Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
215251 5 警告 ownCloud - ownCloud の設定のローダにおける CSRF トークンおよびその他の重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2013-2086 2014-03-19 13:57 2013-05-12 Show GitHub Exploit DB Packet Storm
215252 6.5 警告 ownCloud - ownCloud における任意の API コマンドを実行される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-2048 2014-03-19 13:56 2013-04-27 Show GitHub Exploit DB Packet Storm
215253 2.1 注意 ownCloud - ownCloud のログインページにおけるパスワードを推測される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-2047 2014-03-19 13:55 2013-04-7 Show GitHub Exploit DB Packet Storm
215254 5.8 警告 ownCloud - ownCloud のログインページにおけるオープンリダイレクトの脆弱性 CWE-20
不適切な入力確認 		CVE-2013-2044 2014-03-19 13:54 2013-04-23 Show GitHub Exploit DB Packet Storm
215255 4 警告 ownCloud - ownCloud の apps/calendar/ajax/events.php における任意のカレンダーをダウンロードされる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-2043 2014-03-19 13:53 2013-04-22 Show GitHub Exploit DB Packet Storm
215256 3.5 注意 ownCloud - ownCloud におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-2042 2014-03-19 13:53 2013-04-30 Show GitHub Exploit DB Packet Storm
215257 3.5 注意 ownCloud - ownCloud におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-2041 2014-03-19 13:49 2013-04-22 Show GitHub Exploit DB Packet Storm
215258 3.5 注意 ownCloud - ownCloud におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-2040 2014-03-19 13:48 2013-04-22 Show GitHub Exploit DB Packet Storm
215259 4 警告 ownCloud - ownCloud Server の apps/files_trashbin/index.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2013-2085 2014-03-19 13:47 2013-05-6 Show GitHub Exploit DB Packet Storm
215260 4 警告 ownCloud - ownCloud の lib/files/view.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2013-2039 2014-03-19 13:46 2013-04-22 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 22, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
289261 - aj_square ajdating SQL injection vulnerability in view_profile.php in AJDating 1.0 allows remote attackers to execute arbitrary SQL commands via the user_id parameter. NVD-CWE-Other
CVE-2007-1297 2017-10-11 10:31 2007-03-7 Show GitHub Exploit DB Packet Storm
289262 - aj_square ajauction SQL injection vulnerability in subcat.php in AJ Auction 1.0 allows remote attackers to execute arbitrary SQL commands via the cate_id parameter. NVD-CWE-Other
CVE-2007-1298 2017-10-11 10:31 2007-03-7 Show GitHub Exploit DB Packet Storm
289263 - mani_stats_reader mani_stats_reader PHP remote file inclusion vulnerability in index.php in Mani Stats Reader 1.2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the ipath parameter. NVD-CWE-Other
CVE-2007-1299 2017-10-11 10:31 2007-03-7 Show GitHub Exploit DB Packet Storm
289264 - mailenable mailenable_enterprise
mailenable_professional 		Stack-based buffer overflow in the IMAP service in MailEnable Enterprise and Professional Editions 2.37 and earlier allows remote authenticated users to execute arbitrary code via a long argument to … NVD-CWE-Other
CVE-2007-1301 2017-10-11 10:31 2007-03-7 Show GitHub Exploit DB Packet Storm
289265 - weltennetz news-letterman PHP remote file inclusion vulnerability in eintrag.php in Weltennetz News-Letterman 1.1 allows remote attackers to execute arbitrary PHP code via a URL in the sqllog parameter. NVD-CWE-Other
CVE-2007-1340 2017-10-11 10:31 2007-03-9 Show GitHub Exploit DB Packet Storm
289266 - microsoft windows_explorer Microsoft Windows Explorer on Windows 2000 SP4 FR and XP SP2 FR, and possibly other versions and platforms, allows remote attackers to cause a denial of service (memory corruption and crash) via an O… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2007-1347 2017-10-11 10:31 2007-03-9 Show GitHub Exploit DB Packet Storm
289267 - linux linux_kernel The setsockopt function in the L2CAP and HCI Bluetooth support in the Linux kernel before 2.4.34.3 allows context-dependent attackers to read kernel memory and obtain sensitive information via unspec… NVD-CWE-Other
CVE-2007-1353 2017-10-11 10:31 2007-04-25 Show GitHub Exploit DB Packet Storm
289268 - postguestbook postguestbook PHP remote file inclusion vulnerability in styles/internal/header.php in the PostGuestbook 0.6.1 module for PHP-Nuke allows remote attackers to execute arbitrary PHP code via a URL in the tpl_pgb_mod… NVD-CWE-Other
CVE-2007-1372 2017-10-11 10:31 2007-03-10 Show GitHub Exploit DB Packet Storm
289269 - php php Integer overflow in the substr_compare function in PHP 5.2.1 and earlier allows context-dependent attackers to read sensitive memory via a large value in the length argument, a different vulnerabilit… NVD-CWE-Other
CVE-2007-1375 2017-10-11 10:31 2007-03-10 Show GitHub Exploit DB Packet Storm
289270 - php com_extensions The PHP COM extensions for PHP on Windows systems allow context-dependent attackers to execute arbitrary code via a WScript.Shell COM object, as demonstrated by using the Run method of this object to… NVD-CWE-Other
CVE-2007-1382 2017-10-11 10:31 2007-03-10 Show GitHub Exploit DB Packet Storm