Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228991 4.6 警告 Sitaram Chamarty - gitolite におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2012-4506 2012-10-24 11:28 2012-10-10 Show GitHub Exploit DB Packet Storm
228992 4.4 警告 Michael Rash. - fwknop の client/fwknop.c におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2012-4436 2012-10-24 11:07 2012-09-4 Show GitHub Exploit DB Packet Storm
228993 4 警告 Michael Rash. - fwknop におけるサービス運用妨害 (サーバクラッシュ) の脆弱性 CWE-20
不適切な入力確認 		CVE-2012-4435 2012-10-24 11:07 2012-09-4 Show GitHub Exploit DB Packet Storm
228994 7.5 危険 OpenStack - OpenStack Object Storage (swift) における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2012-4406 2012-10-24 11:07 2012-09-13 Show GitHub Exploit DB Packet Storm
228995 7.5 危険 jCore - jCore の admin/index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2012-4232 2012-10-24 11:07 2012-08-12 Show GitHub Exploit DB Packet Storm
228996 4.3 警告 jCore - jCore の admin/index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-4231 2012-10-24 11:07 2012-08-12 Show GitHub Exploit DB Packet Storm
228997 5 警告 Django Software Foundation - Django におけるサービス運用妨害 (プロセスまたはスレッド消費) の脆弱性 CWE-119
バッファエラー 		CVE-2012-3444 2012-10-24 10:44 2012-07-30 Show GitHub Exploit DB Packet Storm
228998 4.3 警告 OTRS プロジェクト - OTRS にクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-4751 2012-10-23 16:09 2012-10-18 Show GitHub Exploit DB Packet Storm
228999 6.4 警告 サン・マイクロシステムズ - Oracle Java SE の Java Runtime Environment (JRE) におけるライブラリの処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2012-1726 2012-10-23 15:58 2012-06-12 Show GitHub Exploit DB Packet Storm
229000 7.8 危険 Novell - ZENworks Asset Management に情報漏えいの脆弱性 CWE-255
証明書・パスワード管理 		CVE-2012-4933 2012-10-23 15:17 2012-10-16 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 25, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
284661 - emc replistor Multiple heap-based buffer overflows in EMC RepliStor 6.2 SP2, and possibly earlier versions, allow remote attackers to execute arbitrary code via crafted compressed data. CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2007-6426 2018-10-16 06:53 2008-02-21 Show GitHub Exploit DB Packet Storm
284662 - x.org tog-cup
xserver 		The ProcGetReservedColormapEntries function in the TOG-CUP extension in X.Org Xserver before 1.4.1 allows context-dependent attackers to read the contents of arbitrary memory locations via a request … NVD-CWE-Other
CVE-2007-6428 2018-10-16 06:53 2008-01-19 Show GitHub Exploit DB Packet Storm
284663 - x.org evi
mit-shm
xserver 		Multiple integer overflows in X.Org Xserver before 1.4.1 allow context-dependent attackers to execute arbitrary code via (1) a GetVisualInfo request containing a 32-bit value that is improperly used … CWE-189
CWE-362
Numeric Errors
Race Condition 		CVE-2007-6429 2018-10-16 06:53 2008-01-19 Show GitHub Exploit DB Packet Storm
284664 - real_time_logic barracudadrive_web_server
barracudadrive_web_server_home_server 		BarracudaDrive Web Server before 3.8 allows remote attackers to read the source code for web scripts by appending a (1) + (plus), (2) . (dot), or (3) %80 and similar characters to the file name in th… CWE-20
 Improper Input Validation  		CVE-2007-6314 2018-10-16 06:52 2007-12-12 Show GitHub Exploit DB Packet Storm
284665 - real_time_logic barracudadrive_web_server
barracudadrive_web_server_home_server 		Group Chat in BarracudaDrive Web Server before 3.8 allows remote authenticated users to cause a denial of service (crash) via a HTTP request to /eh/chat.ehintf/C. that does not contain a Connection I… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2007-6315 2018-10-16 06:52 2007-12-12 Show GitHub Exploit DB Packet Storm
284666 - real_time_logic barracudadrive_web_server
barracudadrive_web_server_home_server 		Cross-site scripting (XSS) vulnerability in BarracudaDrive Web Server before 3.8 allows remote attackers to inject arbitrary web script or HTML via the URI path in an HTTP GET request, which is activ… CWE-79
Cross-site Scripting 		CVE-2007-6316 2018-10-16 06:52 2007-12-12 Show GitHub Exploit DB Packet Storm
284667 - real_time_logic barracudadrive_web_server
barracudadrive_web_server_home_server 		Multiple directory traversal vulnerabilities in BarracudaDrive Web Server before 3.8 allow (1) remote attackers to read arbitrary files via certain ..\ (dot dot backslash) sequences in the URL path, … CWE-22
Path Traversal 		CVE-2007-6317 2018-10-16 06:52 2007-12-12 Show GitHub Exploit DB Packet Storm
284668 - wordpress wordpress SQL injection vulnerability in wp-includes/query.php in WordPress 2.3.1 and earlier allows remote attackers to execute arbitrary SQL commands via the s parameter, when DB_CHARSET is set to (1) Big5, … CWE-89
SQL Injection 		CVE-2007-6318 2018-10-16 06:52 2007-12-12 Show GitHub Exploit DB Packet Storm
284669 - lyris list_manager Multiple unspecified vulnerabilities in Lyris ListManager 8.x before 8.95d, 9.2 before 9.2c, and 9.3 before 9.3b allow remote attackers to (1) gain list administrator privileges or (2) access arbitra… NVD-CWE-noinfo
CWE-264
Permissions, Privileges, and Access Controls 		CVE-2007-6319 2018-10-16 06:52 2008-02-20 Show GitHub Exploit DB Packet Storm
284670 - roundcube webmail Cross-site scripting (XSS) vulnerability in RoundCube webmail 0.1rc2, 2007-12-09, and earlier versions, when using Internet Explorer, allows remote attackers to inject arbitrary web script or HTML vi… CWE-79
Cross-site Scripting 		CVE-2007-6321 2018-10-16 06:52 2007-12-12 Show GitHub Exploit DB Packet Storm