Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
216161 5 警告 シスコシステムズ - Cisco Unified Communications Manager の log4jinit Web アプリケーションにおけるサービス運用妨害 (DoS) の脆弱性 CWE-287
不適切な認証
CVE-2014-0722 2014-02-14 14:43 2014-02-12 Show GitHub Exploit DB Packet Storm
216162 6.4 警告 atmail pty ltd - Atmail オープンソースの Atmail WebMail Client における CRLF インジェクションの脆弱性 CWE-94
コード・インジェクション
CVE-2012-1919 2014-02-14 14:18 2012-03-27 Show GitHub Exploit DB Packet Storm
216163 4.3 警告 atmail pty ltd - Atmail Webmail Server におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-2585 2014-02-14 12:03 2013-03-25 Show GitHub Exploit DB Packet Storm
216164 4.3 警告 IBM
オラクル
- Oracle Java SE および Java SE Embedded における JGSS に関する脆弱性 CWE-noinfo
情報不足
CVE-2013-5800 2014-02-13 18:10 2013-10-15 Show GitHub Exploit DB Packet Storm
216165 10 危険 IBM
オラクル
- Oracle Java SE および Java SE Embedded における Deployment に関する脆弱性 CWE-noinfo
情報不足
CVE-2013-5788 2014-02-13 17:56 2013-10-15 Show GitHub Exploit DB Packet Storm
216166 4.3 警告 PostgreSQL.org
アップル
FreeBSD
The PHP Group
- FreeBSD の crypt_des 関数におけるアクセス権を取得される脆弱性 CWE-310
暗号の問題
CVE-2012-2143 2014-02-13 17:48 2012-05-30 Show GitHub Exploit DB Packet Storm
216167 4.3 警告 synetics - synetics i-doit におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-1237 2014-02-13 17:45 2014-01-15 Show GitHub Exploit DB Packet Storm
216168 4.3 警告 synetics - synetics i-doit におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-1413 2014-02-13 17:42 2013-01-5 Show GitHub Exploit DB Packet Storm
216169 6.8 警告 Extended Module Player Project - libxmp の loaders/masi_load.c 内の get_dsmp 関数におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2013-1980 2014-02-13 17:20 2013-04-20 Show GitHub Exploit DB Packet Storm
216170 6.5 警告 doorGets - doorGets CMS の dg-admin/index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2014-1459 2014-02-13 17:20 2014-01-15 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 22, 2026, 4 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
299551 - pecl_zip
php
1.8.3
php
Stack-based buffer overflow in the zip:// URL wrapper in PECL ZIP 1.8.3 and earlier, as bundled with PHP 5.2.0 and 5.2.1, allows remote attackers to execute arbitrary code via a long zip:// URL, as d… NVD-CWE-Other
CVE-2007-1399 2017-07-29 10:30 2007-03-11 Show GitHub Exploit DB Packet Storm
299552 - edgewall_software trac Cross-site scripting (XSS) vulnerability in the "download wiki page as text" feature in Trac before 0.10.3.1, when Microsoft Internet Explorer is used, allows remote attackers to inject arbitrary web… NVD-CWE-Other
CVE-2007-1405 2017-07-29 10:30 2007-03-11 Show GitHub Exploit DB Packet Storm
299553 - mindtouch dekiwiki Cross-site scripting (XSS) vulnerability in skins/ace/popup-notopic.php in MindTouch OpenGarden DekiWiki before Gooseberry++ allows remote attackers to inject arbitrary web script or HTML via the mes… NVD-CWE-Other
CVE-2007-1418 2017-07-29 10:30 2007-03-13 Show GitHub Exploit DB Packet Storm
299554 - dproxy dproxy Stack-based buffer overflow in dproxy.c for dproxy 0.1 through 0.5 allows remote attackers to execute arbitrary code via a long DNS query packet to UDP port 53. NVD-CWE-Other
CVE-2007-1465 2017-07-29 10:30 2007-03-25 Show GitHub Exploit DB Packet Storm
299555 - horde horde_application_framework
imp
Argument injection vulnerability in the cleanup cron script in Horde Project Horde and IMP before Horde Application Framework 3.1.4 allows local users to delete arbitrary files and possibly gain priv… NVD-CWE-Other
CVE-2007-1474 2017-07-29 10:30 2007-03-17 Show GitHub Exploit DB Packet Storm
299556 - sun java_system_web_server Unspecified vulnerability in Sun Java System Web Server 6.0 and 6.1 before 20070315 allows remote attackers to "gain unauthorized access to data", possibly involving a sample application. NVD-CWE-noinfo
CVE-2007-1488 2017-07-29 10:30 2007-03-17 Show GitHub Exploit DB Packet Storm
299557 - gentoo linux The Linux Security Auditing Tool (LSAT) allows local users to overwrite arbitrary files via a symlink attack on temporary files, as demonstrated using /tmp/lsat1.lsat. NVD-CWE-Other
CVE-2007-1500 2017-07-29 10:30 2007-03-20 Show GitHub Exploit DB Packet Storm
299558 - openafs openafs The default configuration in OpenAFS 1.4.x before 1.4.4 and 1.5.x before 1.5.17 supports setuid programs within the local cell, which might allow attackers to gain privileges by spoofing a response t… CWE-16
Configuration
CVE-2007-1507 2017-07-29 10:30 2007-03-20 Show GitHub Exploit DB Packet Storm
299559 - cisco 7940_router
7960_router
Unspecified vulnerability in the Cisco IP Phone 7940 and 7960 running firmware before POS8-6-0 allows remote attackers to cause a denial of service via the Remote-Party-ID sipURI field in a SIP INVIT… NVD-CWE-Other
CVE-2007-1542 2017-07-29 10:30 2007-03-21 Show GitHub Exploit DB Packet Storm
299560 - roxio cineplayer Multiple stack-based buffer overflows in SonicDVDDashVRNav.dll in Roxio CinePlayer 3.2 allow remote attackers to execute arbitrary code via (1) unspecified long property values to SonicMediaPlayer.dl… NVD-CWE-Other
CVE-2007-1559 2017-07-29 10:30 2007-04-12 Show GitHub Exploit DB Packet Storm