Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
222901 6.5 警告 sql-ledger - SQL-Ledger の delete サブルーチンにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-3582 2012-12-20 19:28 2009-12-23 Show GitHub Exploit DB Packet Storm
222902 3.5 注意 sql-ledger - SQL-Ledger におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-3581 2012-12-20 19:28 2009-12-23 Show GitHub Exploit DB Packet Storm
222903 6.8 警告 sql-ledger - SQL-Ledger の am.pl におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2009-3580 2012-12-20 19:28 2009-12-23 Show GitHub Exploit DB Packet Storm
222904 10 危険 tatsuhiro tsujikawa - aria の DHTRoutingTableDeserializer.cc におけるバッファオーバーフローの脆弱性 CWE-noinfo
情報不足 		CVE-2009-3575 2012-12-20 19:28 2009-10-7 Show GitHub Exploit DB Packet Storm
222905 9.3 危険 tony million - Tuniac におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2009-3574 2012-12-20 19:28 2009-10-6 Show GitHub Exploit DB Packet Storm
222906 2.6 注意 xerver - Xerver HTTP Server におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-3562 2012-12-20 19:28 2009-10-5 Show GitHub Exploit DB Packet Storm
222907 5 警告 xerver - Xerver HTTP Server におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2009-3561 2012-12-20 19:28 2009-10-5 Show GitHub Exploit DB Packet Storm
222908 2.1 注意 レッドハット - Red Hat JBoss Enterprise Application Platform の Twiddle における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2009-3554 2012-12-20 19:28 2009-12-9 Show GitHub Exploit DB Packet Storm
222909 5 警告 Wireshark - Wireshark の SMB 解析子におけるサービス運用妨害 (DoS) の脆弱性 CWE-189
数値処理の問題 		CVE-2009-3551 2012-12-20 19:28 2009-10-26 Show GitHub Exploit DB Packet Storm
222910 5 警告 Wireshark - Wireshark の Paltalk 解析子におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2009-3549 2012-12-20 19:28 2009-10-26 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 25, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
279131 - libpng libpng Off-by-one error in ICC profile chunk handling in the png_set_iCCP function in pngset.c in libpng before 1.0.29 beta1 and 1.2.x before 1.2.21 beta1 allows remote attackers to cause a denial of servic… CWE-189
Numeric Errors 		CVE-2007-5266 2018-10-26 23:11 2007-10-9 Show GitHub Exploit DB Packet Storm
279132 - libpng
canonical 		libpng
ubuntu_linux 		pngrtran.c in libpng before 1.0.29 and 1.2.x before 1.2.21 use (1) logical instead of bitwise operations and (2) incorrect comparisons, which might allow remote attackers to cause a denial of service… NVD-CWE-noinfo
CVE-2007-5268 2018-10-26 23:11 2007-10-9 Show GitHub Exploit DB Packet Storm
279133 - apple
microsoft 		mac_os_x
windows_vista
windows_xp 		Heap-based buffer overflow in Apple QuickTime before 7.3 allows remote attackers to execute arbitrary code via malformed elements when parsing (1) Poly type (0x0070 through 0x0074) and (2) PackBitsRg… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2007-4676 2018-10-26 23:09 2007-11-8 Show GitHub Exploit DB Packet Storm
279134 - apple
microsoft 		mac_os_x
windows_vista
windows_xp 		Heap-based buffer overflow in Apple QuickTime before 7.3 allows remote attackers to execute arbitrary code via an invalid color table size when parsing the color table atom (CTAB) in a movie file, re… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2007-4677 2018-10-26 23:08 2007-11-8 Show GitHub Exploit DB Packet Storm
279135 - apple mac_os_x CFFTP in CFNetwork for Apple Mac OS X 10.4 through 10.4.10 allows remote FTP servers to force clients to connect to other hosts via crafted responses to FTP PASV commands. CWE-264
Permissions, Privileges, and Access Controls 		CVE-2007-4679 2018-10-26 23:06 2007-11-15 Show GitHub Exploit DB Packet Storm
279136 - php
debian
canonical 		php
debian_linux
ubuntu_linux 		Multiple integer overflows in PHP 4 before 4.4.8, and PHP 5 before 5.2.4, allow remote attackers to obtain sensitive information (memory contents) or cause a denial of service (thread crash) via a la… CWE-189
CWE-119
Numeric Errors
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2007-4657 2018-10-26 23:05 2007-09-5 Show GitHub Exploit DB Packet Storm
279137 - apple
microsoft 		mac_os_x
windows_vista
windows_xp 		Heap-based buffer overflow in the QuickTime VR extension 7.2.0.240 in QuickTime.qts in Apple QuickTime before 7.3 allows remote attackers to execute arbitrary code via a QTVR (QuickTime Virtual Reali… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2007-4675 2018-10-26 23:05 2007-11-8 Show GitHub Exploit DB Packet Storm
279138 - cisco ios Cisco IOS 12.2E, 12.2F, and 12.2S places a "no login" line into the VTY configuration when an administrator makes certain changes to a (1) VTY/AUX or (2) CONSOLE setting on a device without AAA enabl… CWE-287
Improper Authentication 		CVE-2007-4632 2018-10-26 23:04 2007-09-1 Show GitHub Exploit DB Packet Storm
279139 - bea weblogic_server The SSL server implementation in BEA WebLogic Server 7.0 Gold through SP7, 8.1 Gold through SP6, 9.0, 9.1, 9.2 Gold through MP1, and 10.0 sometimes selects the null cipher when no other cipher is com… NVD-CWE-Other
CVE-2007-4616 2018-10-26 23:03 2007-08-31 Show GitHub Exploit DB Packet Storm
279140 - bea weblogic_server Unspecified vulnerability in BEA WebLogic Server 6.1 Gold through SP7, 7.0 Gold through SP7, and 8.1 Gold through SP4 allows remote attackers to cause a denial of service (server thread hang) via uns… NVD-CWE-noinfo
CWE-399
 Resource Management Errors 		CVE-2007-4617 2018-10-26 23:03 2007-08-31 Show GitHub Exploit DB Packet Storm