Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
229591 4.3 警告 Drupal - Drupal 用 FAQ モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-1646 2012-09-27 16:24 2012-02-22 Show GitHub Exploit DB Packet Storm
229592 4.3 警告 Ulli Horlacher - Frams' Fast File EXchange の fup におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-1293 2012-09-27 16:23 2012-09-25 Show GitHub Exploit DB Packet Storm
229593 4.3 警告 notmuchmail.org - Notmuch の emacs/notmuch-mua.el における任意のファイルを読まれる脆弱性 CWE-20
不適切な入力確認
CVE-2012-1103 2012-09-27 16:22 2012-02-3 Show GitHub Exploit DB Packet Storm
229594 4.3 警告 OSClass - OSClass におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-0974 2012-09-27 16:20 2012-01-16 Show GitHub Exploit DB Packet Storm
229595 7.5 危険 OSClass - OSClass における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2012-0973 2012-09-27 16:19 2012-01-16 Show GitHub Exploit DB Packet Storm
229596 4.3 警告 Ulli Horlacher - Frams' Fast File EXchange の fup におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-0869 2012-09-27 16:15 2011-02-15 Show GitHub Exploit DB Packet Storm
229597 2.1 注意 Adiscon - rsyslog の imfile モジュールにおける整数オーバーフローの脆弱性 CWE-189
数値処理の問題
CVE-2011-4623 2012-09-27 16:14 2011-02-17 Show GitHub Exploit DB Packet Storm
229598 7.5 危険 The phpMyAdmin Project - phpMyAdmin における任意の PHP コードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2012-5159 2012-09-27 16:13 2012-09-25 Show GitHub Exploit DB Packet Storm
229599 7.5 危険 Horde - 複数の Horde Project 製品における任意の PHP コードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2012-0209 2012-09-27 16:13 2012-02-13 Show GitHub Exploit DB Packet Storm
229600 9 危険 IBM - IBM Informix Dynamic Server におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2012-3334 2012-09-27 16:12 2012-09-25 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 20, 2026, 4:09 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
298661 - drupal forward_module The Forward module before 4.7-1.1 and 5.x before 5.x-1.0 for Drupal allows remote attackers to read restricted posts in (1) Organic Groups, (2) Taxonomy Access Control, (3) Taxonomy Access Lite, and … NVD-CWE-Other
CVE-2007-3690 2017-07-29 10:32 2007-07-12 Show GitHub Exploit DB Packet Storm
298662 - av_scripts av_tutorial_script Multiple SQL injection vulnerabilities in changePW.php in AV Tutorial Script (avtutorial) 1.0, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) … NVD-CWE-Other
CVE-2007-3691 2017-07-29 10:32 2007-07-12 Show GitHub Exploit DB Packet Storm
298663 - av_scripts av_tutorial_script Successful exploitation allows e.g. to change the administrator's password but requires that "magic_quotes_gpc" is disabled. NVD-CWE-Other
CVE-2007-3691 2017-07-29 10:32 2007-07-12 Show GitHub Exploit DB Packet Storm
298664 - kddi ezfactory_download_cgi Directory traversal vulnerability in download.cgi in EZFactory KDDI Download CGI 1.x allows remote attackers to read and download arbitrary files via a .. (dot dot) in the name parameter. NVD-CWE-Other
CVE-2007-3692 2017-07-29 10:32 2007-07-12 Show GitHub Exploit DB Packet Storm
298665 - sun java_system_access_manager Sun Java System Access Manager (formerly Java System Identity Server) before 20070710, when the message debug level is configured in the com.iplanet.services.debug.level property in AMConfig.properti… NVD-CWE-Other
CVE-2007-3700 2017-07-29 10:32 2007-07-12 Show GitHub Exploit DB Packet Storm
298666 - silc silc_client
silc_toolkit
Buffer overflow in lib/silcclient/client_notify.c of SILC Client and SILC Toolkit before 1.1.2 allows remote attackers to cause a denial of service via "NICK_CHANGE" notifications. NVD-CWE-Other
CVE-2007-3728 2017-07-29 10:32 2007-07-13 Show GitHub Exploit DB Packet Storm
298667 - hp openvms The default configuration of the POP server in TCP/IP Services 5.6 for HP OpenVMS 8.3 generates different responses depending on whether or not a username is valid, which allows remote attackers to e… NVD-CWE-Other
CVE-2007-3729 2017-07-29 10:32 2007-07-13 Show GitHub Exploit DB Packet Storm
298668 - apple safari WebKit in Apple Safari 3 Beta before Update 3.0.3, and iPhone before 1.0.1, does not properly handle the interaction between International Domain Name (IDN) support and Unicode fonts, which allows re… CWE-59
CWE-16
Link Following
Configuration
CVE-2007-3742 2017-07-29 10:32 2007-08-4 Show GitHub Exploit DB Packet Storm
298669 - apple safari Stack-based buffer overflow in bookmark handling in Apple Safari 3 Beta before Update 3.0.3 on Windows allows user-assisted remote attackers to cause a denial of service (application crash) or execut… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2007-3743 2017-07-29 10:32 2007-08-4 Show GitHub Exploit DB Packet Storm
298670 - apple mac_os_x
mac_os_x_server
Heap-based buffer overflow in the UPnP IGD (Internet Gateway Device Standardized Device Control Protocol) implementation in mDNSResponder on Apple Mac OS X 10.4.10 before 20070731 allows network-adja… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2007-3744 2017-07-29 10:32 2007-08-3 Show GitHub Exploit DB Packet Storm