Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
214981 6.5 警告 X.Org Foundation - X.Org X11 の xorg-server モジュールの dix/dixfonts.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2013-4396 2014-04-7 17:35 2013-10-8 Show GitHub Exploit DB Packet Storm
214982 2.6 注意 Quagga - Quagga の OSPFD API の new_msg_lsa_change_notify 関数におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2013-2236 2014-04-7 17:34 2013-07-28 Show GitHub Exploit DB Packet Storm
214983 5 警告 Apache Software Foundation - Apache HTTP Server 用 mod_fcgid モジュールにおけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2013-4365 2014-04-7 17:33 2013-09-29 Show GitHub Exploit DB Packet Storm
214984 2.6 注意 Apache Software Foundation - Apache Subversion 用 mod_dontdothat の is_this_legal 関数におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2013-4505 2014-04-7 17:32 2013-11-25 Show GitHub Exploit DB Packet Storm
214985 1.8 注意 Memcached - Memcached におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2013-7291 2014-04-7 17:23 2013-12-20 Show GitHub Exploit DB Packet Storm
214986 1.8 注意 Memcached - Memcached の items.c の do_item_get 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2013-7290 2014-04-7 17:21 2013-12-20 Show GitHub Exploit DB Packet Storm
214987 4.8 警告 Memcached - Memcached における認証を回避される脆弱性 CWE-287
不適切な認証
CVE-2013-7239 2014-04-7 17:20 2013-12-20 Show GitHub Exploit DB Packet Storm
214988 5 警告 The PHP Group
アップル
- PHP の SOAP パーサにおける任意のファイルを読まれる脆弱性 CWE-200
情報漏えい
CVE-2013-1643 2014-04-7 17:18 2013-02-21 Show GitHub Exploit DB Packet Storm
214989 7.5 危険 The PHP Group
アップル
- PHP の ext/soap/soap.c におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2013-1635 2014-04-7 17:17 2013-02-21 Show GitHub Exploit DB Packet Storm
214990 5.8 警告 シーメンス - Siemens SIMATIC S7-1500 CPU PLC デバイスのファームウェアにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2014-2249 2014-04-7 17:05 2014-03-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 25, 2026, 4:08 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
290101 - php
webspell
php
webspell
Directory traversal vulnerability in picture.php in WebSPELL 4.01.02 and earlier, when PHP before 4.3.0 is used, allows remote attackers to read arbitrary files via a .. (dot dot) in the id parameter. NVD-CWE-Other
CVE-2007-2369 2017-10-11 10:32 2007-05-1 Show GitHub Exploit DB Packet Storm
290102 - php
webspell
php
webspell
Successful exploitation requires that PHP before 4.3.0 is used. NVD-CWE-Other
CVE-2007-2369 2017-10-11 10:32 2007-05-1 Show GitHub Exploit DB Packet Storm
290103 - xoops john_mordo_jobs_module SQL injection vulnerability in index.php in the John Mordo Jobs 2.4 and earlier module for XOOPS allows remote attackers to execute arbitrary SQL commands via the cid parameter in a jobsview action. … NVD-CWE-Other
CVE-2007-2370 2017-10-11 10:32 2007-05-1 Show GitHub Exploit DB Packet Storm
290104 - gregory_kokanosky phpmynewsletter admin/index.php in Gregory Kokanosky phpMyNewsletter 0.8 beta5 and earlier provides access to configuration modification before login, which allows remote attackers to cause a denial of service (loss… NVD-CWE-Other
CVE-2007-2371 2017-10-11 10:32 2007-05-1 Show GitHub Exploit DB Packet Storm
290105 - gregory_kokanosky phpmynewsletter admin/send_mod.php in Gregory Kokanosky phpMyNewsletter 0.8 beta5 and earlier prints a Location header but does not exit when administrative credentials are missing, which allows remote attackers to … NVD-CWE-Other
CVE-2007-2372 2017-10-11 10:32 2007-05-1 Show GitHub Exploit DB Packet Storm
290106 - the_merchant_project the_merchant PHP remote file inclusion vulnerability in help/index.php in The Merchant (themerchant) 2.2 allows remote attackers to execute arbitrary PHP code via a URL in the show parameter. NVD-CWE-Other
CVE-2007-2424 2017-10-11 10:32 2007-05-2 Show GitHub Exploit DB Packet Storm
290107 - blackdot imageview Directory traversal vulnerability in fileview.php in Imageview 5.3 allows remote attackers to read arbitrary files via a .. (dot dot) in the album parameter. NVD-CWE-Other
CVE-2007-2425 2017-10-11 10:32 2007-05-2 Show GitHub Exploit DB Packet Storm
290108 - wildbits mygallery PHP remote file inclusion vulnerability in myfunctions/mygallerybrowser.php in the myGallery 1.4b4 and earlier plugin for WordPress allows remote attackers to execute arbitrary PHP code via a URL in … NVD-CWE-Other
CVE-2007-2426 2017-10-11 10:32 2007-05-2 Show GitHub Exploit DB Packet Storm
290109 - pnflashgames pnflashgames SQL injection vulnerability in index.php in the pnFlashGames 1.5 module for PostNuke allows remote attackers to execute arbitrary SQL commands via the cid parameter. NVD-CWE-Other
CVE-2007-2427 2017-10-11 10:32 2007-05-2 Show GitHub Exploit DB Packet Storm
290110 - tecnick.com tcexam shared/code/tce_tmx.php in TCExam 4.0.011 and earlier allows remote attackers to create arbitrary PHP files in cache/ by placing file contents and directory traversal manipulations into a SessionUser… NVD-CWE-Other
CVE-2007-2430 2017-10-11 10:32 2007-05-2 Show GitHub Exploit DB Packet Storm