Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
233071 7.5 危険 my123tkshop - 123tkShop の shop/mainfile.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2007-6458 2012-09-25 16:59 2007-12-19 Show GitHub Exploit DB Packet Storm
233072 5 警告 Netwin Ltd - SurgeMail の Web メール機能におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2007-6457 2012-09-25 16:59 2007-12-19 Show GitHub Exploit DB Packet Storm
233073 4.3 警告 Mambo Foundation - Mambo の index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2007-6455 2012-09-25 16:59 2007-12-19 Show GitHub Exploit DB Packet Storm
233074 10 危険 peercast - PeerCast の servhs.cpp におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2007-6454 2012-09-25 16:59 2007-12-19 Show GitHub Exploit DB Packet Storm
233075 9.3 危険 Novell - Novell GroupWise におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2007-6435 2012-09-25 16:59 2007-12-18 Show GitHub Exploit DB Packet Storm
233076 7.5 危険 レッドハット - JBoss Seam の org.jboss.seam.framework.Query クラスにおける任意の EJBQL コマンドを実行される脆弱性 CWE-20
不適切な入力確認
CVE-2007-6433 2012-09-25 16:59 2007-12-18 Show GitHub Exploit DB Packet Storm
233077 5 警告 IBM - IBM Tivoli Provisioning Manager Express における username を列挙される脆弱性 CWE-200
情報漏えい
CVE-2007-6408 2012-09-25 16:59 2007-12-17 Show GitHub Exploit DB Packet Storm
233078 2.1 注意 geert moernaut - Geert Moernaut LSrunasE などにおける平文のパスワードを取得される脆弱性 CWE-255
証明書・パスワード管理
CVE-2007-6340 2012-09-25 16:59 2008-02-4 Show GitHub Exploit DB Packet Storm
233079 4.3 警告 IBM - IBM Tivoli Provisioning Manager Express におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2007-6407 2012-09-25 16:59 2007-12-17 Show GitHub Exploit DB Packet Storm
233080 6.5 警告 myupb - Flat PHP Board の index.php におけるカレントユーザアカウントのパスワードを取得される脆弱性 CWE-255
証明書・パスワード管理
CVE-2007-6399 2012-09-25 16:59 2007-12-17 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 26, 2026, 4:08 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
300491 - knowledgetree_document_management knowledgetree_document_management KnowledgeTree Document Management (aka KnowledgeTree Open Source) before STABLE 3.3.7 does not require a password for an unregistered user, when the user exists in Active Directory, which allows remo… NVD-CWE-Other
CVE-2007-2849 2017-07-29 10:31 2007-05-25 Show GitHub Exploit DB Packet Storm
300492 - citrix access_essentials
metaframe
The Session Reliability Service (XTE) in Citrix MetaFrame Presentation Server 3.0, Presentation Server 4.0, and Access Essentials 1.0 and 1.5, allows remote attackers to bypass network security polic… NVD-CWE-Other
CVE-2007-2850 2017-07-29 10:31 2007-05-25 Show GitHub Exploit DB Packet Storm
300493 - citrix access_essentials
metaframe
The vendor has addressed this issue with the following product updates: MetaFrame Presentation Server 3.0 for Windows 2000 Server: EN - http://support.citrix.com/article/CTX112818 FR - http://su… NVD-CWE-Other
CVE-2007-2850 2017-07-29 10:31 2007-05-25 Show GitHub Exploit DB Packet Storm
300494 - dart dart_ziplite_compression Buffer overflow in a certain ActiveX control in DartZipLite.dll 1.8.5.3 in Dart ZipLite Compression for ActiveX allows user-assisted remote attackers to execute arbitrary code via a long first argume… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2007-2855 2017-07-29 10:31 2007-05-25 Show GitHub Exploit DB Packet Storm
300495 - phppgadmin phppgadmin Cross-site scripting (XSS) vulnerability in sqledit.php in phpPgAdmin 4.1.1 allows remote attackers to inject arbitrary web script or HTML via the server parameter. NVD-CWE-Other
CVE-2007-2865 2017-07-29 10:31 2007-05-26 Show GitHub Exploit DB Packet Storm
300496 - tcl_tk tcl_tk Buffer overflow in tcl/win/tclWinReg.c in Tcl (Tcl/Tk) before 8.5a6 allows local users to gain privileges via long registry key paths. NVD-CWE-Other
CVE-2007-2877 2017-07-29 10:31 2007-05-30 Show GitHub Exploit DB Packet Storm
300497 - sun java_system_web_proxy_server Multiple stack-based buffer overflows in the SOCKS proxy support (sockd) in Sun Java Web Proxy Server before 4.0.5 allow remote attackers to execute arbitrary code via crafted packets during protocol… NVD-CWE-Other
CVE-2007-2881 2017-07-29 10:31 2007-05-30 Show GitHub Exploit DB Packet Storm
300498 - nortel communications_server Unspecified vulnerability in the Nortel CS 1000 M media card in Enterprise VoIP-Core-CS 1000E, 1000M, and 1000S 04.50W before 20070523 in Meridian/CS 1000 allows remote attackers to cause a denial of… NVD-CWE-Other
CVE-2007-2886 2017-07-29 10:31 2007-05-30 Show GitHub Exploit DB Packet Storm
300499 - asp-nuke asp-nuke Cross-site scripting (XSS) vulnerability in news.asp in ASP-Nuke 2.0.7 allows remote attackers to inject arbitrary web script or HTML via the id parameter. NOTE: the provenance of this information i… NVD-CWE-Other
CVE-2007-2892 2017-07-29 10:31 2007-05-30 Show GitHub Exploit DB Packet Storm
300500 - lead_technologies leadtools_raster_dialog_file_object Buffer overflow in a certain ActiveX control in LTRDF14e.DLL 14.5.0.44 in LeadTools Raster Dialog File Object allows remote attackers to execute arbitrary code via a long Directory property value. NVD-CWE-Other
CVE-2007-2895 2017-07-29 10:31 2007-05-30 Show GitHub Exploit DB Packet Storm