Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
219421 5 警告 Jason A. Donenfeld
Lars Hjemli		 - cgit の ui-summary.c の cgit_parse_readme 関数におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2013-2117 2013-08-13 12:29 2013-05-27 Show GitHub Exploit DB Packet Storm
219422 5 警告 シスコシステムズ - Cisco Finesse の Web インタフェースにおける絶対パストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2013-3457 2013-08-13 11:08 2013-08-12 Show GitHub Exploit DB Packet Storm
219423 4.3 警告 OpenEMR - OpenEMR の interface/main/onotes/office_comments_full.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-4620 2013-08-13 10:46 2013-06-10 Show GitHub Exploit DB Packet Storm
219424 6.5 警告 OpenEMR - OpenEMR における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2013-4619 2013-08-13 10:41 2013-06-10 Show GitHub Exploit DB Packet Storm
219425 9.3 危険 F5 Networks - F5 BIG-IP APM および FirePass などの製品におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2013-0150 2013-08-13 10:27 2013-06-26 Show GitHub Exploit DB Packet Storm
219426 4.3 警告 Alkacon Software - Alkacon OpenCms におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-4600 2013-08-13 10:08 2013-07-10 Show GitHub Exploit DB Packet Storm
219427 10 危険 オラクル - Oracle Java SE および JavaFX の Java Runtime Environment におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2013-0402 2013-08-12 17:55 2013-03-8 Show GitHub Exploit DB Packet Storm
219428 4.3 警告 オラクル - Oracle Java SE の Java Runtime Environment における Deployment の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2013-2416 2013-08-12 17:48 2013-04-16 Show GitHub Exploit DB Packet Storm
219429 5 警告 オラクル - Oracle Java SE の Java Runtime Environment における JavaFX の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2013-2438 2013-08-12 17:47 2013-04-16 Show GitHub Exploit DB Packet Storm
219430 5 警告 オラクル - Oracle Java SE および JavaFX の Java Runtime Environment における JavaFX の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2013-1564 2013-08-12 17:46 2013-04-16 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 23, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
277961 - bea weblogic_server SSL libraries in BEA WebLogic Server 6.1 Gold through SP7, 7.0 Gold through SP7, and 8.1 Gold through SP5 might allow remote attackers to obtain plaintext from an SSL stream via a man-in-the-middle a… CWE-310
Cryptographic Issues 		CVE-2007-4613 2018-10-26 23:01 2007-08-31 Show GitHub Exploit DB Packet Storm
277962 - opensymphony xwork Struts support in OpenSymphony XWork before 1.2.3, and 2.x before 2.0.4, as used in WebWork and Apache Struts, recursively evaluates all input as an Object-Graph Navigation Language (OGNL) expression… NVD-CWE-Other
CVE-2007-4556 2018-10-26 23:00 2007-08-28 Show GitHub Exploit DB Packet Storm
277963 - php php The (1) MySQL and (2) MySQLi extensions in PHP 4 before 4.4.8, and PHP 5 before 5.2.4, allow remote attackers to bypass safe_mode and open_basedir restrictions via MySQL LOCAL INFILE operations, as d… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2007-3997 2018-10-26 22:59 2007-09-5 Show GitHub Exploit DB Packet Storm
277964 - php
debian
canonical 		php
debian_linux
ubuntu_linux 		The wordwrap function in PHP 4 before 4.4.8, and PHP 5 before 5.2.4, does not properly use the breakcharlen variable, which allows remote attackers to cause a denial of service (divide-by-zero error … CWE-20
 Improper Input Validation  		CVE-2007-3998 2018-10-26 22:59 2007-09-5 Show GitHub Exploit DB Packet Storm
277965 - apple
microsoft 		mac_os_x
windows_vista
windows_xp 		Unspecified vulnerability in QuickTime for Java in Apple QuickTime before 7.3 allows remote attackers to execute arbitrary code via untrusted Java applets that gain privileges via unspecified vectors. NVD-CWE-noinfo
CVE-2007-3751 2018-10-26 22:58 2007-11-8 Show GitHub Exploit DB Packet Storm
277966 - oracle jdk The Javadoc tool in Sun JDK 6 and JDK 5.0 Update 11 can generate HTML documentation pages that contain cross-site scripting (XSS) vulnerabilities, which allows remote attackers to inject arbitrary we… CWE-79
Cross-site Scripting 		CVE-2007-3503 2018-10-26 22:56 2007-06-30 Show GitHub Exploit DB Packet Storm
277967 - php php The substr_count function in PHP 5.2.1 and earlier allows context-dependent attackers to obtain sensitive information via unspecified vectors, a different affected function than CVE-2007-1375. CWE-200
Information Exposure 		CVE-2007-2748 2018-10-20 04:03 2007-05-18 Show GitHub Exploit DB Packet Storm
277968 - linux
debian
canonical 		linux_kernel
debian_linux
ubuntu_linux 		Integer underflow in the cpuset_tasks_read function in the Linux kernel before 2.6.20.13, and 2.6.21.x before 2.6.21.4, when the cpuset filesystem is mounted, allows local users to obtain kernel memo… CWE-189
Numeric Errors 		CVE-2007-2875 2018-10-20 04:03 2007-06-12 Show GitHub Exploit DB Packet Storm
277969 - apple mac_os_x Cisco Trust Agent (CTA) before 2.1.104.0, when running on MacOS X, allows attackers with physical access to bypass authentication and modify System Preferences, including passwords, by invoking the A… CWE-287
Improper Authentication 		CVE-2007-3184 2018-10-20 04:03 2007-06-13 Show GitHub Exploit DB Packet Storm
277970 - mysql
debian
canonical 		mysql
debian_linux
ubuntu_linux 		MySQL before 4.1.23, 5.0.x before 5.0.42, and 5.1.x before 5.1.18 does not require the DROP privilege for RENAME TABLE statements, which allows remote authenticated users to rename arbitrary tables. NVD-CWE-Other
CVE-2007-2691 2018-10-20 04:00 2007-05-16 Show GitHub Exploit DB Packet Storm