Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
230501	9.3	危険	Nullsoft	-	Winamp の IN_MOD.DLL における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2009-3997	2012-09-25 17:38	2009-12-15	Show	GitHub Exploit DB Packet Storm

230502	4.3	警告	Mozilla Foundation	-	Mozilla Firefox の libpr0n におけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2009-3978	2012-09-25 17:38	2009-11-5	Show	GitHub Exploit DB Packet Storm

230503	5	警告	ヒューレット・パッカード	-	HP OV NNM の ActiveDom.ocx の特定の ActiveX コントロールにおけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2009-3977	2012-09-25 17:38	2009-11-17	Show	GitHub Exploit DB Packet Storm

230504	9.3	危険	labtam-inc	-	Labtam ProFTP におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2009-3976	2012-09-25 17:38	2009-11-18	Show	GitHub Exploit DB Packet Storm

230505	6.8	警告	moagallery	-	Moa Gallery の index.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2009-3975	2012-09-25 17:38	2009-11-18	Show	GitHub Exploit DB Packet Storm

230506	7.5	危険	Invision Power Services, Inc	-	IP.Board における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2009-3974	2012-09-25 17:38	2009-08-18	Show	GitHub Exploit DB Packet Storm

230507	7.5	危険	jtips	-	Joomla! 用の jTips コンポーネントにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2009-3971	2012-09-25 17:38	2009-11-18	Show	GitHub Exploit DB Packet Storm

230508	7.5	危険	ITechScripts	-	ITechBids における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2009-3968	2012-09-25 17:38	2009-11-18	Show	GitHub Exploit DB Packet Storm

230509	7.5	危険	maniacomputer	-	New 5 star Rating の rating.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2009-3965	2012-09-25 17:38	2009-11-18	Show	GitHub Exploit DB Packet Storm

230510	7.5	危険	Ninja Forge	-	NinjaMonials コンポーネントにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2009-3964	2012-09-25 17:38	2009-11-18	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:April 26, 2026, 4:08 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
284181	-	oracle	application_server	Directory traversal vulnerability in the EmChartBean server side component for Oracle Application Server 10g allows remote attackers to read arbitrary files via unknown vectors, probably "\.." sequen…	NVD-CWE-Other	CVE-2007-0222	2018-10-17 01:31	2007-01-17	Show	GitHub Exploit DB Packet Storm

284182	-	uniforum	uniforum	SQL injection vulnerability in wbsearch.aspx in uniForum 4 and earlier allows remote attackers to execute arbitrary SQL commands via the "by User" field (aka the TXbyuser parameter).	NVD-CWE-Other	CVE-2007-0226	2018-10-17 01:31	2007-01-13	Show	GitHub Exploit DB Packet Storm

284183	-	slocate	slocate	slocate 3.1 does not properly manage database entries that specify names of files in protected directories, which allows local users to obtain the names of private files. NOTE: another researcher re…	NVD-CWE-Other	CVE-2007-0227	2018-10-17 01:31	2007-01-13	Show	GitHub Exploit DB Packet Storm

284184	-	jshop_e-commerce	jshop_server	PHP remote file inclusion vulnerability in routines/fieldValidation.php in Jshop Server 1.3 allows remote attackers to execute arbitrary PHP code via a URL in the jssShopFileSystem parameter.	NVD-CWE-Other	CVE-2007-0232	2018-10-17 01:31	2007-01-13	Show	GitHub Exploit DB Packet Storm

284185	-	openoffice	openoffice	Stack-based buffer overflow in filter\starcalc\scflt.cxx in the StarCalc parser in OpenOffice.org (OOo) Office Suite before 2.2, and 1.x before 1.1.5 Patch, allows user-assisted remote attackers to e…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2007-0238	2018-10-17 01:31	2007-03-22	Show	GitHub Exploit DB Packet Storm

284186	-	citrix	access_gateway	The web portal interface in Citrix Access Gateway (aka Citrix Advanced Access Control) before Advanced Edition 4.5 HF1 places a session ID in the URL, which allows context-dependent attackers to hija…	CWE-200 Information Exposure	CVE-2007-0011	2018-10-17 01:30	2007-11-6	Show	GitHub Exploit DB Packet Storm

284187	-	sun	jre	Sun JRE 5.0 before update 14 allows remote attackers to cause a denial of service (Internet Explorer crash) via an object tag with an encoded applet and an undefined name attribute, which triggers a …	CWE-20 Improper Input Validation	CVE-2007-0012	2018-10-17 01:30	2008-01-10	Show	GitHub Exploit DB Packet Storm

284188	-	sun	chainkey_java_code_protection	ChainKey Java Code Protection allows attackers to decompile Java class files via a Java class loader with a modified defineClass method that saves the bytecode to a file before it is passed to the JV…	CWE-310 Cryptographic Issues	CVE-2007-0014	2018-10-17 01:30	2007-01-17	Show	GitHub Exploit DB Packet Storm

284189	-	altdo americanshareware audio_edit_magic bearshare cdburnerxp cheetahburner code-it_softare dandans_digital_media_products digital_borneo easy_ringtone_maker expstudio iaudiosoft.com imesh.com j_hepple_products joshua_mediasoft magicvideosoftare mcfunsoft mediatox movavi mp3-soft mystik_media_products nctsoft_products nextlevel_systems quikscribe recordnrip rmbsoft roemer_software sienzo smart_media_systems softdiv_softare virtual_cd xrlly_software xwaver.com	convert_mp3_master mp3_record_and_edit_audio_master mp3_wav_converter audio_edit_magic bearshare cdburnerxp_pro cheetah_cd_burner cheetah_dvd_burner abasic_editor wave_mp3_…	Stack-based buffer overflow in the NCTAudioFile2.AudioFile ActiveX control (NCTAudioFile2.dll), as used by multiple products, allows remote attackers to execute arbitrary code via a long argument to …	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2007-0018	2018-10-17 01:30	2007-01-25	Show	GitHub Exploit DB Packet Storm

284190	-	microsoft	excel office excel_viewer works	Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2, 2004 for Mac, and v.X for Mac allows remote attackers to execute arbitrary code via malformed IMDATA records that trigger memory corruption.	NVD-CWE-Other	CVE-2007-0027	2018-10-17 01:30	2007-01-10	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed