectors. NOTE: t…	NVD-CWE-Other	CVE-2005-4748	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

357586	7.5	HIGH	bea	weblogic_server	BEA WebLogic Server and WebLogic Express 8.1 SP4 and earlier, 7.0 SP5 and earlier, and 6.1 SP7 and earlier allow remote attackers to cause a denial of service (server thread hang) via unknown attack …	NVD-CWE-Other	CVE-2005-4750	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

357587	7.5	HIGH	bea	weblogic_server	The vendor has released multiple advisories, as well as fixes to address these issues.	NVD-CWE-Other	CVE-2005-4750	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

357588	5.0	MEDIUM	bea	weblogic_server	BEA WebLogic Server and WebLogic Express 8.1 and 7.0, during a migration across operating system platforms, do not warn the administrative user about platform differences in URLResource case sensitiv…	NVD-CWE-Other	CVE-2005-4759	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

357589	1.2	LOW	bea	weblogic_server	BEA WebLogic Server and WebLogic Express 8.1 SP4 and earlier, 7.0 SP5 and earlier, and 6.1 SP7 and earlier log the Java command line at server startup, which might include sensitive information (pass…	NVD-CWE-Other	CVE-2005-4761	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

357590	1.2	LOW	bea	weblogic_server	An attacker must have read access to the server log to see the sensitive values.	NVD-CWE-Other	CVE-2005-4761	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

357591	7.2	HIGH	bea	weblogic_server	BEA WebLogic Server and WebLogic Express 8.1 SP4 and earlier, 7.0 SP6 and earlier, and 6.1 SP7 and earlier sometimes stores the boot password in the registry in cleartext, which might allow local use…	NVD-CWE-Other	CVE-2005-4762	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

357592	7.5	HIGH	bea	weblogic_server	BEA WebLogic Server and WebLogic Express 8.1 SP4 and earlier, 7.0 SP6 and earlier, and 6.1 SP7 and earlier, when Internet Inter-ORB Protocol (IIOP) is used, sometimes include a password in an excepti…	NVD-CWE-Other	CVE-2005-4763	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

357593	7.8	HIGH	bea	weblogic_server	BEA WebLogic Server and WebLogic Express 9.0, 8.1, and 7.0 lock out the admin user account after multiple incorrect password guesses, which allows remote attackers who know or guess the admin account…	NVD-CWE-Other	CVE-2005-4764	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

357594	7.6	HIGH	bea	weblogic_server	BEA WebLogic Server and WebLogic Express 8.1 SP4 and earlier and 7.0 SP6 and earlier, when using the weblogic.Deployer command with the t3 protocol, does not use the secure t3s protocol even when an …	NVD-CWE-Other	CVE-2005-4765	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

357595	7.6	HIGH	bea	weblogic_server	Condition: when using the weblogic.Deployer command with the t3 protocol.	NVD-CWE-Other	CVE-2005-4765	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

357596	5.4	MEDIUM	bea	weblogic_server	BEA WebLogic Server and WebLogic Express 8.1 SP4 and earlier, and 7.0 SP5 and earlier, do not encrypt multicast traffic, which might allow remote attackers to read sensitive cluster synchronization m…	NVD-CWE-Other	CVE-2005-4766	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

357597	5.1	MEDIUM	bea	weblogic_server	BEA WebLogic Server and WebLogic Express 8.1 SP5 and earlier, and 7.0 SP6 and earlier, when using username/password authentication, does not lock out a username after the maximum number of invalid lo…	NVD-CWE-Other	CVE-2005-4767	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

357598	7.5	HIGH	tux_racer	tuxbank	SQL injection vulnerability in manage_account.php in Tux Racer TuxBank 0.7x and 0.8 allows remote attackers to execute arbitrary SQL commands via the id parameter in a manageaccount action to index.p…	NVD-CWE-Other	CVE-2005-4768	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

357599	7.5	HIGH	-	-	SQL injection vulnerability in addrbook.php in Belchior Foundry vCard PRO 3.1 allows remote attackers to execute arbitrary SQL commands via the addr_id parameter. NOTE: the provenance of this inform…	NVD-CWE-Other	CVE-2005-4769	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm

357600	7.5	HIGH	accelerated_enterprise_solutions	accelerated_e_solutions	SQL injection vulnerability in an unspecified Accelerated Enterprise Solutions product, possibly Accelerated E Solutions, allows remote attackers to execute arbitrary SQL commands via the password pa…	NVD-CWE-Other	CVE-2005-4770	2008-09-6 05:57	2005-12-31	表示	GitHub Exploit DB Packet Storm