Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
216691 8.3 危険 Samba Project - Samba の winbindd の librpc/rpc/dcerpc_util.c におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2013-4408 2014-01-17 11:06 2013-12-9 Show GitHub Exploit DB Packet Storm
216692 4.3 警告 Mozilla Foundation - Linux 上で稼働する Mozilla Firefox および SeaMonkey におけるクリップボードデータを読まれる脆弱性 CWE-200
情報漏えい 		CVE-2013-6672 2014-01-17 10:59 2013-12-10 Show GitHub Exploit DB Packet Storm
216693 6.4 警告 Nagios Enterprises, LLC - Nagios Core の contrib/daemonchk.c 内の process_cgivars 関数における重要な情報を取得される脆弱性 CWE-119
バッファエラー 		CVE-2013-7205 2014-01-16 17:55 2013-12-20 Show GitHub Exploit DB Packet Storm
216694 5.5 警告 Nagios Enterprises, LLC
The Icinga Project		 - Nagios Core および Icinga におけるプロセスメモリから重要な情報を取得される脆弱性 CWE-20
不適切な入力確認 		CVE-2013-7108 2014-01-16 17:52 2013-12-17 Show GitHub Exploit DB Packet Storm
216695 4.3 警告 オラクル - Oracle Supply Chain Products Suite の Oracle Demantra Demand Management における DM Others に関する脆弱性 CWE-noinfo
情報不足 		CVE-2014-0379 2014-01-16 17:47 2014-01-14 Show GitHub Exploit DB Packet Storm
216696 5.5 警告 オラクル - Oracle Supply Chain Products Suite の Oracle Demantra Demand Management における DM Others に関する脆弱性 CWE-noinfo
情報不足 		CVE-2014-0372 2014-01-16 17:46 2014-01-14 Show GitHub Exploit DB Packet Storm
216697 3.5 注意 オラクル - Oracle Supply Chain Products Suite の Oracle Demantra Demand Management における DM Others に関する脆弱性 CWE-noinfo
情報不足 		CVE-2014-0371 2014-01-16 17:46 2014-01-14 Show GitHub Exploit DB Packet Storm
216698 5.5 警告 オラクル - Oracle Supply Chain Products Suite の Oracle Agile Product Lifecycle Management for Process における Manage Data Cache に関する脆弱性 CWE-noinfo
情報不足 		CVE-2013-5897 2014-01-16 17:45 2014-01-14 Show GitHub Exploit DB Packet Storm
216699 4 警告 Apache Software Foundation - Apache CloudStack におけるネットワーク ACL を一覧表示される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2014-0031 2014-01-16 17:19 2014-01-10 Show GitHub Exploit DB Packet Storm
216700 6.9 警告 クアルコム
Android for MSM		 - MSM デバイス用 Qualcomm Innovation Center Android コントリビューションなどで使用される Linux Kernel 用 MSM カメラドライバにおける権限を取得される脆弱性 CWE-20
不適切な入力確認 		CVE-2013-6123 2014-01-16 16:48 2013-10-11 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 25, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
299711 - php_file_sharing_system php_file_sharing_system Directory traversal vulnerability in index.php in PHP File Sharing System 1.5.1 allows remote attackers to list or create arbitrary directories, or delete arbitrary files, as demonstrated by listing … CWE-22
Path Traversal 		CVE-2007-5454 2017-07-29 10:33 2007-10-15 Show GitHub Exploit DB Packet Storm
299712 - itirou_maruta
mozilla 		mouseoverdictionary
firefox 		Cross-site scripting (XSS) vulnerability in the sidebar HTML page in the MouseoverDictionary before 0.6.2 extension for Mozilla Firefox allows remote attackers to inject arbitrary web script or HTML … CWE-79
Cross-site Scripting 		CVE-2007-5459 2017-07-29 10:33 2007-10-15 Show GitHub Exploit DB Packet Storm
299713 - sun solaris Unspecified vulnerability in the Sun Solaris RPC services library (librpcsvc) on Solaris 8 through 10 allows remote attackers to cause a denial of service (mountd crash) via unspecified packets to a … CWE-20
 Improper Input Validation  		CVE-2007-5462 2017-07-29 10:33 2007-10-16 Show GitHub Exploit DB Packet Storm
299714 - cisco call_manager Cisco CallManager 5.1.1.3000-5 does not verify the Digest authentication header URI against the Request URI in SIP messages, which allows remote attackers to use sniffed Digest authentication credent… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2007-5468 2017-07-29 10:33 2007-10-16 Show GitHub Exploit DB Packet Storm
299715 - suse suse_linux libgssapi before 0.6-13.7, as used by the ISC BIND named daemon in SUSE Linux Enterprise Server 10 SP 1, terminates upon an initialization error, which allows remote attackers to cause a denial of se… NVD-CWE-Other
CVE-2007-5471 2017-07-29 10:33 2007-10-16 Show GitHub Exploit DB Packet Storm
299716 - mono mono StaticFileHandler.cs in System.Web in Mono before 1.2.5.2, when running on Windows, allows remote attackers to obtain source code of sensitive files via a request containing a trailing (1) space or (… CWE-200
Information Exposure 		CVE-2007-5473 2017-07-29 10:33 2007-10-19 Show GitHub Exploit DB Packet Storm
299717 - adobe
opera 		flash_player
opera_browser 		Unspecified vulnerability in Adobe Flash Player 9.0.47.0 and earlier, when running on Opera before 9.24 on Mac OS X, has unknown "Highly Severe" impact and unknown attack vectors. NVD-CWE-noinfo
CVE-2007-5476 2017-07-29 10:33 2007-10-18 Show GitHub Exploit DB Packet Storm
299718 - innovaage innovashop Multiple cross-site scripting (XSS) vulnerabilities in InnovaAge InnovaShop allow remote attackers to inject arbitrary web script or HTML via the (1) msg parameter to msg.jsp, and the (2) contentid p… CWE-79
Cross-site Scripting 		CVE-2007-5480 2017-07-29 10:33 2007-10-17 Show GitHub Exploit DB Packet Storm
299719 - distributed_checksum_clearinghouse dcc Distributed Checksum Clearinghouse (DCC) 1.3.65 allows remote attackers to cause a denial of service (crash) via a "SOCKS flood." NVD-CWE-Other
CVE-2007-5481 2017-07-29 10:33 2007-10-17 Show GitHub Exploit DB Packet Storm
299720 - sun storagetek_3510
storedge 		Unspecified vulnerability in the FTP service in Sun StorEdge/StorageTek 3510 FC Array with firmware before 4.21 allows remote attackers, with access to the Ethernet management interface, to cause a d… NVD-CWE-noinfo
CVE-2007-5482 2017-07-29 10:33 2007-10-17 Show GitHub Exploit DB Packet Storm