Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
214851 7.5 危険 SAP - SAP CCMS エージェントの不特定の RFC 機能における任意のコマンドを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2013-7362 2014-04-15 12:18 2013-02-21 Show GitHub Exploit DB Packet Storm
214852 5 警告 SAP - SAP CMS および CM Services におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2013-7361 2014-04-15 12:18 2013-05-11 Show GitHub Exploit DB Packet Storm
214853 7.5 危険 SAP - SAP adminadapter における任意のファイルを読まれる脆弱性 CWE-noinfo
情報不足 		CVE-2013-7360 2014-04-15 12:17 2013-03-27 Show GitHub Exploit DB Packet Storm
214854 5 警告 SAP - SAP モバイルインフラストラクチャにおける重要なポート情報を取得される脆弱性 CWE-noinfo
情報不足 		CVE-2013-7359 2014-04-15 12:16 2013-06-5 Show GitHub Exploit DB Packet Storm
214855 5 警告 SAP - SAP Guided Procedures Archive Monitor におけるユーザ名などの情報を取得される脆弱性 CWE-noinfo
情報不足 		CVE-2013-7358 2014-04-15 12:16 2013-07-2 Show GitHub Exploit DB Packet Storm
214856 5 警告 SAP - SAP J2EE Engine の設定サービスにおける認証情報を取得される脆弱性 CWE-noinfo
情報不足 		CVE-2013-7357 2014-04-15 12:15 2013-07-2 Show GitHub Exploit DB Packet Storm
214857 5 警告 SAP - Oracle 用 SAP CCMS / Database Monitors におけるデータベースパスワードを取得される脆弱性 CWE-noinfo
情報不足 		CVE-2013-7356 2014-04-15 12:15 2013-08-8 Show GitHub Exploit DB Packet Storm
214858 7.5 危険 SAP - SAP BI Universal Data Integration における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2013-7355 2014-04-15 12:14 2013-11-8 Show GitHub Exploit DB Packet Storm
214859 - - The Prosody Team - ** 削除 ** Prosody におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2014-2750 2014-04-14 18:40 2014-04-2 Show GitHub Exploit DB Packet Storm
214860 5.8 警告 デル - Dell OpenManage Server Administrator におけるオープンリダイレクトの脆弱性 CWE-20
不適切な入力確認 		CVE-2013-0740 2014-04-14 18:36 2013-07-22 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 26, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
289191 - chernobile chernobile SQL injection vulnerability in default.asp in ChernobiLe 1.0 allows remote attackers to execute arbitrary SQL commands via the User (username) field. CWE-89
SQL Injection 		CVE-2007-0582 2017-10-19 10:30 2007-01-31 Show GitHub Exploit DB Packet Storm
289192 - forum_livre forum_livre SQL injection vulnerability in Forum Livre 1.0 allows remote attackers to execute arbitrary SQL commands via the user parameter to info_user.asp. NVD-CWE-Other
CVE-2007-0589 2017-10-19 10:30 2007-01-31 Show GitHub Exploit DB Packet Storm
289193 - forum_livre forum_livre Cross-site scripting (XSS) vulnerability in busca2.asp in Forum Livre 1.0 remote attackers to inject arbitrary web script or HTML via the palavra parameter. NVD-CWE-Other
CVE-2007-0590 2017-10-19 10:30 2007-01-31 Show GitHub Exploit DB Packet Storm
289194 - vu_le_an virtual_path PHP remote file inclusion vulnerability in configure.php in Vu Le An Virtual Path (VirtualPath) 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter. NVD-CWE-Other
CVE-2007-0591 2017-10-19 10:30 2007-01-31 Show GitHub Exploit DB Packet Storm
289195 - eclectic_designs cascadianfaq SQL injection vulnerability in index.php in Eclectic Designs CascadianFAQ 4.1 and earlier allows remote attackers to execute arbitrary SQL commands via the catid parameter. NVD-CWE-Other
CVE-2007-0631 2017-10-19 10:30 2007-02-1 Show GitHub Exploit DB Packet Storm
289196 - t-systems_solutions_for_research_gmbh mynews PHP remote file inclusion vulnerability in include/themes/themefunc.php in MyNews 4.2.2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the myNewsConf[path][sys][index]… NVD-CWE-Other
CVE-2007-0633 2017-10-19 10:30 2007-02-1 Show GitHub Exploit DB Packet Storm
289197 - galeria_zdjec galeria_zdjec Directory traversal vulnerability in zd_numer.php in Galeria Zdjec 3.0 and earlier allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the galeria parameter, as… NVD-CWE-Other
CVE-2007-0637 2017-10-19 10:30 2007-02-1 Show GitHub Exploit DB Packet Storm
289198 - vlad_alexa_mancini phpfootball show.php in Vlad Alexa Mancini PHPFootball 1.6 allows remote attackers to obtain sensitive information (database contents) via a % (percent) character in the dbfieldv parameter. NVD-CWE-Other
CVE-2007-0638 2017-10-19 10:30 2007-02-1 Show GitHub Exploit DB Packet Storm
289199 - guppy guppy Multiple static code injection vulnerabilities in error.php in GuppY 4.5.16 and earlier allow remote attackers to inject arbitrary PHP code into a .inc file in the data/ directory via (1) a REMOTE_AD… NVD-CWE-Other
CVE-2007-0639 2017-10-19 10:30 2007-02-1 Show GitHub Exploit DB Packet Storm
289200 - bloodshed_software dev-c\+\+ Stack-based buffer overflow in Bloodshed Dev-C++ 4.9.9.2 allows user-assisted remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a long line in … NVD-CWE-Other
CVE-2007-0643 2017-10-19 10:30 2007-02-1 Show GitHub Exploit DB Packet Storm