Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
229731 6.8 警告 InsaneVisions - AdaptCMS の inc/smarty/libs/init.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2010-2618 2012-09-25 17:38 2010-07-2 Show GitHub Exploit DB Packet Storm
229732 4.3 警告 paul mcenery - PHP Bible Search の bible.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-2617 2012-09-25 17:38 2010-07-2 Show GitHub Exploit DB Packet Storm
229733 7.5 危険 paul mcenery - PHP Bible Search の bible.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-2616 2012-09-25 17:38 2010-07-2 Show GitHub Exploit DB Packet Storm
229734 4.3 警告 Jextensions - Joomla! 用の com_awd_song コンポーネントにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-2613 2012-09-25 17:38 2010-07-2 Show GitHub Exploit DB Packet Storm
229735 2.1 注意 ヒューレット・パッカード - HP OpenVMS Auditing 機能における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2010-2612 2012-09-25 17:38 2010-07-2 Show GitHub Exploit DB Packet Storm
229736 7.5 危険 i-netsolution - i-netsolution Job Search Engine における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-2611 2012-09-25 17:38 2010-07-2 Show GitHub Exploit DB Packet Storm
229737 6.8 警告 KDE project - KDE SC の RLE 解凍機能におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2010-2575 2012-09-25 17:38 2010-08-25 Show GitHub Exploit DB Packet Storm
229738 2.1 注意 MantisBT Group - MantisBT の manage_proj_cat_add.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-2574 2012-09-25 17:38 2010-08-4 Show GitHub Exploit DB Packet Storm
229739 5 警告 OpenTTD - OpenTTD の network/network_command.cpp におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2010-2534 2012-09-25 17:38 2010-06-27 Show GitHub Exploit DB Packet Storm
229740 10 危険 linux-ipv6 - UMIP の mipv6 デーモンにおけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2010-2523 2012-09-25 17:38 2010-07-6 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 20, 2026, 4:09 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
299041 - bea weblogic_server The HttpClusterServlet and HttpProxyServlet in BEA WebLogic Express and WebLogic Server 6.1 through SP7, 7.0 through SP7, 8.1 through SP5, 9.0, and 9.1, when SecureProxy is enabled, may process "exte… NVD-CWE-Other
CVE-2007-2695 2017-07-29 10:31 2007-05-16 Show GitHub Exploit DB Packet Storm
299042 - bea weblogic_server The JMS Server in BEA WebLogic Server 6.1 through SP7, 7.0 through SP6, and 8.1 through SP5 enforces security access policies on the front end, which allows remote attackers to access protected queue… NVD-CWE-Other
CVE-2007-2696 2017-07-29 10:31 2007-05-16 Show GitHub Exploit DB Packet Storm
299043 - bea weblogic_server The embedded LDAP server in BEA WebLogic Express and WebLogic Server 7.0 through SP6, 8.1 through SP5, 9.0, and 9.1, when in certain configurations, does not limit or audit failed authentication atte… NVD-CWE-Other
CVE-2007-2697 2017-07-29 10:31 2007-05-16 Show GitHub Exploit DB Packet Storm
299044 - bea weblogic_server The Administration Console in BEA WebLogic Server 9.0 may show plaintext Web Service attributes during configuration creation, which allows remote attackers to obtain sensitive credential information. NVD-CWE-Other
CVE-2007-2698 2017-07-29 10:31 2007-05-16 Show GitHub Exploit DB Packet Storm
299045 - bea weblogic_server The vendor has issued product updates to addresses these issues: BEA WebLogic Server patches: http://commerce.bea.com/showallversions.jsp?family=WLS BEA WebLogic Platform patches: http://comm… NVD-CWE-Other
CVE-2007-2698 2017-07-29 10:31 2007-05-16 Show GitHub Exploit DB Packet Storm
299046 - bea weblogic_server The WLST script generated by the configToScript command in BEA WebLogic Express and WebLogic Server 9.0 and 9.1 does not encrypt certain attributes in configuration files when creating a new domain, … NVD-CWE-Other
CVE-2007-2700 2017-07-29 10:31 2007-05-16 Show GitHub Exploit DB Packet Storm
299047 - bea weblogic_server The JMS Message Bridge in BEA WebLogic Server 7.0 through SP7 and 8.1 through Service Pack 6, when configured without a username and password, or when the connection URL is not defined, allows remote… NVD-CWE-Other
CVE-2007-2701 2017-07-29 10:31 2007-05-16 Show GitHub Exploit DB Packet Storm
299048 - bea weblogic_server The vendor has released a product update to address this issue: ftp://anonymous:dev2dev%40bea.com@ftpna.bea.com/pub/releases/security/CR281022_81sp6_rarfiles.jar NVD-CWE-Other
CVE-2007-2701 2017-07-29 10:31 2007-05-16 Show GitHub Exploit DB Packet Storm
299049 - bea weblogic_server BEA WebLogic Server 9.0 through 9.2 allows remote attackers to cause a denial of service (SSL port unavailability) by accessing a half-closed SSL socket. NVD-CWE-Other
CVE-2007-2704 2017-07-29 10:31 2007-05-16 Show GitHub Exploit DB Packet Storm
299050 - bea weblogic_integration
weblogic_workshop 		Directory traversal vulnerability in the Test View Console in BEA WebLogic Integration 9.2 before SP1 and WebLogic Workshop 8.1 SP2 through SP6, when "deployed in an exploded format," allows remote a… NVD-CWE-Other
CVE-2007-2705 2017-07-29 10:31 2007-05-16 Show GitHub Exploit DB Packet Storm