Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
231321 9.3 危険 LogMeIn, Inc. - LogMeIn Remote Access Utility ActiveX control におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2008-7053 2012-09-25 17:27 2009-08-24 Show GitHub Exploit DB Packet Storm
231322 7.5 危険 natterchat - NatterChat の login.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-7049 2012-09-25 17:27 2009-08-24 Show GitHub Exploit DB Packet Storm
231323 4.3 警告 natterchat - NatterChat におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-7048 2012-09-25 17:27 2009-08-24 Show GitHub Exploit DB Packet Storm
231324 7.5 危険 natterchat - NatterChat における認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2008-7047 2012-09-25 17:27 2009-08-24 Show GitHub Exploit DB Packet Storm
231325 7.5 危険 MAXDev - PHP-Nuke 用の My_eGallery モジュールにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-7038 2012-09-25 17:27 2009-08-24 Show GitHub Exploit DB Packet Storm
231326 7.5 危険 itn - Windows Vista 用の ITN News Gadget の Sidebar ガジェットにおける任意のコマンドを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2008-7037 2012-09-25 17:27 2009-08-24 Show GitHub Exploit DB Packet Storm
231327 7.5 危険 libra file manager - Libra File Manager における権限を取得される脆弱性 CWE-287
不適切な認証 		CVE-2008-7027 2012-09-25 17:27 2009-08-21 Show GitHub Exploit DB Packet Storm
231328 2.1 注意 マカフィー - McAfee SafeBoot Device Encryption における重要な情報を取得される脆弱性 CWE-310
暗号の問題 		CVE-2008-7020 2012-09-25 17:27 2009-08-21 Show GitHub Exploit DB Packet Storm
231329 9 危険 Cobbler project - Cobbler の web インターフェースにおける Python コードを実行される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-6954 2012-09-25 17:27 2009-08-12 Show GitHub Exploit DB Packet Storm
231330 4.3 警告 icdevgroup - Interchange におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-6945 2012-09-25 17:27 2009-08-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 20, 2026, 4:09 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
298791 - openrat openrat_cms OpenRat CMS 0.8-beta1 and earlier allows remote attackers to obtain sensitive information via a request containing an XSS sequence in the action parameter to index.php, which reveals the path in an e… NVD-CWE-Other
CVE-2007-4141 2017-07-29 10:32 2007-08-3 Show GitHub Exploit DB Packet Storm
298792 - ibm lotus_sametime Cross-site scripting (XSS) vulnerability in IBM Lotus Sametime Server 7.5.1 before 20070731 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving a crafted … NVD-CWE-Other
CVE-2007-4142 2017-07-29 10:32 2007-08-4 Show GitHub Exploit DB Packet Storm
298793 - wordpress wordpress Multiple cross-site scripting (XSS) vulnerabilities in WordPress 2.2.1 allow remote authenticated administrators to inject arbitrary web script or HTML via (1) the Options Database Table in the Admin… NVD-CWE-Other
CVE-2007-4153 2017-07-29 10:32 2007-08-4 Show GitHub Exploit DB Packet Storm
298794 - wordpress wordpress SQL injection vulnerability in options.php in WordPress 2.2.1 allows remote authenticated administrators to execute arbitrary SQL commands via the page_options parameter to (1) options-general.php, (… NVD-CWE-Other
CVE-2007-4154 2017-07-29 10:32 2007-08-4 Show GitHub Exploit DB Packet Storm
298795 - sun java_system_web_server CRLF injection vulnerability in the redirect feature in Sun Java System Web Server 6.1 and 7.0 before 20070802, when the redirect Server Application Function (SAF) uses the url-prefix parameter and e… NVD-CWE-Other
CVE-2007-4164 2017-07-29 10:32 2007-08-7 Show GitHub Exploit DB Packet Storm
298796 - wordpress unamed_theme
unamed_theme_se 		Cross-site scripting (XSS) vulnerability in index.php in the Unnamed theme 1.217, and Special Edition (SE) 1.02, before 20070804 for WordPress allows remote attackers to inject arbitrary web script o… NVD-CWE-Other
CVE-2007-4166 2017-07-29 10:32 2007-08-7 Show GitHub Exploit DB Packet Storm
298797 - open_webmail open_webmail Multiple cross-site scripting (XSS) vulnerabilities in Open Webmail (OWM) 2.52 20060831 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) searchtype, (2) longpage,… CWE-79
Cross-site Scripting 		CVE-2007-4172 2017-07-29 10:32 2007-08-7 Show GitHub Exploit DB Packet Storm
298798 - tor tor Tor before 0.1.2.16, when ControlPort is enabled, does not properly restrict commands to localhost port 9051, which allows remote attackers to modify the torrc configuration file, compromise anonymit… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2007-4174 2017-07-29 10:32 2007-08-7 Show GitHub Exploit DB Packet Storm
298799 - openrat openrat_cms Multiple cross-site scripting (XSS) vulnerabilities in index.php in OpenRat CMS 0.8-beta1 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) subaction and (2) actio… NVD-CWE-Other
CVE-2007-4175 2017-07-29 10:32 2007-08-8 Show GitHub Exploit DB Packet Storm
298800 - eqdkp eqdkp_plus Multiple unspecified vulnerabilities in EQDKP Plus before 0.4.4.5 have unknown impact and attack vectors. NVD-CWE-Other
CVE-2007-4176 2017-07-29 10:32 2007-08-8 Show GitHub Exploit DB Packet Storm