Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
215231 6.8 警告 Mozilla Foundation - Mozilla Firefox および SeaMonkey における同一生成元ポリシーを回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2014-1502 2014-03-20 14:36 2014-03-18 Show GitHub Exploit DB Packet Storm
215232 5.8 警告 Mozilla Foundation - Android 上で稼働する Mozilla Firefox における同一生成元ポリシーを回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2014-1501 2014-03-20 14:36 2014-03-18 Show GitHub Exploit DB Packet Storm
215233 5 警告 Mozilla Foundation - Mozilla Firefox および SeaMonkey におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2014-1500 2014-03-20 14:36 2014-03-18 Show GitHub Exploit DB Packet Storm
215234 5.8 警告 Mozilla Foundation - Mozilla Firefox および SeaMonkey におけるドメイン名を偽装される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2014-1499 2014-03-20 14:36 2014-03-18 Show GitHub Exploit DB Packet Storm
215235 5 警告 Mozilla Foundation - Mozilla Firefox および SeaMonkey の crypto.generateCRMFRequest メソッドにおけるサービス運用妨害 (DoS) の脆弱性 CWE-20
CWE-310
CVE-2014-1498 2014-03-20 14:36 2014-03-18 Show GitHub Exploit DB Packet Storm
215236 9.3 危険 Mozilla Foundation - Mozilla Firefox OS の DeviceStorage API におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2014-1507 2014-03-20 14:36 2014-03-18 Show GitHub Exploit DB Packet Storm
215237 6.4 警告 Mozilla Foundation - Android 上で稼働する Mozilla Firefox の Android 版クラッシュレポーターにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2014-1506 2014-03-20 14:36 2014-03-18 Show GitHub Exploit DB Packet Storm
215238 6.9 警告 Mozilla Foundation - 複数の Mozilla 製品における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2014-1496 2014-03-20 14:36 2014-03-18 Show GitHub Exploit DB Packet Storm
215239 9.3 危険 Mozilla Foundation - Mozilla Firefox および SeaMonkey のブラウザエンジンにおけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2014-1494 2014-03-20 14:36 2014-03-18 Show GitHub Exploit DB Packet Storm
215240 4.3 警告 オラクル - Oracle Java SE および JavaFX における JavaFX に関する脆弱性 CWE-noinfo
情報不足 		CVE-2014-0382 2014-03-19 16:52 2014-01-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 22, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
289241 - webspell webspell SQL injection vulnerability in printview.php in webSPELL 4.01.02 and earlier allows remote attackers to execute arbitrary SQL commands via the topic parameter, a different vector than CVE-2007-1019, … CWE-89
SQL Injection 		CVE-2007-1163 2017-10-11 10:31 2007-03-3 Show GitHub Exploit DB Packet Storm
289242 - dbscripts dbguestbook Multiple PHP remote file inclusion vulnerabilities in DBGuestbook 1.1 allow remote attackers to execute arbitrary PHP code via a URL in the dbs_base_path parameter to (1) utils.php, (2) guestbook.php… CWE-94
Code Injection 		CVE-2007-1165 2017-10-11 10:31 2007-03-3 Show GitHub Exploit DB Packet Storm
289243 - dzcp dev\!l\'z_clanportal inc/filebrowser/browser.php in deV!L`z Clanportal (DZCP) 1.4.5 and earlier allows remote attackers to obtain MySQL data via the inc/mysql.php value of the file parameter. CWE-200
Information Exposure 		CVE-2007-1167 2017-10-11 10:31 2007-03-3 Show GitHub Exploit DB Packet Storm
289244 - dzcp dev\!l\'z_clanportal This vulnerability is addressed in the following product release: 1.4.6 CWE-200
Information Exposure 		CVE-2007-1167 2017-10-11 10:31 2007-03-3 Show GitHub Exploit DB Packet Storm
289245 - bell_labs plan_9 Integer overflow in the envwrite function in the Alcatel-Lucent Bell Labs Plan 9 kernel allows local users to overwrite certain memory addresses with kernel memory via a large n argument, as demonstr… NVD-CWE-Other
CVE-2007-1189 2017-10-11 10:31 2007-03-3 Show GitHub Exploit DB Packet Storm
289246 - dxmsoft xm_easy_personal_ftp_server Multiple buffer overflows in XM Easy Personal FTP Server 5.3.0 allow remote attackers to execute arbitrary code via unspecified vectors. NOTE: this issue might overlap CVE-2006-2225, CVE-2006-2226, o… NVD-CWE-Other
CVE-2007-1195 2017-10-11 10:31 2007-03-3 Show GitHub Exploit DB Packet Storm
289247 - tcpdump tcpdump Off-by-one buffer overflow in the parse_elements function in the 802.11 printer code (print-802_11.c) for tcpdump 3.9.5 and earlier allows remote attackers to cause a denial of service (crash) via a … CWE-189
CWE-119
Numeric Errors
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2007-1218 2017-10-11 10:31 2007-03-3 Show GitHub Exploit DB Packet Storm
289248 - admin_phorum admin_phorum PHP remote file inclusion vulnerability in actions/del.php in Admin Phorum 3.3.1a allows remote attackers to execute arbitrary PHP code via a URL in the include_path parameter. NVD-CWE-Other
CVE-2007-1219 2017-10-11 10:31 2007-03-3 Show GitHub Exploit DB Packet Storm
289249 - grok_developments netproxy Grok Developments NetProxy 4.03 allows remote attackers to bypass URL filtering via a request that omits "http://" from the URL and specifies the destination port (:80). NVD-CWE-Other
CVE-2007-1224 2017-10-11 10:31 2007-03-3 Show GitHub Exploit DB Packet Storm
289250 - grok_developments netproxy The connection log file implementation in Grok Developments NetProxy 4.03 does not record requests that omit http:// in a URL, which might allow remote attackers to conduct unauthorized activities an… NVD-CWE-Other
CVE-2007-1225 2017-10-11 10:31 2007-03-3 Show GitHub Exploit DB Packet Storm